FCC ID: GKM-XT2594 Asset Tracking Device

 

XT2500 Product Manual XT2500 Product Manual Firmware Version: 1188GA1 Revised August 12, 2022 Copyright 2022 Sensata Technologies, Inc. Page 1 | 271 XT2500 Product Manual TABLE OF CONTENTS 1. Revision History 1.1. Firmware 2. Functional Description 2.1. Mechanical 2.2. Overview 3. General Operation 4. Interfaces 4.1. Harpsiobox Connector 4.2. XT2500 LED Behavior 4.3. I/O Box LED Behavior 5. Power Management 5.1. Power Stages 5.2. Power Stage Transitions 5.3. Power State Current Draw Averages 6. Protocol Specification 6.1. CoAP Server Interaction 7. Event Description and Default Mask 7.1. [1] Ignition On 7.2. [2] Ignition Off 7.3. [3] Ignition On Periodic 7.4. [4] Ignition Off Periodic 7.5. [5] Power Up 7.6. [6] Power Up GPS 7.7. [7] Power Up GSM 7.8. [8] Low Battery 7.9. [9] Acceleration 15 15 16 16 16 17 18 18 18 19 20 20 20 21 22 22 27 27 27 27 27 28 28 28 28 28 Copyright 2022 Sensata Technologies, Inc. Page 2 | 271 XT2500 Product Manual 7.10. [10] Acceleration VBUS 7.11. [11] Acceleration GPS 7.12. [12] Stage 0 Periodic 7.13. [13] Stage 1 Periodic 7.14. [14] Stage 2 Periodic 7.15. [15] Battery Disconnect 7.16. [16] Battery Reconnect 7.17. [17] Battery Disconnect Periodic 7.18. [18] Direction Change 7.19. [19] Speed VBUS 7.20. [20] Speed GPS 7.21. [21] Geofence Crossing 7.22. [23] Odometer VBUS 7.23. [24] Odometer GPS 7.24. [25] Input 1 Set 7.25. [26] Input 1 Clear 7.26. [27] Input 2 Set 7.27. [28] Input 2 Clear 7.28. [29] Input 3 Set 7.29. [30] Input 3 Clear 7.30. [32] Output Manual Override 7.31. [33] Diagnostics 7.32. [34] Movement Start 7.33. [35] Movement Stop 7.34. [36] System Report 0 7.35. [37] System Information 7.36. [38]Park 28 29 29 29 29 29 30 30 30 30 30 31 31 31 31 31 32 32 32 32 33 33 33 33 33 34 34 Copyright 2022 Sensata Technologies, Inc. Page 3 | 271 XT2500 Product Manual 7.37. [39] Idle Start 7.38. [40] Idle Stop 7.39. [41] Idle Periodic 7.40. [42] Power Up Best Time 7.41. [43] ADCThreshold 7.42. [44] ADCPeriodic 7.43. [48] Motion 7.44. [49] No-Motion 7.45. [50] Motion Periodic 7.46. [51] No-Motion Periodic 7.47. [52] Powerstage Transition 7.48. [56] Acceleration Positive X Threshold 7.49. [57] Acceleration Negative X Threshold 7.50. [58] Acceleration Positive Y Threshold 7.51. [59] Acceleration Negative Y Threshold 7.52. [60] Acceleration Orientation 7.53. [61] Faulty Alternator 7.54. [65] Scantool Detection 7.55. [68] Input 4 Set 7.56. [69] Input 4 Clear 7.57. [71] Snapshot 7.58. [72] DTC 8. Parameter List 8.1. Parameter 0: EV (Event Identifier) 8.2. Parameter 2: D (Date) 8.3. Parameter 3: TZ (Time Zone Offset) 8.4. Parameter 4: LT (Latitude) 34 34 35 35 35 35 35 36 36 36 36 36 36 37 37 37 37 37 38 38 38 38 39 42 44 44 44 Copyright 2022 Sensata Technologies, Inc. Page 4 | 271 XT2500 Product Manual 8.5. Parameter 5: LN (Longitude) 8.6. Parameter 6: AL (Altitude) 8.7. Parameter 7: SPT (VBUS Speed) 8.8. Parameter 8: GSPT (GPS Speed) 8.9. Parameter 9: HD (GPS Heading) 8.10. Parameter 10: SV (GPS Satellites) 8.11. Parameter 11: HP (GPS PDOP) 8.12. Parameter 12: BV (Battery Voltage) 8.13. Parameter 13: CQ (Cellular Signal Quality) 8.14. Parameter 14: MI (Virtual Odometer GPS) 8.15. Parameter 15: MG (Vehicle Fuel Efficiency) 8.16. Parameter 16: GS (GPS Lock Status) 8.17. Parameter 17: GT (GPS Time Since Last Lock) 8.18. Parameter 18: FL (Fuel Level) 8.19. Parameter 19: XY (Geofence Status) 8.20. Parameter 20: FWM (Main Firmware Version String) 8.21. Parameter 23: LGTM (Last Gasp Timestamp) 8.22. Parameter 24: AXYZ (Accelerometer XYZ Vectors) 8.23. Parameter 25: VN (Vehicle Identification Number) 8.24. Parameter 26: DTC (Vehicle Bus Diagnostic Trouble Codes) 8.25. Parameter 28: FP (Fingerprint) 8.26. Parameter 29: TID (Trip Identifier) 8.27. Parameter 30: MIL (Malfunction Indicator Lamp) 8.28. Parameter 31: RM (RPM) 8.29. Parameter 32: IT (Trip Idle Time) 8.30. Parameter 33: SI (SIM ICCID) 8.31. Parameter 34: BN (Boot Count) 45 45 45 46 46 46 47 48 48 49 49 50 50 51 51 51 52 52 52 53 55 56 56 57 57 58 58 Copyright 2022 Sensata Technologies, Inc. Page 5 | 271 XT2500 Product Manual 8.32. Parameter 35: PN (Power-loss Count) 8.33. Parameter 36: CI (Cellular Network Information) 8.34. Parameter 37: AC (Acceleration) 8.35. Parameter 39: HBE (Device Reset Reason) 8.36. Parameter 40: MTN (Maintenance Log) 8.37. Parameter 41: IM (Cellular IMEI) 8.38. Parameter 42: HACC (GPS Horizontal Accuracy Estimate) 8.39. Parameter 43: OB (Vehicle Bus Protocol) 8.40. Parameter 44: MID (Manufacturer ID) 8.41. Parameter 45: OMI (Virtual Odometer VBUS) 8.42. Parameter 46: CNT (Trip Count) 8.43. Parameter 47: CH (Configuration Hash) 8.44. Parameter 48: CT (Cellular Network Time) 8.45. Parameter 49: UT (Device Uptime) 8.46. Parameter 50: BT (Best Time) 8.47. Parameter 51: IS (Ignition Source) 8.48. Parameter 52: ACV (Acceleration VBUS) 8.49. Parameter 53: ACC (Accelerometer) 8.50. Parameter 55: CP0 (Custom PID 0) 8.51. Parameter 56: CP1 (Custom PID 1) 8.52. Parameter 57: CP2 (Custom PID 2) 8.53. Parameter 58: CP3 (Custom PID 3) 8.54. Parameter 59: CP4 (Custom PID 4) 8.55. Parameter 60: CP5 (Custom PID 5) 8.56. Parameter 61: CP6 (Custom PID 6) 8.57. Parameter 62: CP7 (Custom PID 7) 8.58. Parameter 63: CP8 (Custom PID 8) 59 59 61 62 62 63 64 64 65 66 66 67 67 67 68 69 69 70 70 70 71 71 71 72 72 72 73 Copyright 2022 Sensata Technologies, Inc. Page 6 | 271 XT2500 Product Manual 8.59. Parameter 64: CP9 (Custom PID 9) 8.60. Parameter 65: MPG (Miles Per Gallon) 8.61. Parameter 67: IN1A (Input 1 Set Count) 8.62. Parameter 68: IN2S (Input 2 State) 8.63. Parameter 69: IN2A (Input 2 Set Count) 8.64. Parameter 70: IN3S (Input 3 State) 8.65. Parameter 71: IN3A (Input 3 Set Count) 8.66. Parameter 72: IG (Ignition) 8.67. Parameter 73: DBO (Data Bytes Output) 8.68. Parameter 74: DBI (Data Bytes Input) 8.69. Parameter 75: OC (Override Count) 8.70. Parameter 76: MNR (Pending Output State Timer) 8.71. Parameter 77: OT (Output State) 8.72. Parameter 78: OTP (Output Pending State) 8.73. Parameter 87: FWB (Firmware Bootloader Version) 8.74. Parameter 88: PT (Park Time) 8.75. Parameter 90: PBMI (Proprietary and OBDII Bus Odometer) 8.76. Parameter 91: PBFL (Proprietary Bus Fuel Level) 8.77. Parameter 92: NKR (NanoKernel) 8.78. Parameter 93: GSM (GSM Registration) 8.79. Parameter 94: GSMP (GSM Registration Percentage) 8.80. Parameter 95: GPSP (GPS Lock Percentage) 8.81. Parameter 96: GPSQ (GPS Quality Lock Percentage) 8.82. Parameter 97: PBOL (Proprietary Bus Oil Life) 8.83. Parameter 98: PBLF (Proprietary Bus Left Front Tire Pressure) 8.84. Parameter 99: PBRF (Proprietary Bus Right Front Tire Pressure) 8.85. Parameter 100: PBLR (Proprietary Bus Left Rear Tire Pressure) 73 73 74 74 75 75 75 76 76 76 77 77 77 78 78 79 79 80 80 81 81 82 82 82 83 83 84 Copyright 2022 Sensata Technologies, Inc. Page 7 | 271 XT2500 Product Manual 8.86. Parameter 101: PBRR (Proprietary Bus Right Rear Tire Pressure) 8.87. Parameter 102: ADC0 (Analog to Digital Converter Index 0) 8.88. Parameter 103: ADC1 (Analog to Digital Converter Index 1) 8.89. Parameter 107: SG0 (Smart Group 0) 8.90. Parameter 109: EH (Engine Hours) 8.91. Parameter 112: FLF (Fuel Level Filtered) 8.92. Parameter 113: LOC (Location) 8.93. Parameter 114: PS (Power Stage) 8.94. Parameter 115: DSN (Device Serial Number) 8.95. Parameter 116: ACT(Cellular Access Technology) 8.96. Parameter 117: PSTI (Power Stage Transition Information) 8.97. Parameter 118: DID (Driver Identification Number) 8.98. Parameter 119: USEQ (Unidentified Driver Record Sequence Number) 8.99. Parameter 120: JOMI (JBUS True Odometer) 8.100. Parameter 121: JEH (JBUS Engine Hours) 8.101. Parameter 122: AVT (Acceleration Vector Threshold Violation) 8.102. Parameter 147: PBBL (Proprietary Bus Parking Brake Lamp) 8.103. Parameter 148: PBBS (Proprietary Bus Parking Brake Status) 8.104. Parameter 149: PBSP (Proprietary Bus Shifter Position) 8.105. Parameter 150: PBDS (Proprietary Bus Driver Seatbelt) 8.106. Parameter 151: PBPS (Proprietary Bus Passenger Seatbelt) 8.107. Parameter 152: PBAL (Proprietary Bus Airbag Lamp) 8.108. Parameter 153: FA (Faulty Alternator) 8.109. Parameter 156: OS (Orientation Status) 8.110. Parameter 158: IN1 (Input 1 Status) 8.111. Parameter 159: IN2 (Input 2 Status) 8.112. Parameter 160: IN3 (Input 3 Status) 84 85 86 87 87 88 88 89 89 90 90 91 92 92 92 93 93 93 94 94 95 95 95 96 96 97 97 Copyright 2022 Sensata Technologies, Inc. Page 8 | 271 XT2500 Product Manual 8.113. Parameter 161: IN4 (Input 4 Status) 8.114. Parameter 162: OT1 (Output 1 Status) 8.115. Parameter 163: OT2 (Output 2 Status) 8.116. Parameter 164: OT3 (Output 3 Status) 8.117. Parameter 190: SCT (Scantool) 8.118. Parameter 194: DTC2 (Vehicle Bus Diagnostic Trouble Codes) 8.119. Parameter 197: PFLF (PPID Fuel Level Filtered) 8.120. Parameter 208: IN4S (Input 4 State) 8.121. Parameter 209: IN4A (Input 4 Set Count) 8.122. Parameter 216: DIAG (Diagnostic Information) 8.123. Parameter 217: PD0 (PID Data 0) 8.124. Parameter 218: PD1 (PID Data 1) 8.125. Parameter 219: PD2 (PID Data 2) 8.126. Parameter 220 TRPM (Trip VBUS Data) 8.127. Parameter 221: HDOP (GPS HDOP) 9. Device Configuration 9.1. Configuration 1: Cellular Radio Link Access Point Name 9.2. Configuration 2: GSM Network Profile 9.3. Configuration 3: GSM Endpoint 9.4. Configuration 4: Network Quality of Service 9.5. Configuration 5: Device Power Up Message 9.6. Configuration 6: GPS Configuration 9.7. Configuration 7: Custom Parameter IDs 9.8. Configuration 8: SMS 9.9. Configuration 9: Event Parameter Mask 9.10. Configuration 11: Periodic Reset 9.11. Configuration 12: Ignition Status Determination Masks 97 98 99 99 100 100 102 102 102 103 103 104 104 104 104 105 107 108 108 110 112 113 115 116 116 125 126 Copyright 2022 Sensata Technologies, Inc. Page 9 | 271 XT2500 Product Manual 9.12. Configuration 13: Device Battery Health Monitoring 9.13. Configuration 14: Alternator Detection Configuration 9.14. Configuration 15: MQTTIdentity and Event Configuration 9.15. Configuration 16: DNS Cache Configuration 9.16. Configuration 17: Ignition On Periodic Reporting Interval 9.17. Configuration 18: Ignition Off Periodic Reporting Interval 9.18. Configuration 19: Logging 9.19. Configuration 21: Event Log Trip Buffering 9.20. Configuration 22: Compression Type 9.21. Configuration 23: VBUS Mask 9.22. Configuration 24: Acceleration Threshold VBUS 9.23. Configuration 25: GPS Acceleration Threshold 9.24. Configuration 26: Power Stage PMU Modes 9.25. Configuration 27: Power Stage Transition 9.26. Configuration 28: Snapshot Configuration 9.27. Configuration 29: Accelerometer Shock/Vibration 9.28. Configuration 30: Best Time Configuration 9.29. Configuration 33: Buzzer Configuration 9.30. Configuration 34: Direction Change 9.31. Configuration 35: VBUS Speed Threshold 9.32. Configuration 36: GPS Speed Threshold 9.33. Configuration 37: General Geofence 9.34. Configuration 38: VBUS Odometer Threshold 9.35. Configuration 39: GPS Odometer Threshold 9.36. Configuration 43: Heartbeat 9.37. Configuration 44: Output 9.38. Configuration 45: Vehicle Movement Detection 127 128 129 132 132 133 133 138 139 139 141 142 143 144 150 151 152 153 154 155 156 157 158 158 159 160 161 Copyright 2022 Sensata Technologies, Inc. Page 10 | 271 XT2500 Product Manual 9.39. Configuration 46: Xirgo Gateway Service 9.40. Configuration 47: FTP Settings 9.41. Configuration 48: System Information Event 9.42. Configuration 49: Park Time Threshold 9.43. Configuration 50: Idle Detection Thresholds 9.44. Configuration 52: ADC Basic 9.45. Configuration 53: ADC Advanced 9.46. Configuration 55: CoAP 9.47. Configuration 56: Motion/No-Motion 9.48. Configuration 57: Snapshot Transition 9.49. Configuration 58: Mapster 9.50. Configuration 59: Power StageEvent Reporting 9.51. Configuration 62: GPS Assist 9.52. Configuration 63: Accel on Axis 9.53. Configuration 68: LED Behavior 9.54. Configuration 70: Accelerometer 9.55. Configuration 71: Input Configuration 9.56. Configuration 74: Faulty Alternator 9.57. Configuration 77: Bluetooth Enable 9.58. Configuration 81: Queue Limiting 9.59. Configuration 86: PIDs 9.60. Configuration 87: ELD 9.61. Configuration 89: Update Inhibit 9.62. Configuration 90: Diagnostic Mask 9.63. Configuration 92: Enable DTCs 10. Subsystems 10.1. Application 162 163 164 165 166 166 167 169 171 172 177 179 180 181 182 183 184 185 185 186 187 193 194 194 195 196 196 Copyright 2022 Sensata Technologies, Inc. Page 11 | 271 XT2500 Product Manual 10.2. Backend 10.3. Boot Count 10.4. Buzzer 10.5. Cellular 10.6. Event Filesystem 10.7. GPIO 10.8. GPS 10.9. LED 10.10. Manager 10.11. NanoKernel 10.12. Power Management 10.13. Update 10.14. User Configuration 10.15. VBUS 10.16. XOR 11. EOL Device Provisioning 11.1. Certificate Rotation 11.2. Root Certificate Generation 11.3. Device Certificate Generation 11.4. Certificate Registration 12. Authentication to the Device Console 12.1. Manual Authentication 13. AWS IoT Jobs 13.1. What is a job 13.2. What is a job ID 13.3. Job document 13.4. Job target 196 197 198 198 203 206 209 211 214 220 222 223 224 231 233 237 237 237 237 238 240 240 241 241 241 241 241 Copyright 2022 Sensata Technologies, Inc. Page 12 | 271 XT2500 Product Manual 13.5. Job execution 13.6. Snapshot job 13.7. Continuous job 13.8. Job Status 13.9. Rollouts 13.10. Pre-signed URIs 13.11. Using the aws-iot console application to create jobs 13.12. When Does the Device Process Jobs?

13.13. Jobs and Thing Shadow Interaction 13.14. Job/Shadow Configuration Syntax 14. Thing Shadow 14.1. Shadow Guidelines 14.2. Default Configuration 14.3. When Does the Device Synchronize With the Shadow?

14.4. Shadow Delete 14.5. Device Information 15. Certificate Loading Procedure 16. Xirgo ELD Over BLE API Specification 16.1. Introduction 16.2. Unidentified Driver Records 16.3. Configurations 16.4. Advertisement Data 16.5. Connecting 16.6. MTU Size 16.7. Services 16.8. Characteristics 16.9. Live Record Format 241 241 242 242 242 242 243 244 244 244 245 245 246 248 248 249 250 252 252 252 253 253 253 253 254 254 255 Copyright 2022 Sensata Technologies, Inc. Page 13 | 271 XT2500 Product Manual 16.10. Unidentified Driver Record Format 17. UART Command List 18. Configuration Revision Example 18.1. What is a Configuation Revision 18.2. How to Use the Newest Configuration Revision 18.3. How to Check Which Configuration Revision is Being Used 18.4. Writing Configuration Revisions 18.5. Resetting Configuration Revisions 18.6. Example Use Case 18.7. Accidentally Upgraded to New Configuration Revisions 19. Appendix B: Power Stage Transition Example (Multiple Criteria) 19.1. Configuration Revision 1 19.2. Configuration Revision 0 20. Appendix C: Ignition Mask Configuration Example 20.1. Configuration change 1:

21. Regulatory Statements 21.1. FCC 21.2. IC 255 257 260 260 260 260 260 260 261 261 262 262 264 268 268 269 269 270 Copyright 2022 Sensata Technologies, Inc. Page 14 | 271 XT2500 Product Manual 1. REVISION HISTORY 1.1. FIRMWARE 1.1.1. Resolved Issues l Firmware will no longer revert to a backup image that is on a different major release. l BG77 information now populates cleaner in the FWC parameter. 1.1.2. Features and Functionality l A DTC change event will be generated whenever a new DTC is detected. l IP address parameter is now available. 1.1.3. Installation and Upgrade Notes 1188GA1.1 is upgrade compatible with all 1188Fxx.x releases and can be upgraded over the diagnostic serial port using xmodem-128 or via AWS IOT JOBs service. This firmware should only be installed on XT2594 Harpsichord devices devices. l 1188GA1.x is downgrade compatible with all 1188GAx.x releases. 1.1.4. Configuration Notes l Configuration 89 added for update inhibition configuration (e.g. dont do a fw update when you have a trip to send). l Configurations 26, 27, 28, 57, 59 have been modified and updated to configuration version 1. 1.1.5. Limitations l SMS split-by-size (setting in config 8) results in incomplete response with modem firmware version 6.05 when the response is large enough to split o The split-by-line setting may be used instead as a work-around 1.1.6. Known Issues l Quectel modems cannot perform FTP update when commanded via SMS. l Device sometimes does not send power stage transition event before sleep. l Redundant DTCs are not parsed. Copyright 2022 Sensata Technologies, Inc. Page 15 | 271 XT2500 Product Manual 2. FUNCTIONAL DESCRIPTION 2.1. MECHANICAL Mechanical Dimensions Weight Physical Connections Operating Temperature 2.2. OVERVIEW 2.63 x 1.49 x 1.06 (6.7 x 5.3 x 2.7 cm) 2 oz. (57 g) J1962 (with adapters available)

-25C to 70C (-13F to 158F) The XT2500 series is a plug-n-play universal vehicle tracking unit (VTU) for use in light duty/passenger vehicles. The XT2500 also suits clientele with large fleets of heavy duty trucks with 9-pin/6-pin Deutsch connectors

(RP1226 for newer trucks) via a cable harness/adapter. The XT2500 utilizes a cellular modem, a Bluetooth modem, a GPSmodem, and an integrated accelerometer to collect information about the vehicle for a variety of applications. One key benefit of the XT2500 is the flexibility of the device, allowing it to suit an individual clients desires. The device can be expanded by connecting to an external XT1065 I/O box. The XT1065 I/O box includes additional interfaces such as digital inputs, digital outputs, analog inputs, RS232 interface, and Dallas/Maxim 1-wire interface. The XT2500 is a versatile device that can include an optional Bluetooth interface for ELD applications and optional internal battery and buzzer for driver behavior alerts. The XT2500 devices can be controlled through various channels, ranging from simple system parameters to more complex device interpreter scripts, which offer maximum customization as they are written completely by the customer. Copyright 2022 Sensata Technologies, Inc. Page 16 | 271 XT2500 Product Manual 3. GENERAL OPERATION The XT2500 is connected to the vehicle and communicates to the server via the cellular network. It is equipped with a buzzer and LEDs to provide auditory and visual feedback to the driver. The XT2500 excels in vehicle tracking by utilizing its GPSengine to maintain global positioning of the vehicle throughout the duration of the trip. While tracking, the device is capable of monitoring and reporting a large selection of diagnostic information from the vehicle. The XT2500 can be configured to report a variety of parameters per customer specified thresholds, automatically packaging and sending data to a centralized server. Developed with security in mind, the XT2500 supports TLS1.2 encryption and mutual authentication with backends to keep user data safe. At the end of a trip, the XT2500 will report configured parameters to the server before entering a sleep mode. This prevents the device from continuing to draw power from the vehicles' battery. The XT2500 is equipped with a 250mAh "last-gasp" battery that allows the device to send its final reports to the server after the vehicle has been shut off. Copyright 2022 Sensata Technologies, Inc. Page 17 | 271 XT2500 Product Manual 4. INTERFACES 4.1. HARPSIOBOX CONNECTOR Connection Inputs 1 - 4 Description Has internal Pull-Direction that is configured via Configuration 71: Input Configuration on p. 184. When the Pull-Direction bit is enabled (0x40) in the FLAGS parameter, the configured Input is defaulted to "set" until it is grounded. When the Pull-Direction bit is disabled (0x00), it is defaulted to "clr" until it is pulled up to 12V. If pulled up to 12V or grounded, the pin will remain 'set' or 'clr' respectively regardless of the state of bit 0x40. Pin State Float 12V Applied Grounded Bit 0x40 ON Clr Set Clr Bit 0x40 OFF Set Set Clr UART 1 UART2 Output 1 Output 2 Output 3 External 3v3 Power Supply OWB RS232. Treated as a console interface and can be used for enabling debug prints. Not connected. Outputs current battery voltage to pin on command. (Output Voltage range of 3V-4.2V) Outputs current battery voltage to pin on command. (Output Voltage range of 3V-4.2V) Outputs current battery voltage to pin on command. (Output Voltage range of 3V-4.2V) Not connected. Currently only driver ID is supported. 4.2. XT2500 LED BEHAVIOR NOTE: The solid LEDs described will have a 1/16th second blip every 1 and 15/16th seconds to indicate the LED is not stuck on solid. 4.2.1. LED 1 Pattern/Color Off Solid blue Solid red Solid Purple Description Power-on default BLE connected only Ignition on only BLEconnected and ignition on Copyright 2022 Sensata Technologies, Inc. Page 18 | 271 XT2500 Product Manual 4.2.2. LED 2 Pattern/Color Off Off Fast blink yellow Solid yellow 4.2.3. LED 3 Pattern/Color Off Off Slow blink green Solid green Description Power-on default GSM disabled GSM enabled, no registration GSM enabled, registered Description Power-on default GPS disabled GPS enabled, no lock GPS enabled, locked 4.3. I/O BOX LED BEHAVIOR Pattern/Color Yellow Solid Green Solid Red Solid Description Boot or wake from sleep. Established successful communication with the XT2500. Cannot establish connection with the XT2500 within 30 seconds. Copyright 2022 Sensata Technologies, Inc. Page 19 | 271 XT2500 Product Manual 5. POWER MANAGEMENT Abbreviation PS PMU Definition Power Stage Power Management Unit PS0 PS1 PS2 SS Power Stage0 Power Stage1 Power Stage2 Snapshot 5.1. POWER STAGES Note N/A A single module, subsystem, or assembly which can be controlled or configured to manage power consumption. N/A N/A N/A This is a power substage (temporarily entered from a power stage, then returns to the same power stage) The power stages are intended to have reduced levels of power consumption. 5.2. POWER STAGE TRANSITIONS The device enters PS0 upon powering up, and transitions sequentially between PS0, PS1, and PS2. The device can transition from any power stage into Snapshot and will return to the same power stage upon returning from Snapshot. Figure 4-1: Transition paths between power stages and snapshot. 5.2.1. Triggering sequential Power Stage Transitions Transitioning to an adjacent PS is triggered by a configurable set of criteria. When the criteria are met, the transition is triggered, and the device will fully transition to the target PS. Once triggered, PS transitions will always fully complete, they cannot be cancelled mid-transition. 5.2.2. Transitioning to Snapshot Transitioning to SS is triggered by the expiration of a configurable snapshot interval. Copyright 2022 Sensata Technologies, Inc. Page 20 | 271 XT2500 Product Manual 5.2.3. Transition from Snapshot Once SS is entered it may wait for necessary PMUs to get to a certain state (ex. GPS position locked, Cellular registration, etc.). The device will create a record, or multiple records, containing the most up-to-date system information (a "snapshot") and the device will do some combination of: save the record, send the record. After the snapshot record has been saved and/or sent, the device will transition back to its previous PS. 5.3. POWER STATE CURRENT DRAW AVERAGES State 1 2 3 GPS ON Low Power Low Power Cellular ON ON OFF MCU ON ON Deep Sleep

(mA) 77.0 59.5 2.5 Copyright 2022 Sensata Technologies, Inc. Page 21 | 271 XT2500 Product Manual 6. PROTOCOL SPECIFICATION 6.1. COAP SERVER INTERACTION Copyright 2022 Sensata Technologies, Inc. Page 22 | 271 XT2500 Product Manual 6.1.1. Overview l Device performs the CoAP Client role, and the Customer Backend performs the CoAP Server role. l Device will post events to the configured event resource and will accept commands from the configured command resource. l Device can be configured to send confirmable (CON) and non-confirmable (NON) messages. o CON messages must be responded to with an ACK. l Server must have separate resources for events and commands. o Preferably two unique resources per device (1 event and 1 command). o One aggregate Event resource may be used in lieu of an event resource per device. o The command resource must be per device if commands want to be issued on a per-device basis. 6.1.2. Event Resource Behavior l Server only needs to implement the POST method for this resource. l Device will POST events to this event resource for both NON and CON message types. o The POST requests will contain the event data in MessagePack in the CoAP Payload field. l For CON messages, the server MUST send a response containing the following o Message ID that matches the corresponding event POST o The URI-Path option containing the resource name. n An event resource called "XT-events" would populate the URI-Path with "XT-events"

o Message TYPE must be ACK l For NON messages, the server is not required to send an ACK. l For both NON and CON messages the server MAY send diagnostic error codes as responses. For CON messages this would be in lieu of an ACK. 6.1.3. Command Resource Behavior l Server must make the command resource Observable for commands to be received in real-time. l Server only needs to implement GET and POST methods for this resource. l Device will perform a GET request with the Observe option to this resource upon each successful network connection. o This will trigger the server to send any pending command to the device in response to this request. l Subsequent commands will be sent from the server automatically after the data in the GET resource has changed. o This will trigger the device to execute the new command. l ALL command responses will be sent to the POST method of the command resource. o This includes the initial command obtained from the GET request as well as any subsequent commands obtained as a result of the server keeping the device updated with changes to the GET data. Copyright 2022 Sensata Technologies, Inc. Page 23 | 271 XT2500 Product Manual 6.1.4. CoAP Backoff and Message ID Behavior l The Message ID contained in the CoAP header is unique per outgoing message regardless of destination resource. o This means responses to commands will increment the message ID, as well as any events sent. l If QoS=1 is configured in the device NetConfig the device will be expecting acknowledgements to event payloads. o If an ACK is not received in 5 seconds, or if the ACK does not correspond to the event just sent the device will enter backoff. o Ack behavior is detailed in the Event Resource Behavior overview. o Subsequent missing ACKs will increase the backoff level. NOTE: A delay may occur in reporting a non-acked event or command request in the event that there is a concurrent protocol backoff. 6.1.5. Timing The device can enter three different backoff states: Cellular, Protocol, and Connection. It is possible to be in multiple backoff states at a given time. Cellular backoff is enforced by the network when the device is unable to establish a connection to the network or a server through a socket connection. Cellular Backoff Level GSMBACKOFFLEVEL_0 GSMBACKOFFLEVEL_1 GSMBACKOFFLEVEL_2 GSMBACKOFFLEVEL_3 GSMBACKOFFLEVEL_4 Timer (minutes) 0 2 5 8 15 Copyright 2022 Sensata Technologies, Inc. Page 24 | 271 XT2500 Product Manual Protocol backoff occurs when the device does not receive an acknowledgement from the server after sending an event. The following is the holdoff pattern for the protocol:

1. Send event 2. Wait 5 seconds for ACK 3. Enter backoff level 1 (1 minute) 4. Repeat steps 1-4 5. Enter backoff level 2 (5 minutes) 6. Repeat steps 1-4 7. Enter backoff level 3 (10 minutes) 8. Repeat steps 1-4 9. Enter backoff level 4 (15 minutes) 10. Repeat steps 1-4 11. Enter backoff level 5 (15 minutes) Protocol Backoff BACKOFFLEVEL_0 BACKOFFLEVEL_1 BACKOFFLEVEL_2 BACKOFFLEVEL_3 BACKOFFLEVEL_4 BACKOFFLEVEL_5 6.1.6. Max-Age Option Timer (minutes) 0 1 5 10 15 15 Max-Age is an option (not required by the CoAP specification; but still defined by the specification) in which observable resources can establish a inactivity timeout between a client and server. After this timeout expires;

the client or server is required to attempt to re-establish the connection. Max-Age is defined in seconds. The Max-Age option is used in Xirgo firmware in order to maintain the connection to the server's Command resource (through server resets, loss of coverage, ect). When the device performs the initial GET request with the Observe option on the Command resource, the server can add the Max-Age option in its response. Any Max-

Age will be respected within the CoAP specification. If no Max-Age is specified, the device will assume 0, or never attempt to re-establish the connection. If a Max-Age is specified, the device will re-establish (re-send the initial GET request with the Observe option) the observe relation after an inactivity interval occurs on that resource for longer than the specified Max-Age (ie. if no commands are sent/received for Max-Age seconds). Xirgo Firmware does NOT respect Max-Age on the event resource. Copyright 2022 Sensata Technologies, Inc. Page 25 | 271 XT2500 Product Manual Copyright 2022 Sensata Technologies, Inc. Page 26 | 271 XT2500 Product Manual 7. EVENT DESCRIPTION AND DEFAULT MASK 7.1. [1] IGNITION ON Ignition On is triggered when a logical TRUE status has been derived based on Configuration 12: Ignition Status Determination Masks on p. 126and the current logical statuses of all ignition sources available on the system

(Parameter 51: IS (Ignition Source) on p. 69). Default Mask {0x01,0x2d,0x01,0x23,0x90,0x40,0x0d,0x00,0x00,0x01,0x00,0x21,0xc0,0x00,0x02,0x00 }

Default String EV, GSPT, SV, HP, CQ, GS, AXYZ, VN, TID, CI, HBE, CNT, CT, BT, IS, IG, PT, GSM, ADC0, ADC1, LOC 7.2. [2] IGNITION OFF Ignition Off is triggered when a logical FALSEstatus has been derived based on Configuration 12: Ignition Status Determination Masks on p. 126 and the current logical statuses of all ignition sources available on the system

(Parameter 51: IS (Ignition Source) on p. 69). Default Mask {0x01,0x2d,0x01,0x01,0x01,0x00,0x06,0x00,0x00,0x61,0x00,0x21,0xc0,0x00,0x02,0x00 }

Default String EV, GSPT, SV, HP, CQ, GS, AXYZ, IT, UT, BT, IG, OT, OTP, PT, GSM, ADC0, ADC1, LOC 7.3. [3] IGNITION ON PERIODIC Ignition On Periodic is triggered at the periodicity defined by Configuration 17: Ignition On Periodic Reporting Interval on p. 132 after the system has detected Ignition On based on Configuration 12: Ignition Status Determination Masks on p. 126. Default Mask {0x81,0x2d,0x01,0x21,0x31,0x40,0x1d,0x00,0x00,0x01,0x00,0x21,0xc0,0x00,0x02,0x00 }

Default String EV, SPT, GSPT, SV, HP, CQ, GS, AXYZ, TID, IT, CI, AC, CNT, CT, BT, IS, ACV, IG, PT, GSM, ADC0, ADC1, LOC 7.4. [4] IGNITION OFF PERIODIC Ignition Off Periodic is triggered at the periodicity defined by Configuration 18: Ignition Off Periodic Reporting Interval on p. 133 after the system has detected Ignition Off based on Configuration 12: Ignition Status Determination Masks on p. 126. Default Mask {0x01,0x2d,0x01,0x01,0x01,0x00,0x06,0x00,0x00,0x01,0x00,0x21,0xc0,0x00,0x02,0x00 }

Default String EV, GSPT, SV, HP, CQ, GS, AXYZ, IT, UT, BT, IG, PT, GSM, ADC0, ADC1, LOC Copyright 2022 Sensata Technologies, Inc. Page 27 | 271 XT2500 Product Manual 7.5. [5] POWER UP Power Up is triggered by device power up or reset. Event is enabled by PMASK parameter of Configuration 5:

Device Power Up Message on p. 112. Default Mask {0x01,0x2d,0x31,0x00,0x8c,0x00,0x06,0x00,0x00,0x01,0x80,0x20,0xc0,0x00,0x02,0x00 }

Default String EV, GSPT, SV, HP, CQ, GS, FWM, FWO, BN, PN, HBE, UT, BT, IG, FWB, GSM, ADC0, ADC1, LOC 7.6. [6] POWER UP GPS Power Up GPS is triggered when the first locked GPS fix has been acquired after device power up or reset . Event is enabled by PMASK parameter of Configuration 5: Device Power Up Message on p. 112. Default Mask {0x01,0x2d,0x01,0x00,0x0e,0x00,0x06,0x00,0x00,0x01,0x00,0x20,0xc0,0x00,0x02,0x00 }

Default String EV, GSPT, SV, HP, CQ, GS, SI, BN, PN, UT, BT, IG, GSM, ADC0, ADC1, LOC 7.7. [7] POWER UP GSM Power Up GSM is triggered when the GSMregistration has been acquired after device power up or reset. Event is enabled by PMASK parameter of Configuration 5: Device Power Up Message on p. 112. Default Mask {0x01,0x2d,0x01,0x00,0x0e,0x00,0x06,0x00,0x00,0x01,0x00,0x20,0xc0,0x00,0x02,0x00 }

Default String EV, GSPT, SV, HP, CQ, GS, SI, BN, PN, UT, BT, IG, GSM, ADC0, ADC1, LOC 7.8. [8] LOW BATTERY Low battery is triggered by parameters within Configuration 13: Device Battery Health Monitoring on p. 127. Default Mask {0x01,0x2d,0x01,0x00,0x0e,0x00,0x06,0x00,0x00,0x01,0x00,0x20,0xc0,0x00,0x02,0x00 }

Default String EV, GSPT, SV, HP, CQ, GS, SI, BN, PN, UT, BT, IG, GSM, ADC0, ADC1, LOC 7.9. [9] ACCELERATION Acceleration is triggered when the threshold determined by Configuration 29: Accelerometer Shock/Vibration on p. 151 is exceeded. Default Mask {0x01,0x2d,0x01,0x21,0x00,0x00,0x16,0x00,0x00,0x01,0x00,0x20,0xc0,0x00,0x02,0x00 }

Default String EV, GSPT, SV, HP, CQ, GS, AXYZ, TID, UT, BT, ACV, IG, GSM, ADC0, ADC1, LOC 7.10. [10] ACCELERATION VBUS Acceleration VBUS is triggered when any of the configured thresholds in Configuration 24: Acceleration Threshold VBUS on p. 141 are exceeded. Default Mask {0x81,0x2d,0x01,0x21,0x00,0x00,0x16,0x00,0x00,0x01,0x00,0x20,0xc0,0x00,0x02,0x00 }

Default String EV, SPT, GSPT, SV, HP, CQ, GS, AXYZ, TID, UT, BT, ACV, IG, GSM, ADC0, ADC1, LOC Copyright 2022 Sensata Technologies, Inc. Page 28 | 271 XT2500 Product Manual 7.11. [11] ACCELERATION GPS Acceleration GPSis triggered when any of the configured thresholds in Configuration 25: GPS Acceleration Threshold on p. 142 are exceeded. Default Mask {0x81,0x2d,0x01,0x21,0x00,0x00,0x16,0x00,0x00,0x01,0x00,0x20,0xc0,0x00,0x02,0x00 }

Default String EV, SPT, GSPT, SV, HP, CQ, GS, AXYZ, TID, UT, BT, ACV, IG, GSM, ADC0, ADC1, LOC 7.12. [12] STAGE 0 PERIODIC Stage 0periodic is triggered when the device is in Power Stage 0, and the conditions configured in Configuration 28: Snapshot Configuration on p. 150 have been met. Default Mask {0x01,0x2d,0x01,0x21,0x10,0x00,0x06,0x00,0x00,0x61,0x00,0x20,0xc0,0x00,0x26,0x00 }

Default String EV, GSPT, SV, HP, CQ, GS, AXYZ, TID, CI, UT, BT, IG, OT, OTP, GSM, ADC0, ADC1, LOC, PS, PSTI 7.13. [13] STAGE 1 PERIODIC Stage 1periodic is triggered when the device is in Power Stage 1, and the conditions configured in Configuration 28: Snapshot Configuration on p. 150 have been met. Default Mask {0x01,0x2d,0x01,0x21,0x10,0x00,0x06,0x00,0x00,0x61,0x00,0x20,0xc0,0x00,0x26,0x00 }

Default String EV, GSPT, SV, HP, CQ, GS, AXYZ, TID, CI, UT, BT, IG, OT, OTP, GSM, ADC0, ADC1, LOC, PS, PSTI 7.14. [14] STAGE 2 PERIODIC Stage 2periodic is triggered when the device is in Power Stage 2, and the conditions configured in Configuration 28: Snapshot Configuration on p. 150 have been met. Default Mask {0x01,0x2d,0x01,0x21,0x10,0x00,0x06,0x00,0x00,0x61,0x00,0x20,0xc0,0x00,0x26,0x00 }

Default String EV, GSPT, SV, HP, CQ, GS, AXYZ, TID, CI, UT, BT, IG, OT, OTP, GSM, ADC0, ADC1, LOC, PS, PSTI 7.15. [15] BATTERY DISCONNECT Battery disconnected is triggered when the external power source is less than 6V for the period of time determined by Configuration 13: Device Battery Health Monitoring on p. 127 and it was previously considered connected. Default Mask {0x01,0x2d,0x01,0x00,0x0e,0x00,0x06,0x00,0x00,0x01,0x00,0x20,0xc0,0x00,0x02,0x00 }

Default String EV, GSPT, SV, HP, CQ, GS, SI, BN, PN, UT, BT, IG, GSM, ADC0, ADC1, LOC Copyright 2022 Sensata Technologies, Inc. Page 29 | 271 XT2500 Product Manual 7.16. [16] BATTERY RECONNECT Battery reconnected is triggered when the external power source is greater than 8V for the period of time determined by Configuration 13: Device Battery Health Monitoring on p. 127 and it was previously considered disconnected. Default Mask {0x01,0x2d,0x01,0x00,0x0e,0x00,0x06,0x00,0x00,0x01,0x00,0x20,0xc0,0x00,0x02,0x00 }

Default String EV, GSPT, SV, HP, CQ, GS, SI, BN, PN, UT, BT, IG, GSM, ADC0, ADC1, LOC 7.17. [17] BATTERY DISCONNECT PERIODIC Battery disconnect periodic triggers at the rate determined by Configuration 13: Device Battery Health Monitoring on p. 127 while the battery is disconnected (see [15] Battery Disconnect on p. 29). Default Mask {0x01,0x2d,0x01,0x00,0x10,0x00,0x06,0x00,0x00,0x01,0x00,0x20,0xc0,0x00,0x02,0x00 }

Default String EV, GSPT, SV, HP, CQ, GS, CI, UT, BT, IG, GSM, ADC0, ADC1, LOC 7.18. [18] DIRECTION CHANGE Direction Change is triggered when the heading delta with respect to the heading at the prior direction change event exceeds the threshold configured in Configuration 34: Direction Change on p. 154. Default Mask {0x81,0x2d,0x01,0x21,0x00,0x00,0x16,0x00,0x00,0x01,0x00,0x20,0xc0,0x00,0x02,0x00 }

Default String EV, SPT, GSPT, SV, HP, CQ, GS, AXYZ, TID, UT, BT, ACV, IG, GSM, ADC0, ADC1, LOC 7.19. [19] SPEED VBUS Speed VBUS is triggered after exceeding the speed threshold configured in Configuration 35: VBUS Speed Threshold on p. 155. After this event has been triggered, speed must fall below ("SPD_THS" HYST in configuration 35) before the event will occur again. Default Mask {0x81,0x2d,0x01,0x21,0x00,0x00,0x16,0x00,0x00,0x01,0x00,0x20,0xc0,0x00,0x02,0x00 }

Default String EV, SPT, GSPT, SV, HP, CQ, GS, AXYZ, TID, UT, BT, ACV, IG, GSM, ADC0, ADC1, LOC 7.20. [20] SPEED GPS Speed GPS is triggered after exceeding the speed threshold configured in Configuration 36: GPS Speed Threshold on p. 156. After this event has been triggered, speed must fall below ("SPD_THS" HYST in configuration 36) before the event will occur again. Default Mask {0x81,0x2d,0x01,0x21,0x00,0x00,0x16,0x00,0x00,0x01,0x00,0x20,0xc0,0x00,0x02,0x00 }

Default String EV, SPT, GSPT, SV, HP, CQ, GS, AXYZ, TID, UT, BT, ACV, IG, GSM, ADC0, ADC1, LOC Copyright 2022 Sensata Technologies, Inc. Page 30 | 271 XT2500 Product Manual 7.21. [21] GEOFENCE CROSSING Device must be in/out of a geofence for the number of seconds determined by ENTER_S and EXIT_S parameters in Configuration 37: General Geofence on p. 157. Default Mask {0x81,0x2d,0x01,0x21,0x00,0x00,0x16,0x00,0x00,0x01,0x00,0x20,0xc0,0x00,0x02,0x00 }

Default String EV, SPT, GSPT, SV, HP, CQ, GS, AXYZ, TID, UT, BT, ACV, IG, GSM, ADC0, ADC1, LOC 7.22. [23] ODOMETER VBUS Odometer GPS is triggered each time the device travels the threshold distance defined in Configuration 38:

VBUS Odometer Threshold on p. 158. Event is enabled by ENABLE parameter of the VBUSOdometer Threshold

(38) configuration. Default Mask {0x81,0x2d,0x01,0x21,0x00,0x00,0x16,0x00,0x00,0x01,0x00,0x20,0xc0,0x00,0x02,0x00 }

Default String EV, SPT, GSPT, SV, HP, CQ, GS, AXYZ, TID, UT, BT, ACV, IG, GSM, ADC0, ADC1, LOC 7.23. [24] ODOMETER GPS Odometer GPS is triggered each time the device travels the threshold distance defined in Configuration 39: GPS Odometer Threshold on p. 158. Event is enabled by ENABLE parameter of configuration 39. Default Mask {0x81,0x2d,0x01,0x21,0x00,0x00,0x16,0x00,0x00,0x01,0x00,0x20,0xc0,0x00,0x02,0x00 }

Default String EV, SPT, GSPT, SV, HP, CQ, GS, AXYZ, TID, UT, BT, ACV, IG, GSM, ADC0, ADC1, LOC 7.24. [25] INPUT 1 SET Input 1 Set is triggered when the state of Input 1 transitions from deasserted to asserted and remains in that state for the hysteresis duration as defined by the HYST parameter in Configuration 71: Input Configuration on p. 184. Event is enabled by the FLAGS parameter of configuration 71. Default Mask {0x81,0x2d,0x01,0x21,0x00,0x00,0x16,0x00,0x00,0x01,0x00,0x20,0xc0,0x00,0x02,0x00, 0x00,0x00,0x00,0xc0,0x03,0x00,0x00,0x00,0x00 }

Default String EV, SPT, GSPT, SV, HP, CQ, GS, AXYZ, TID, UT, BT, ACV, IG, GSM, ADC0, ADC1, LOC, IN1, IN2, IN3, IN4 7.25. [26] INPUT 1 CLEAR Input 1 Clear is triggered when the state of Input 1 transitions from asserted to deasserted and remains in that state for the hysteresis duration as defined by the HYST parameter in Configuration 71: Input Configuration on p. 184. Event is enabled by the FLAGS parameter of configuration 71. Default Mask {0x81,0x2d,0x01,0x21,0x00,0x00,0x16,0x00,0x00,0x01,0x00,0x20,0xc0,0x00,0x02,0x00, 0x00,0x00,0x00,0xc0,0x03,0x00,0x00,0x00,0x00 }

Default String EV, SPT, GSPT, SV, HP, CQ, GS, AXYZ, TID, UT, BT, ACV, IG, GSM, ADC0, ADC1, LOC, IN1, IN2, IN3, IN4 Copyright 2022 Sensata Technologies, Inc. Page 31 | 271 XT2500 Product Manual 7.26. [27] INPUT 2 SET Input 2 Set is triggered when the state of Input 2 transitions from deasserted to asserted and remains in that state for the hysteresis duration as defined by the HYST parameter in Configuration 71: Input Configuration on p. 184. Event is enabled by the FLAGS parameter of configuration 71. Default Mask {0x81,0x2d,0x01,0x21,0x00,0x00,0x16,0x00,0x00,0x01,0x00,0x20,0xc0,0x00,0x02,0x00, 0x00,0x00,0x00,0xc0,0x03,0x00,0x00,0x00,0x00 }

Default String EV, SPT, GSPT, SV, HP, CQ, GS, AXYZ, TID, UT, BT, ACV, IG, GSM, ADC0, ADC1, LOC, IN1, IN2, IN3, IN4 7.27. [28] INPUT 2 CLEAR Input 2 Clear is triggered when the state of Input 2 transitions from asserted to deasserted and remains in that state for the hysteresis duration as defined by the HYST parameter in Configuration 71: Input Configuration on p. 184. Event is enabled by the FLAGS parameter of configuration 71. Default Mask {0x81,0x2d,0x01,0x21,0x00,0x00,0x16,0x00,0x00,0x01,0x00,0x20,0xc0,0x00,0x02,0x00, 0x00,0x00,0x00,0xc0,0x03,0x00,0x00,0x00,0x00 }

Default String EV, SPT, GSPT, SV, HP, CQ, GS, AXYZ, TID, UT, BT, ACV, IG, GSM, ADC0, ADC1, LOC, IN1, IN2, IN3, IN4 7.28. [29] INPUT 3 SET Input 3 Set is triggered when the state of Input 3 transitions from deasserted to asserted and remains in that state for the hysteresis duration as defined by the HYST parameter in Configuration 71: Input Configuration on p. 184. Event is enabled by the FLAGS parameter of configuration 71. Default Mask {0x81,0x2d,0x01,0x21,0x00,0x00,0x16,0x00,0x00,0x01,0x00,0x20,0xc0,0x00,0x02,0x00, 0x00,0x00,0x00,0xc0,0x03,0x00,0x00,0x00,0x00 }

Default String EV, SPT, GSPT, SV, HP, CQ, GS, AXYZ, TID, UT, BT, ACV, IG, GSM, ADC0, ADC1, LOC, IN1, IN2, IN3, IN4 7.29. [30] INPUT 3 CLEAR Input 3 Clear is triggered when the state of Input 3 transitions from asserted to deasserted and remains in that state for the hysteresis duration as defined by the HYST parameter in configuration Configuration 71: Input Configuration on p. 184. Event is enabled by the FLAGS parameter of configuration 71. Default Mask {0x81,0x2d,0x01,0x21,0x00,0x00,0x16,0x00,0x00,0x01,0x00,0x20,0xc0,0x00,0x02,0x00, 0x00,0x00,0x00,0xc0,0x03,0x00,0x00,0x00,0x00 }

Default String EV, SPT, GSPT, SV, HP, CQ, GS, AXYZ, TID, UT, BT, ACV, IG, GSM, ADC0, ADC1, LOC, IN1, IN2, IN3, IN4 Copyright 2022 Sensata Technologies, Inc. Page 32 | 271 XT2500 Product Manual 7.30. [32] OUTPUT MANUAL OVERRIDE Output Manual Override is triggered when the manual override sequence has been detected on a device which has one of its inputs defined as wired ignition as determined by the FLAGS parameter in Configuration 71: Input Configuration on p. 184. The AMOcount of Configuration 44: Output on p. 160 must not have been exceeded for the override to occur. Default Mask {0x05,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x78,0x00,0x00,0x00,0x00,0x00,0x00, 0x00,0x00,0x00,0xC0,0x1F,0x00,0x00,0x00,0x00 }

Default String EV, D, OC, MNR, OT, OTP, IN1, IN2, IN3, IN4, OT1, OT2, OT3 7.31. [33] DIAGNOSTICS Diagnostics is triggered by the !ate:33 command. Default Mask {0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00 }

Default String EV 7.32. [34] MOVEMENT START Movement Start is triggered based on GPS speed and the settings in Configuration 45: Vehicle Movement Detection on p. 161 . Event is enabled by FLAGS parameter of configuration 45. Default Mask {0x81,0x2d,0x01,0x21,0x00,0x00,0x16,0x00,0x00,0x01,0x00,0x20,0xc0,0x00,0x02,0x00 }

Default String EV, SPT, GSPT, SV, HP, CQ, GS, AXYZ, TID, UT, BT, ACV, IG, GSM, ADC0, ADC1, LOC 7.33. [35] MOVEMENT STOP Movement Stop is triggered based on GPS speed and the settings in Configuration 45: Vehicle Movement Detection on p. 161 . It will not trigger if GPS Speed is one of the sources used in Configuration 12: Ignition Status Determination Masks on p. 126 . Event is enabled by FLAGS parameter of Configuration 45: Vehicle Movement Detection on p. 161. Default Mask {0x81,0x2d,0x01,0x21,0x00,0x00,0x16,0x00,0x00,0x01,0x00,0x20,0xc0,0x00,0x02,0x00 }

Default String EV, SPT, GSPT, SV, HP, CQ, GS, AXYZ, TID, UT, BT, ACV, IG, GSM, ADC0, ADC1, LOC 7.34. [36] SYSTEM REPORT 0 System report 0 is triggered by !ate:36. Default Mask {0x01,0x2d,0x01,0x00,0x1e,0x00,0x06,0x00,0x00,0x01,0x00,0x20,0xc0,0x00,0x02,0x00 }

Default String EV, GSPT, SV, HP, CQ, GS, SI, BN, PN, CI, UT, BT, IG, GSM, ADC0, ADC1, LOC Copyright 2022 Sensata Technologies, Inc. Page 33 | 271 XT2500 Product Manual 7.35. [37] SYSTEM INFORMATION System Information is triggered by !ate:37. Event can also be triggered upon completion of a device firmware update if enabled by MASK parameter of Configuration 48: System Information Event on p. 164. Default Mask {0x01,0x2d,0x01,0x00,0x1e,0x00,0x06,0x00,0x00,0x01,0x00,0x20,0xc0,0x00,0x02,0x00 }

Default String EV, GSPT, SV, HP, CQ, GS, SI, BN, PN, CI, UT, BT, IG, GSM, ADC0, ADC1, LOC 7.36. [38]PARK Park is triggered when the system has detected Ignition Off based on Configuration 12: Ignition Status Determination Masks on p. 126 and Movement status is stopped based on Configuration 45: Vehicle Movement Detection on p. 161 and remains in that state for the duration as defined by the PT parameter in Configuration 49: Park Time Threshold on p. 165 . Event is enabled by MASK parameter of configuration 49. Default Mask {0x01,0x2d,0x01,0x00,0x1e,0x00,0x06,0x00,0x00,0x01,0x00,0x20,0xc0,0x00,0x02,0x00 }

Default String EV, GSPT, SV, HP, CQ, GS, SI, BN, PN, CI, UT, BT, IG, GSM, ADC0, ADC1, LOC 7.37. [39] IDLE START Idle Start is triggered when the system has detected Ignition On based on Configuration 12: Ignition Status Determination Masks on p. 126 and Movement status is stopped based on Configuration 45: Vehicle Movement Detection on p. 161 and remains in that state for the duration as defined by the IDT parameter in Configuration 50: Idle Detection Thresholds on p. 166 . Event is enabled by IDM parameter of configuration 50. Default Mask {0x01,0x2d,0x01,0x00,0x1e,0x00,0x06,0x00,0x00,0x01,0x00,0x20,0xc0,0x00,0x02,0x00 }

Default String EV, GSPT, SV, HP, CQ, GS, SI, BN, PN, CI, UT, BT, IG, GSM, ADC0, ADC1, LOC 7.38. [40] IDLE STOP Idle Stop is triggered when the system idle state is true, and the device detects either Ignition Off based on Configuration 12: Ignition Status Determination Masks on p. 126 or Movement status is moving based on Configuration 45: Vehicle Movement Detection on p. 161 and remains in the changed state for the duration as defined by the IDS parameter in Idle Detection Threshold (50) configuration. Event is enabled by IDM parameter of Configuration 50: Idle Detection Thresholds on p. 166. Default Mask {0x01,0x2d,0x01,0x00,0x1e,0x00,0x06,0x00,0x00,0x01,0x00,0x20,0xc0,0x00,0x02,0x00 }

Default String EV, GSPT, SV, HP, CQ, GS, SI, BN, PN, CI, UT, BT, IG, GSM, ADC0, ADC1, LOC Copyright 2022 Sensata Technologies, Inc. Page 34 | 271 XT2500 Product Manual 7.39. [41] IDLE PERIODIC Idle Periodic is triggered when the system idle state is true and remains in that state for the duration as defined by the IDP parameter in Configuration 50: Idle Detection Thresholds on p. 166. Event will report at IDPinterval until system idle state changes. Event is enabled by IDM parameter of Configuration 50: Idle Detection Thresholds on p. 166. Default Mask {0x01,0x2d,0x01,0x00,0x1e,0x00,0x06,0x00,0x00,0x01,0x00,0x20,0xc0,0x00,0x02,0x00 }

Default String EV, GSPT, SV, HP, CQ, GS, SI, BN, PN, CI, UT, BT, IG, GSM, ADC0, ADC1, LOC 7.40. [42] POWER UP BEST TIME Power Up Best Time is triggered when a time value has been received by either the GPSor GSM module after device power up or reset. Event is enabled by PMASK parameter of Configuration 5: Device Power Up Message on p. 112. Default Mask {0x01,0x2d,0x01,0x00,0x1e,0x00,0x06,0x00,0x00,0x01,0x00,0x20,0xc0,0x00,0x02,0x00 }

Default String EV, GSPT, SV, HP, CQ, GS, SI, BN, PN, CI, UT, BT, IG, GSM, ADC0, ADC1, LOC 7.41. [43] ADCTHRESHOLD ADCThreshold is triggered when one of the configured logical ADCthresholds has been crossed as defined by Configuration 52: ADC Basic on p. 166 and/or Configuration 53: ADC Advanced on p. 167. Default Mask {0x01,0x2d,0x01,0x00,0x1e,0x00,0x06,0x00,0x00,0x01,0x00,0x20,0xc0,0x00,0x02,0x00 }

Default String EV, GSPT, SV, HP, CQ, GS, SI, BN, PN, CI, UT, BT, IG, GSM, ADC0, ADC1, LOC 7.42. [44] ADCPERIODIC ADCPeriodic is triggered at the period defined by the PER_EVENTMASKparameter of Configuration 53: ADC Advanced on p. 167 and based on the ADCvalue with respect to the thresholds defined in Configuration 52: ADC Basic on p. 166. Default Mask {0x01,0x2d,0x01,0x00,0x1e,0x00,0x06,0x00,0x00,0x01,0x00,0x20,0xc0,0x00,0x02,0x00 }

Default String EV, GSPT, SV, HP, CQ, GS, SI, BN, PN, CI, UT, BT, IG, GSM, ADC0, ADC1, LOC 7.43. [48] MOTION Motion is triggered when the device was previously not in motion and transitions to motion as determined by the MO_WIN_S parameter in Configuration 56: Motion/No-Motion on p. 171. Default Mask {0x81,0x2d,0x01,0x21,0x00,0x00,0x16,0x00,0x00,0x01,0x00,0x20,0xc0,0x00,0x02,0x00 }

Default String EV, SPT, GSPT, SV, HP, CQ, GS, AXYZ, TID, UT, BT, ACV, IG, GSM, ADC0, ADC1, LOC Copyright 2022 Sensata Technologies, Inc. Page 35 | 271 XT2500 Product Manual 7.44. [49] NO-MOTION No-motion is triggered when the device was previously in motion and transitions to no-motion and determined by the NOMO_WIN_S parameter in Configuration 56: Motion/No-Motion on p. 171. Default Mask {0x81,0x2d,0x01,0x21,0x00,0x00,0x16,0x00,0x00,0x01,0x00,0x20,0xc0,0x00,0x02,0x00 }

Default String EV, SPT, GSPT, SV, HP, CQ, GS, AXYZ, TID, UT, BT, ACV, IG, GSM, ADC0, ADC1, LOC 7.45. [50] MOTION PERIODIC Periodically triggered while the device is in motion as determined by Configuration 56: Motion/No-Motion on p. 171. Default Mask {0x81,0x2d,0x01,0x21,0x00,0x00,0x16,0x00,0x00,0x01,0x00,0x20,0xc0,0x00,0x02,0x00 }

Default String EV, SPT, GSPT, SV, HP, CQ, GS, AXYZ, TID, UT, BT, ACV, IG, GSM, ADC0, ADC1, LOC 7.46. [51] NO-MOTION PERIODIC Periodically triggered while the device is not in motion as determined by Configuration 56: Motion/No-Motion on p. 171. Default Mask {0x81,0x2d,0x01,0x21,0x00,0x00,0x16,0x00,0x00,0x01,0x00,0x20,0xc0,0x00,0x02,0x00 }

Default String EV, SPT, GSPT, SV, HP, CQ, GS, AXYZ, TID, UT, BT, ACV, IG, GSM, ADC0, ADC1, LOC 7.47. [52] POWERSTAGE TRANSITION Power Stage Transition is triggered any time the power stage changes as defined by Configuration 27: Power Stage Transition on p. 144. Default Mask {0x01,0x2d,0x01,0x00,0x1e,0x00,0x06,0x00,0x00,0x01,0x00,0x20,0xc0,0x00,0x22,0x00 }

Default String EV, GSPT, SV, HP, CQ, GS, SI, BN, PN, CI, UT, BT, IG, GSM, ADC0, ADC1, LOC, PSTI 7.48. [56] ACCELERATION POSITIVE X THRESHOLD Acceleration positive X threshold is triggered by detected acceleration on the positive X axis exceeding the threshold defined in Configuration 63: Accel on Axis on p. 181 Default Mask {0x75,0x6f,0x03,0x00,0x60,0x00,0x00,0x00,0x10,0x01,0x00,0x00,0x00,0x00,0x00,0x04 }

Default String EV, D, LT, LN, AL, GSPT, HD, SV, HP, CQ, MI, GS, GT, AC, DC, IN2S, IG, AVT 7.49. [57] ACCELERATION NEGATIVE X THRESHOLD Acceleration Negative X threshold is triggered by detected acceleration on the negative X axis exceeding the threshold defined in Configuration 63: Accel on Axis on p. 181 Default Mask {0x75,0x6f,0x03,0x00,0x60,0x00,0x00,0x00,0x10,0x01,0x00,0x00,0x00,0x00,0x00,0x04 }

Default String EV, D, LT, LN, AL, GSPT, HD, SV, HP, CQ, MI, GS, GT, AC, DC, IN2S, IG, AVT Copyright 2022 Sensata Technologies, Inc. Page 36 | 271 XT2500 Product Manual 7.50. [58] ACCELERATION POSITIVE Y THRESHOLD Acceleration positive Y threshold is triggered by detected acceleration on the positive Y axis exceeding the threshold defined in Configuration 63: Accel on Axis on p. 181 Default Mask {0x75,0x6f,0x03,0x00,0x60,0x00,0x00,0x00,0x10,0x01,0x00,0x00,0x00,0x00,0x00,0x04 }

Default String EV, D, LT, LN, AL, GSPT, HD, SV, HP, CQ, MI, GS, GT, AC, DC, IN2S, IG, AVT 7.51. [59] ACCELERATION NEGATIVE Y THRESHOLD Acceleration negative Y threshold is triggered by detected acceleration on the negative Y axis exceeding the threshold defined in Configuration 63: Accel on Axis on p. 181 Default Mask {0x75,0x6f,0x03,0x00,0x60,0x00,0x00,0x00,0x10,0x01,0x00,0x00,0x00,0x00,0x00,0x04 }

Default String EV, D, LT, LN, AL, GSPT, HD, SV, HP, CQ, MI, GS, GT, AC, DC, IN2S, IG, AVT 7.52. [60] ACCELERATION ORIENTATION Acceleration orientation is triggered when the status of Parameter 156: OS (Orientation Status) on p. 96 changes. Default Mask {0x75,0x6f,0x03,0x00,0x60,0x00,0x00,0x00,0x10,0x01,0x00,0x00,0x00,0x00,0x00,0x0 }

Default String EV, D, LT, LN, AL, GSPT, HD, SV, HP, CQ, MI, GS, GT, AC, DC, IN2S, IG 7.53. [61] FAULTY ALTERNATOR A Faulty Alternator event is triggered when the alternator voltage falls beneath the configured low-threshold of expected alternator voltage for longer than the configured time. This event corresponds to faulty_alternator_ status 2: Alternator determined faulty. A Faulty Alternator event is triggered when the alternator voltage is higher than the configured high-threshold of expected alternator voltage for longer than the configured time. This event corresponds to faulty_alternator_ status 0: Alternator determined normal. This event is only generated if the alternator was previously determined faulty. Default Mask Default String

{0x00 }

7.54. [65] SCANTOOL DETECTION Scantool Detection is triggered when a scantool is detected on the same bus as the device. This results in the device entering backoff, which prevents data transmission over the CAN-BUS. Backoff time is 30 180 seconds. See TRIP_MASK in Configuration 23: VBUS Mask on p. 139 for more details. Default Mask {0x31,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x40 }

Default String EV, LT, LN, SCT Copyright 2022 Sensata Technologies, Inc. Page 37 | 271 XT2500 Product Manual 7.55. [68] INPUT 4 SET Input 4 Set is triggered when the state of Input 4 transitions from deasserted to asserted and remains in that state for the hysteresis duration as defined by the HYST parameter in Configuration 71: Input Configuration on p. 184. Event is enabled by the FLAGS parameter of configuration 71. Default Mask {0x81,0x2d,0x01,0x21,0x00,0x00,0x16,0x00,0x00,0x01,0x00,0x20,0xc0,0x00,0x02,0x00, 0x00,0x00,0x00,0xc0,0x03,0x00,0x00,0x00,0x00 }

Default String EV, SPT, GSPT, SV, HP, CQ, GS, AXYZ, TID, UT, BT, ACV, IG, GSM, ADC0, ADC1, LOC, IN1, IN2, IN3, IN4 7.56. [69] INPUT 4 CLEAR Input 4 Clear is triggered when the state of Input 4 transitions from asserted to deasserted and remains in that state for the hysteresis duration as defined by the HYST parameter in configuration Configuration 71: Input Configuration on p. 184. Event is enabled by the FLAGS parameter of configuration 71. Default Mask {0x81,0x2d,0x01,0x21,0x00,0x00,0x16,0x00,0x00,0x01,0x00,0x20,0xc0,0x00,0x02,0x00, 0x00,0x00,0x00,0xc0,0x03,0x00,0x00,0x00,0x00 }

Default String EV, SPT, GSPT, SV, HP, CQ, GS, AXYZ, TID, UT, BT, ACV, IG, GSM, ADC0, ADC1, LOC, IN1, IN2, IN3, IN4 7.57. [71] SNAPSHOT Power Stage Periodic is triggered when the device is in any power stage and the conditions configured in Configuration 28: Snapshot Configuration on p. 150 have been met. Default Mask Default String

{0x00 }

7.58. [72] DTC DTC event is triggered when DTCs are read. To determine when and how often DTCs are read, refer to Configuration 92: Enable DTCs on p. 195. Default Mask {0x05,0x00,0x00,0x44,0x00,0x00,0x04,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x04}

Default String EV, D, DTC, MIL, BT, DTC2 Copyright 2022 Sensata Technologies, Inc. Page 38 | 271 XT2500 Product Manual 8. PARAMETER LIST Description Parameter 0: EV (Event Identifier) on p. 42 Parameter 2: D (Date) on p. 44 Parameter 3: TZ (Time Zone Offset) on p. 44 Parameter 4: LT (Latitude) on p. 44 Parameter 5: LN (Longitude) on p. 45 Parameter 6: AL (Altitude) on p. 45 Parameter 7: SPT (VBUS Speed) on p. 45 Parameter 8: GSPT (GPS Speed) on p. 46 Parameter 9: HD (GPS Heading) on p. 46 Parameter 10: SV (GPS Satellites) on p. 46 Parameter 11: HP (GPS PDOP) on p. 47 Parameter 12: BV (Battery Voltage) on p. 48 Parameter 13: CQ (Cellular Signal Quality) on p. 48 Parameter 14: MI (Virtual Odometer GPS) on p. 49 Parameter 15: MG (Vehicle Fuel Efficiency) on p. 49 Parameter 16: GS (GPS Lock Status) on p. 50 Parameter 17: GT (GPS Time Since Last Lock) on p. 50 Parameter 18: FL (Fuel Level) on p. 51 Parameter 19: XY (Geofence Status) on p. 51 Parameter 20: FWM (Main Firmware Version String) on p. 51 Parameter 23: LGTM (Last Gasp Timestamp) on p. 52 Parameter 24: AXYZ (Accelerometer XYZ Vectors) on p. 52 Parameter 25: VN (Vehicle Identification Number) on p. 52 Parameter 26: DTC (Vehicle Bus Diagnostic Trouble Codes) on p. 53 Parameter 28: FP (Fingerprint) on p. 55 Parameter 29: TID (Trip Identifier) on p. 56 Parameter 30: MIL (Malfunction Indicator Lamp) on p. 56 Parameter 31: RM (RPM) on p. 57 Parameter 32: IT (Trip Idle Time) on p. 57 Parameter 33: SI (SIM ICCID) on p. 58 Parameter 34: BN (Boot Count) on p. 58 Parameter 35: PN (Power-loss Count) on p. 59 Parameter 36: CI (Cellular Network Information) on p. 59 Parameter 37: AC (Acceleration) on p. 61 Parameter 39: HBE (Device Reset Reason) on p. 62 Parameter 40: MTN (Maintenance Log) on p. 62 Parameter 41: IM (Cellular IMEI) on p. 63 Parameter 42: HACC (GPS Horizontal Accuracy Estimate) on p. 64 Parameter 43: OB (Vehicle Bus Protocol) on p. 64 Index / Value 1 / 0x01 1 / 0x04 1 / 0x08 1 / 0x10 1 / 0x20 1 / 0x40 1 / 0x80 2 / 0x01 2 / 0x02 2 / 0x04 2 / 0x08 2 / 0x10 2 / 0x20 2 / 0x40 2 / 0x80 3 / 0x01 3 / 0x02 3 / 0x04 3 / 0x08 3 / 0x10 3 / 0x80 4 / 0x01 4 / 0x02 4 / 0x04 4 / 0x10 4 / 0x20 4 / 0x40 4 / 0x80 5 / 0x01 5 / 0x02 5 / 0x04 5 / 0x08 5 / 0x10 5 / 0x20 5 / 0x80 6 / 0x01 6 / 0x02 6 / 0x04 6 / 0x08 Copyright 2022 Sensata Technologies, Inc. Page 39 | 271 XT2500 Product Manual Description Parameter 44: MID (Manufacturer ID) on p. 65 Parameter 45: OMI (Virtual Odometer VBUS) on p. 66 Parameter 46: CNT (Trip Count) on p. 66 Parameter 47: CH (Configuration Hash) on p. 67 Parameter 48: CT (Cellular Network Time) on p. 67 Parameter 49: UT (Device Uptime) on p. 67 Parameter 50: BT (Best Time) on p. 68 Parameter 51: IS (Ignition Source) on p. 69 Parameter 52: ACV (Acceleration VBUS) on p. 69 Parameter 53: ACC (Accelerometer) on p. 70 Parameter 55: CP0 (Custom PID 0) on p. 70 Parameter 56: CP1 (Custom PID 1) on p. 70 Parameter 57: CP2 (Custom PID 2) on p. 71 Parameter 58: CP3 (Custom PID 3) on p. 71 Parameter 59: CP4 (Custom PID 4) on p. 71 Parameter 60: CP5 (Custom PID 5) on p. 72 Parameter 61: CP6 (Custom PID 6) on p. 72 Parameter 62: CP7 (Custom PID 7) on p. 72 Parameter 63: CP8 (Custom PID 8) on p. 73 Parameter 64: CP9 (Custom PID 9) on p. 73 Parameter 65: MPG (Miles Per Gallon) on p. 73) Parameter 72: IG (Ignition) on p. 76 Parameter 73: DBO (Data Bytes Output) on p. 76 Parameter 74: DBI (Data Bytes Input) on p. 76 Parameter 75: OC (Override Count) on p. 77 Parameter 76: MNR (Pending Output State Timer) on p. 77 Parameter 77: OT (Output State) on p. 77 Parameter 78: OTP (Output Pending State) on p. 78 Parameter 87: FWB (Firmware Bootloader Version) on p. 78 Parameter 88: PT (Park Time) on p. 79 Parameter 90: PBMI (Proprietary and OBDII Bus Odometer) on p. 79 Parameter 91: PBFL (Proprietary Bus Fuel Level) on p. 80) Parameter 92: NKR (NanoKernel) on p. 80 Parameter 93: GSM (GSM Registration) on p. 81 Parameter 94: GSMP (GSM Registration Percentage) on p. 81 Parameter 95: GPSP (GPS Lock Percentage) on p. 82 Parameter 96: GPSQ (GPS Quality Lock Percentage) on p. 82 Parameter 97: PBOL (Proprietary Bus Oil Life) on p. 82 Parameter 98: PBLF (Proprietary Bus Left Front Tire Pressure) on p. 83 Parameter 99: PBRF (Proprietary Bus Right Front Tire Pressure) on p. 83 Parameter 100: PBLR (Proprietary Bus Left Rear Tire Pressure) on p. 84 Index / Value 6 / 0x10 6 / 0x20 6 / 0x40 6 / 0x80 7 / 0x01 7 / 0x02 7 / 0x04 7 / 0x08 7 / 0x10 7 / 0x20 7 / 0x80 8 / 0x01 8 / 0x02 8 / 0x04 8 / 0x08 8 / 0x10 8 / 0x20 8 / 0x40 8 / 0x80 9 / 0x01 9 / 0x02 10 / 0x01 10 / 0x02 10 / 0x04 10 / 0x08 10 / 0x10 10 / 0x20 10 / 0x40 11 / 0x80 12 / 0x01 12 / 0x04 12 / 0x08 12 / 0x10 12 / 0x20 12 / 0x40 12 / 0x80 13 / 0x01 13 / 0x02 13 / 0x04 13 / 0x08 13 / 0x10 Copyright 2022 Sensata Technologies, Inc. Page 40 | 271 XT2500 Product Manual Description Parameter 101: PBRR (Proprietary Bus Right Rear Tire Pressure) on p. 84 Index / Value 13 / 0x20 Parameter 102: ADC0 (Analog to Digital Converter Index 0) on p. 85 Parameter 103: ADC1 (Analog to Digital Converter Index 1) on p. 86 Parameter 107: SG0 (Smart Group 0) on p. 87 Parameter 109: EH (Engine Hours) on p. 87 Parameter 112: FLF (Fuel Level Filtered) on p. 88 Parameter 113: LOC (Location) on p. 88 Parameter 114: PS (Power Stage) on p. 89 Parameter 115: DSN (Device Serial Number) on p. 89 Parameter 116: ACT(Cellular Access Technology) on p. 90 Parameter 117: PSTI (Power Stage Transition Information) on p. 90 Parameter 118: DID (Driver Identification Number) on p. 91 Parameter 119: USEQ (Unidentified Driver Record Sequence Number) on p. 92 Parameter 120: JOMI (JBUS True Odometer) on p. 92 Parameter 121: JEH (JBUS Engine Hours) on p. 92 Parameter 122: AVT (Acceleration Vector Threshold Violation) on p. 93 Parameter 147: PBBL (Proprietary Bus Parking Brake Lamp) on p. 93 Parameter 148: PBBS (Proprietary Bus Parking Brake Status) on p. 93 Parameter 149: PBSP (Proprietary Bus Shifter Position) on p. 94 Parameter 150: PBDS (Proprietary Bus Driver Seatbelt) on p. 94 Parameter 151: PBPS (Proprietary Bus Passenger Seatbelt) on p. 95 Parameter 152: PBAL (Proprietary Bus Airbag Lamp) on p. 95 Parameter 153: FA (Faulty Alternator) on p. 95 Parameter 156: OS (Orientation Status) on p. 96 Parameter 163: OT2 (Output 2 Status) on p. 99 Parameter 164: OT3 (Output 3 Status) on p. 99 Parameter 190: SCT (Scantool) on p. 100 Parameter 191: CNUM (MSISDN) on p. 1 Parameter 197: PFLF (PPID Fuel Level Filtered) on p. 102 Parameter 208: IN4S (Input 4 State) on p. 102 Parameter 209: IN4A (Input 4 Set Count) on p. 102 Parameter 216: DIAG (Diagnostic Information) on p. 103 Parameter 217: PD0 (PID Data 0) on p. 103 Parameter 218: PD1 (PID Data 1) on p. 104 Parameter 219: PD2 (PID Data 2) on p. 104 Parameter 220 TRPM (Trip VBUS Data) on p. 104 Parameter 221: HDOP (GPS HDOP) on p. 104 13 / 0x40 13 / 0x80 14 / 0x08 14 / 0x20 15 / 0x01 15 / 0x02 15 / 0x04 15 / 0x08 15 / 0x10 15 / 0x20 15 / 0x40 15 / 0x80 16 / 0x01 16 / 0x02 16 / 0x04 19 / 0x08 19 / 0x10 19 / 0x20 19 / 0x40 19 / 0x80 20 / 0x01 20 / 0x02 20 / 0x10 21 / 0x08 21 / 0x10 24 / 0x40 24 / 0x80 25 / 0x20 27 / 0x01 27 / 0x02 28 / 0x01 28 / 0x02 28 / 0x04 28 / 0x08 28 / 0x10 28 / 0x20 Copyright 2022 Sensata Technologies, Inc. Page 41 | 271 XT2500 Product Manual 8.1. PARAMETER 0: EV (EVENT IDENTIFIER) The EV parameter identifies the event which triggered this record to be generated. Schema

{EV:EV}

Param EV Type STR8 Description 8-bit string value. Value 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 23 24 25 26 27 28 29 Description Reserved Ignition On / Trip Start / Engine On Ignition Off / Trip End / Engine Off Ignition On Periodic Report Ignition Off Periodic Report Power-up Message Power-up Message on GPS Lock Power-up Message on GSM Low Battery Alert Accelerometer Shock Event Acceleration based on VBUS speed Acceleration based on GPS speed Stage 0 Periodic Event Reporting Stage 1 Periodic Event Reporting Stage 2 Periodic Event Reporting Battery Disconnect Event Battery Reconnect Event Battery Periodic Disconnect Direction Change Speed VBUS Speed GPS Geofence Crossing Odometer VBUS Odometer GPS Input 1 Set Input 2 Clear Input 2 Set Input 2 Clear Input 3 Set Copyright 2022 Sensata Technologies, Inc. Page 42 | 271 XT2500 Product Manual Param Type Description Value 30 33 34 35 36 37 38 39 40 41 42 43 44 48 49 50 51 52 54 55 56 57 58 59 60 65 68 69 71 72 Description Input 3 Clear Diagnostics Movement Start Movement Stop System Report 0 System Information Park Idle Start Idle Stop Idle Periodic Best Time ADCThreshold ADCPeriodic Motion No-Motion Motion Periodic No-Motion Periodic Powerstage Transition ELD Live Record ELD UDR Acceleration Positive X Threshold Acceleration Negative X Threshold Acceleration Positive Y Threshold Acceleration Negative Y Threshold Acceleration Orientation Scantool Detection Input 4 Set Input 4 Clear Snapshot DTC Copyright 2022 Sensata Technologies, Inc. Page 43 | 271 XT2500 Product Manual 8.2. PARAMETER 2: D (DATE) Schema

{D:D}

Param D Type UINT32 Description The D parameter provides UNIX epoch time; the number of seconds since 00:00:00 January 1, 1970 UTC. A null value indicates that the current time is not known. 8.3. PARAMETER 3: TZ (TIME ZONE OFFSET) The TZ parameter presents the local time offset in 15-minute increments from UTC. Schema

{TZ:TZ}

Param TZ Type INT8 Description Number of 15-minute increments from UTC. A null value indicates that the current time is not known. 8.4. PARAMETER 4: LT (LATITUDE) GPS Latitude. Specifies north-south position of a point on the Earths surface. Latitude is an angle which ranges from 0 degrees at the equator to 90 degrees (north or south) at the poles. Schema

{LT:LT}

Param LT Type INT32 Description Decimal degrees of Latitude multiplied by 1e6. Copyright 2022 Sensata Technologies, Inc. Page 44 | 271 XT2500 Product Manual 8.5. PARAMETER 5: LN (LONGITUDE) GPS Longitude. Specifies the east-west position of a point on the Earths surface. Longitude is an angle which ranges from 0 degrees at the prime meridian to 180 degrees (east or west). Schema

{LN:LN}

Param LN Type INT32 Description Decimal degrees of Longitude multiplied by 1e6. 8.6. PARAMETER 6: AL (ALTITUDE) GPS Altitude. Specifies the distance from sea-level. Schema

{AL:AL}

Param AL Type INT32 Description Integer tenths of meters above or below sea-level. 8.7. PARAMETER 7: SPT (VBUS SPEED) VBUS Speed. Speed from the Vehicle Bus in kilometers per hour. Schema

{SPT : SPT }

Param SPT Type UINT16 Description Kilometers per hour. Copyright 2022 Sensata Technologies, Inc. Page 45 | 271 XT2500 Product Manual 8.8. PARAMETER 8: GSPT (GPS SPEED) GPS Speed. Speed from GPS in kilometers per hour. Schema

{GSPT : GSPT }

Param GSPT Type UINT16 Description Kilometers per hour. 8.9. PARAMETER 9: HD (GPS HEADING) GPS Heading. Navigation heading measured in tenths of degrees, e.g. a value of 1800 = 180.0 degrees. Schema

{HD : HD }

Param HD Type UINT16 Description 0 to 360 degrees device heading. 0 or (360) degrees indicates a direction toward true North. 90 degrees indicates a direction toward true East. 180 degrees is true South and 270 degrees is true West. 8.10. PARAMETER 10: SV (GPS SATELLITES) GPS Satellites. Schema

{SV : SV }

Param SV Type UINT8 Description Number of satellites used in the navigation solution. Copyright 2022 Sensata Technologies, Inc. Page 46 | 271 XT2500 Product Manual 8.11. PARAMETER 11: HP (GPS PDOP) GPS position dilution of precision (PDOP). Schema

{HP : HP }

Param HP Type UINT8 Description PDOP in tenths. DOP Value

< 10 Rating Ideal 10-20 Excellent 20-50 Good 50-100 Moderate 100-200 Fair 200 255 Poor Description Highest possible confidence level used for applications demanding the highest possible precision. At this confidence level, positional measurements are considered accurate enough to meet all but the most sensitive applications. Represents the minimum appropriate level for making business decisions. Positional measurements could be used to make reliable in-route navigation suggestions to the user. Positional measurements could be used for calculations, but the fix quality could still be improved. A more open view of the sky is recommended. Represents a low confidence level. Positional measurements should be discarded or used only to indicate a very rough estimate of the current location. At this level, measurements are inaccurate by as much as 300 meters with a 6-meter accurate device (50 DOP * 6 meters) and should be discarded. Copyright 2022 Sensata Technologies, Inc. Page 47 | 271 XT2500 Product Manual 8.12. PARAMETER 12: BV (BATTERY VOLTAGE) The Battery Voltage parameter presents the primary device power supply voltage measurement. Battery Voltage range is specified in the Maximum Ratings section of the manual. Schema

{BV: [BV, STATUS, HEALTH] }

Param BV STATUS Type UINT16 UINT8 Description Battery voltage in millivolts. Battery status. Status 0 1 2 Description None. Battery disconnected. Battery connected. HEALTH UINT8 Battery health. See Configuration 13: Device Battery Health Monitoring on p. 127 for more details on thresholds. Status 0 1 Description Battery okay. (Default). Battery low. 8.13. PARAMETER 13: CQ (CELLULAR SIGNAL QUALITY) The CQ parameter indicates the received signal strength indication (RSSI) from the cellular modem. There are periods of time, such as tower hand-off, when this value may not be valid for a short period of time. Schema

{CQ:CQ}

Param CQ Type INT16 Description The range of the values is dependent on the cellular module. Reports the raw dBm (negative value). When the RF power level of the received signal is the highest possible, the value 31 is reported. When it is not known, not detectable or currently not available, 99 is returned. During certain periods of time such as tower hand-off, the CQ value will be temporarily unavailable. Copyright 2022 Sensata Technologies, Inc. Page 48 | 271 XT2500 Product Manual 8.14. PARAMETER 14: MI (VIRTUAL ODOMETER GPS) MI provides a virtual lifetime odometer and trip odometer using GPS locations. The value is updated once per minute or whenever the GPS heading changes by more than 15 degrees since it was last updated. Schema

{MI : ODOMETER_M,TRIPODOM_M }

Parameter ODOMETER_M TRIPODOM_M Type UINT32 UINT32 Description Odometer value in meters. Current trip odometer in meters. 8.15. PARAMETER 15: MG (VEHICLE FUEL EFFICIENCY) Schema

{MG : MG }

Param MG Type UINT16 Description Instantaneous miles-per-gallon calculated during an ignition on sequence. Copyright 2022 Sensata Technologies, Inc. Page 49 | 271 XT2500 Product Manual 8.16. PARAMETER 16: GS (GPS LOCK STATUS) NOTE: GS may present NULL if the message payload is built before the GPScomponent is initialized. Schema

{GS : GS }

Param GS Type UINT8 Description GPS Lock Status. Status 0 1 2 3 4 5 Description None. Lock status unknown. Locked. GPS is locked, but the result is filtered. This can mean it has not been locked for enough consecutive solutions or an accuracy figure of merit is unsatisfactory to consider this position LockedGood. Unlocked. GPS solution is not locked. LockedGood. GPS solution is locked and integrated. Sleep. The GPS receiver is powered down. Filtered. The response has been filtered. 8.17. PARAMETER 17: GT (GPS TIME SINCE LAST LOCK) Schema

{GT : GT }

Param GT Type UINT32 Description Provides the number of seconds since last LockedGood status as described in parameter GS. Copyright 2022 Sensata Technologies, Inc. Page 50 | 271 XT2500 Product Manual 8.18. PARAMETER 18: FL (FUEL LEVEL) Schema

{FL : FL }

Param FL Type UINT8 Description Fuel Level displayed as 0 to 100 percent. 8.19. PARAMETER 19: XY (GEOFENCE STATUS) Geofence Status and last entered fence index. l Device can be in 10 fences at a given time, on a first-come-first-served basis. Once three geofences have been entered, the device will ignore further geofences until it has exited one of the first three. l XY returns geofence state changes and/or inside geofence status. Schema

{XY:{ID:STATUS}}

Parameter ID STATUS Type UINT16 UINT8 Description ID of the geofence. X bit returns geofence status. Value 0 1 Description Outside geofence. When reported due to a geofence crossing event, this can be interpreted as a geofence exit. Inside geofence. When reported due to a geofence crossing event, this can be interpreted as a geofence enter. 8.20. PARAMETER 20: FWM (MAIN FIRMWARE VERSION STRING) Schema

{FWM : FWM }

Param FWM Type STR8 Description Main firmware version string. Copyright 2022 Sensata Technologies, Inc. Page 51 | 271 XT2500 Product Manual 8.21. PARAMETER 23: LGTM (LAST GASP TIMESTAMP) The LGTM parameter provides UNIX epoch time; the number of seconds since 00:00:00 January 1, 1970 UTC. This value is stored to non-volatile memory every 5 minutes to provide an estimate of when the device was last removed from power. Schema

{LGTM : LGTM }

Param LGTM Type UINT32 Description Seconds. 8.22. PARAMETER 24: AXYZ (ACCELEROMETER XYZ VECTORS) Accelerometer X, Y, Z force vectors. Schema

{AXYZ : {X, Y, Z } }

Param X Y Z Type INT16 INT16 INT16 Description X-vector milli-G Y-vector milli-G Z-vector milli-G 8.23. PARAMETER 25: VN (VEHICLE IDENTIFICATION NUMBER) VN provides the vehicle identification number from the OBDII MODE9 PID2 parameter. Schema

{VN : VN }

Param VN Type STR8 Description Vehicle Identification Number (VIN). Copyright 2022 Sensata Technologies, Inc. Page 52 | 271 XT2500 Product Manual 8.24. PARAMETER 26: DTC (VEHICLE BUS DIAGNOSTIC TROUBLE CODES) DTC provides a list of codes by ECU. Schema

{DTC :

{DI

: {N_ECU_RESPONDED, N_ECU_HASDTC }}

{ECUID : {NC, NCR, DTC_1, , DTC_N }}

Param N_ECU N_ECU_ HASDTC ECUID NC NCR DTC_N Type UINT8 UINT8 UINT32 UINT8 UINT8 UINT32 Description Number of ECUs that responded to the request. Number of ECUs that had DTCs. ECU ID. Number of codes present on vehicle bus. Number of codes reported in message. NCR will be less than or equal to NC. Diagnostic trouble code. Msgpack reports the codes as decimal values between 0 and 4294967295. The hexadecimal equivalent of the value is decoded differently depending on which protocol is in use. Byte 3 Bits 31 - 24 Byte 2 Bits 23 - 16 Byte 1 Bits 15 - 8 Byte 0 Bits 7 - 0 OBDII Bits 31 - 16 15 - 14 Description 0 DTC type Description

'P'

'C'

'B'

'U'

Value 00 01 10 11 Code 13 - 0 J1939 Copyright 2022 Sensata Technologies, Inc. Page 53 | 271 XT2500 Product Manual Param Type Description Bits 31 Description SPN conversion method Description Valid data reported by vehicle Invalid data reported by vehicle. Used by certain vehicles until 1997. Value 0 1 0 FMI SPN Description 0 Fault type Value 0 1 Description PID SID FMI 0 DTC type Value 0 1 Description Standard Expansion 30 - 29 28 - 24 23 - 0 J1708 Bits 31 - 29 28 27 - 24 23 - 17 16 15 - 8 7 - 0 SID/PID Count Copyright 2022 Sensata Technologies, Inc. Page 54 | 271 XT2500 Product Manual 8.25. PARAMETER 28: FP (FINGERPRINT) Fingerprint provides a description of the available MODE 1 PIDs. Schema

{FP :

{ECUID : {MODE1P00, MODE1P20, MODE1P40, MODE1P60, MODE1P80, MODE1PA0 } }

Param ECUID MODE1P00 MODE1P20 MODE1P40 MODE1P60 MODE1P80 MODE1PA0 Type UINT32 UINT32 UINT32 UINT32 UINT32 UINT32 UINT32 Description ECU ID. Mask from MODE 1 PID 0. Mask from MODE 1 PID 20. Mask from MODE 1 PID 40. Mask from MODE 1 PID 60. Mask from MODE 1 PID 80. Mask from MODE 1 PID A0. Copyright 2022 Sensata Technologies, Inc. Page 55 | 271 XT2500 Product Manual 8.26. PARAMETER 29: TID (TRIP IDENTIFIER) Trip identifier provides a unique ID for each trip. This value is stored in non-volatile memory and is incremented at trip start. This parameter will only start reporting after detecting an ignition on event. Until then, it will report as "None". This parameter is deprecated in favor of TID2. Schema

{TID: ["DSN" , N_BOOTCNT, TRIP_INDEX ] }

Param DSN Type STR8 Description Device Serial Number. l Maximum length is 30 characters N_BOOTCNT UINT16 TRIP_INDEX UINT32 l Supports alphanumeric characters (A-Z and a-z), digits (0-9) Device boot counter. This increments as the device initializes after a power-

up or reset. Trip index is the number of trips since the device has been installed. This value is stored in non-volatile memory and is updated on trip completion. l Trips which are interrupted do not cause the trip index to increment. l TRIP_INDEX does not maintain across power cycles/reboots and must be used in conjunction with N_BOOTCNT to get a unique identifier for that trip. Consequently, it will always reset back to 1 for the first trip after a firmware upgrade or reboot. 8.27. PARAMETER 30: MIL (MALFUNCTION INDICATOR LAMP) Malfunction indicator lamp (MIL) status is provided by MODE 1 PID 01 Schema

{MIL : MIL }

Param MIL Type BOOL Description MIL Status l True: MIL set l False: MIL not set Copyright 2022 Sensata Technologies, Inc. Page 56 | 271 XT2500 Product Manual 8.28. PARAMETER 31: RM (RPM) RM indicates the rotational speed of the engine in revolutions per minute (rpm) generally of the crankshaft. Schema

{RM : RM }

Param RM Type UINT16 Description Revolutions per minute. 8.29. PARAMETER 32: IT (TRIP IDLE TIME) See Configuration 50: Idle Detection Thresholds on p. 166 for more details. Schema

{IT : IT }

Param IT Type UINT32 Description Engine idle time during trip in seconds. Copyright 2022 Sensata Technologies, Inc. Page 57 | 271 XT2500 Product Manual 8.30. PARAMETER 33: SI (SIM ICCID) Subscriber identification module (SIM), SIM card, integrated circuit card identifier (ICCID). The ICCID is stored in the SIM card and/or engraved or printed on the SIM card body. The ICCID is defined by the ITU-T recommendation E.118 as the Primary Account Number. The ICCID structure is based on ISO/IEC 7812. The ICCID is composed of 3 subparts:

l Issuer identification number (IIN), Maximum of seven digits. o Major industry identifier (MII), 2 fixed digits, 89 for telecommunication purposes. o Country code, 1-3 digits, as defined by ITU-T recommendation E.164. o Issuer identifier, 1-4 digits. l Individual account identification o Individual account identification number. Its length is variable, but every number under one IIN has the same length. l Check digit o Single digit calculated from the other digits using the Luhn algorithm. Schema

{SI : "SI" }

Param SI Type STR8 Description ICCID as an ASCII string. 8.31. PARAMETER 34: BN (BOOT COUNT) Schema

{BN : BN }

Param BN Type UINT16 Description Boot Count indicates the number of device power-ups and resets which have occurred since production of the device. Copyright 2022 Sensata Technologies, Inc. Page 58 | 271 XT2500 Product Manual 8.32. PARAMETER 35: PN (POWER-LOSS COUNT) Power-loss is determined as device power-up during fielded operation. This state of unexpected power-up is determined based on the storage of a last-gasp-timestamp. If this value is present on device power-up, we determine that unexpected power-loss had previously occurred. In devices which contain a back-up (or last gasp) battery this is determine by device loss of main power. Schema

{PN : PN }

Param PN Type UINT16 Description This parameter tracks the number of unexpected losses of power. In devices with a backup battery, this is determined by loss of main power. 8.33. PARAMETER 36: CI (CELLULAR NETWORK INFORMATION) Basic cellular network information. Schema

{CI : [REG, CID, TAC, QUAL, RAT, RSSI, BER, RSRQ, RSRP, OPER ] }

Param REG Type UINT8 Description Registration status. Status 0 1 2 3 4 5 6 7 Description Not registered, not searching for an operator to register to. Registered, home network. Not registered, trying to attach or searching for an operator to register to. Registration denied. Unknown, possibly out of coverage. Registered, roaming. LTE. LTE Roaming. CID TAC QUAL UINT32 UINT16 UINT8 E-UTRAN cell identifier. Tracking area code. The allowed range is 0-7 and 99. The information provided depends on the selected RAT. l In UMTS RAT indicates the Energy per Chip/Noise (ECN0) ratio in dB Copyright 2022 Sensata Technologies, Inc. Page 59 | 271 XT2500 Product Manual Param Type Description levels of the current cell. 3GPP TS 25.133 specifies the range 0-49 for EcN0 which is mapped to the range 0-7 of QUAL. l In LTE RAT indicates the Reference Signal Received Quality (RSRQ). TS 36.133 specifies the range 0-34 for RSRQ which is mapped to the range 0-7 of QUAL. Status 0 1 2 3 4 5 6 7 99 UMTS RAT ECN0_LEV >= 44 38 <= ECN0_LEV < 44 32 <= ECN0_LEV < 38 26 <= ECN0_LEV < 32 20 <= ECN0_LEV < 26 14 <= ECN0_LEV < 20 8 <= ECN0_LEV < 14 ECN0_LEV < 8 Not Known or Not Detectable LTE RAT RSRQ_LEV < 5 5 <= RSRQ_LEV < 10 10 <= RSRQ_LEV < 14 14 <= RSRQ_LEV < 18 18 <= RSRQ_LEV < 22 22 <= RSRQ_LEV < 26 26 <= RSRQ_LEV < 30 RSRQ_LEV >= 30 RAT UINT8 Radio Access Technology. Status 0 1 2 3 Description None 2G 3G LTE RSSI INT16 Received Signal Strength Indication. Status 0 1 - 62 63 99 Description Less than -110 dBm From -110 to -49 dBm with 1dBm steps

-48 dBm or greater Not Known or Not Detectable BER UINT8 Bit Error Rate. Status 0 - 7 99 Description RXQUAL values described in GSM TS 05.08 Not Known or Not Detectable RSRQ INT16 Reference Signal Received Quality. Copyright 2022 Sensata Technologies, Inc. Page 60 | 271 XT2500 Product Manual Param Type Description Status 0 1 - 33 34 255 Description

-19 dB or less From -19.5 dB to -3.5 dB with 0.5 dB steps

-3 dB or greater Not Known or Not Detectable RSRP INT16 Reference Signal Received Power. Status 0 1 - 96 97 255 Description

-141 dBm or less From -140 dBm to -45 dBm with 1 dBm steps

-44 dBm or greater Not Known or Not Detectable OPER STR8 Mobile Network Operator (MNO) short alphanumeric format. Max 10 characters. 8.34. PARAMETER 37: AC (ACCELERATION) AC provides acceleration as measured by the device using rate of change in velocity with respect to time. This measurement uses the speed information provided by the GPS receiver. Schema

{AC : AC }

Param AC Type INT16 Description Measured in tenths of kilometers-per-hour-per-second (0.1 kmh/s). Copyright 2022 Sensata Technologies, Inc. Page 61 | 271 XT2500 Product Manual 8.35. PARAMETER 39: HBE (DEVICE RESET REASON) HBE provides the last device reset reason. This includes power-up/power-on. Schema

{HBE : HBE }

Param HBE Type UINT8 Description Reset Reason Status 0 1 2 3 4 5 6 7 Description Unknown reset. Hardware watchdog reset. Brown-out reset. Hibernate reset. User reset. Software reset. This is initiated by the embedded firmware. Power on reset. Main oscillator reset. 8.36. PARAMETER 40: MTN (MAINTENANCE LOG) Device maintenance log provides diagnostic information collected during the life of the device. Schema

{MTN :[NCON, NBC, NPL, NSR, NPR, NUKR, NWR, NBR, NHR, NUR, HBE, NCR, NPD, NND, NFR, NFW, NER, ELC,GFR]}

Parameter NCON NBC NPL NSR NPR NUKR NWR NBR NHR NUR Type UINT32 UINT16 UINT16 UINT16 UINT16 UINT16 UINT8 UINT8 UINT8 UINT8 Description Number of console commands received. Device boot counter. This increments as the device initializes after a power-

up or reset. Power loss counter. Software reset counter. Power-on resets. Unknown resets. Hardware watchdog resets. Brown-out resets. Hibernate resets. User-initiated resets. Copyright 2022 Sensata Technologies, Inc. Page 62 | 271 XT2500 Product Manual Parameter ELC HBE Type UINT8 UINT8 Description Event log percentage full. Last reset cause. Status 0 1 2 3 4 5 6 7 Description Unknown reset. Hardware watchdog reset. Brown-out reset. Hibernate reset. User reset. Software reset. This is initiated by the embedded firmware. Power On reset. Main oscillator reset. NCR NPD NND NFR NFW NER GFR UINT16 UINT16 UINT16 UINT16 UINT16 UINT16 UINT8 Cellular modem reset counter. Protocol disconnect counter (e.g. MQTT or CoAP). Network disconnect counter. Number of failed read attempts from the event file system. Number of failed write attempts from the event file system. Number of event log resets. GSMfile system reversions. 8.37. PARAMETER 41: IM (CELLULAR IMEI) International Mobile Equipment Identity (IMEI) is a number used to uniquely identify the devices cellular module. Schema

{IM : "IMEI" }

Param IMEI Type STR8 Description 15 decimal digits (14 digits plus a check digit). Copyright 2022 Sensata Technologies, Inc. Page 63 | 271 XT2500 Product Manual 8.38. PARAMETER 42: HACC (GPS HORIZONTAL ACCURACY ESTIMATE) Schema

{HACC : HACC }

Param HACC Type UINT8 Description HACC provides a horizontal accuracy estimate in meters based on the GPS solution. 8.39. PARAMETER 43: OB (VEHICLE BUS PROTOCOL) Last detected vehicle bus protocol. Schema

{OB : OB }

Param OB Type UINT16 Description Bus Protocol. Status 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 Description None / Unknown ISO_08 ISO_94 KW_SLOW KW_FAST PWM VPW CAN_11_500 CAN_11_250 CAN_11_125 CAN_29_500 CAN_29_250 CAN_29_125 J1939 J1708 Copyright 2022 Sensata Technologies, Inc. Page 64 | 271 XT2500 Product Manual 8.40. PARAMETER 44: MID (MANUFACTURER ID) Device Manufacturer Identification. Schema

{MID : [CM, CF, GM, GF, XM ] }

Param CM Type UINT8 Description Cell Module Type. Value 0 1 2 3 4 5 6 7 8 9 Description None u-blox TOBY R200 u-blox TOBY R202 u-blox SARAR410 u-blox LARA R202 Quectel BG95 M1 Quectel BG95 M2 Quectel BG95 M3 Quectel BG95 MF Quectel BG77 CF UINT8 Cell Module Firmware. This enumeration specifies if the cell module firmware is supported by the cellular module. Value 0x00 0xfd 0xfe 0xff Description None Known Unspecified Unknown Invalid GM UINT8 GPS Module HW, Value 0 3 Description None 80000 GF UINT8 GPS Module FW. Copyright 2022 Sensata Technologies, Inc. Page 65 | 271 XT2500 Product Manual Param Type Description Value 0 4 5 Description None ROM CORE 2.01 (75331) ROM CORE 3.01 (107888) XM UINT8 Xirgo Device HWID 8.41. PARAMETER 45: OMI (VIRTUAL ODOMETER VBUS) OMI provides a virtual odometer and trip odometer using data presented by the vehicle bus. Distance is calculated using speed over time. Schema

{OMI : ODOMETER_M,TRIPODOM_M }

Parameter ODOMETER_M TRIPODOM_M Type UINT32 UINT32 Description Calculated distance in meters. Calculated mileage in meters since last ignition on. 8.42. PARAMETER 46: CNT (TRIP COUNT) CNT is a running count of the number of trips that the device has registered. Schema

{CNT : CNT }

Param CNT Type UINT32 Description Trip Counter Copyright 2022 Sensata Technologies, Inc. Page 66 | 271 XT2500 Product Manual 8.43. PARAMETER 47: CH (CONFIGURATION HASH) CH provides a 32-bit murmur3 hash of the device configuration. Schema

{CH : CH }

Param CH Type UINT32 Description Hash 8.44. PARAMETER 48: CT (CELLULAR NETWORK TIME) Schema

{CT : CT }

Param CT Type UINT32 Description The CT parameter reports in UTC and is recorded by the cellular network. A null value indicates that the current time is not known. 8.45. PARAMETER 49: UT (DEVICE UPTIME) Schema

{UT : UT }

Param UT Type UINT32 Description UT provides the number of seconds since the device was powered. Copyright 2022 Sensata Technologies, Inc. Page 67 | 271 XT2500 Product Manual 8.46. PARAMETER 50: BT (BEST TIME) BT provides a device derived current time based on prioritized time sources. NOTE: Priority of time sources match the enumeration found in the SRC parameter below. I.e., GPS older than 1 second will always be prioritized before cell time unless the configured priority is GSM_REAL for configuration 30. The prioritized timesource will take precedence if available. Schema

{BT : [T, SRC, OFS ] }

Param T Type UINT32 SRC UINT8 Description The T parameter provides UNIX epoch time; the number of seconds since 00:00:00 January 1, 1970 UTC Time source used Value 0 1 2 3 Description None GPS (obtained within the last second) GPS (older than 1 second) Cellular OFS UINT32 Seconds since time was last retrieved from time source. Copyright 2022 Sensata Technologies, Inc. Page 68 | 271 XT2500 Product Manual 8.47. PARAMETER 51: IS (IGNITION SOURCE) IS reports the on/off state of all possible signals/data sources that detect the vehicle ignition state, as determined by Configuration 12: Ignition Status Determination Masks on p. 126. The parameter is a bitfield;

each bit indicates the on/off state of an individual ignition source. The bit positions of the ignition sources map directly to those used in the 'and' and 'or' masks of the ignition mask. Schema

{IS : IS }

Param IS Type UINT16 Description Ignition Source Value 0x00 0x01 0x02 0x04 0x08 0x10 0x20 Description Ignition Unknown VBUS Virtual Battery (alternator based) Virtual Vibration (accelerometer based) Virtual Movement (GPS based) Wired Ignition VBUS Ignition Pin (tied to pin 8 on external pins) 8.48. PARAMETER 52: ACV (ACCELERATION VBUS) ACV provides acceleration as measured by the device using rate of change in velocity with respect to time. This measurement uses the speed information provided by the vehicle bus. Schema

{ACV : ACV }

Param ACV Type INT16 Description Measured in tenths of kilometers-per-hour-per-second (0.1 kmh/s). Copyright 2022 Sensata Technologies, Inc. Page 69 | 271 XT2500 Product Manual 8.49. PARAMETER 53: ACC (ACCELEROMETER) Accelerometer force vectors {X, Y, Z } are provided in the ACC parameter. The capture occurs when the threshold set in Configuration 29: Accelerometer Shock/Vibration on p. 151 is exceeded. Schema

{ACC:{X : [X00, X01, ..., X98, X99 ] },{Y : [Y00, Y01, ..., Y98, Y99 ] },{Z : [Z00, Z01, ..., Z98, Z99 ] } }

Param X##

Y##

Z##

Type INT16 INT16 INT16 Description X vector milli-G. Y vector milli-G. Z vector milli-G. 8.50. PARAMETER 55: CP0 (CUSTOM PID 0) Custom PID returns raw data from user-defined custom PIDs. See Configuration 7: Custom Parameter IDs on p. 115 for more information. Schema

{"CP0" : {PID : DATA} }

Param PID DATA Type INT8 BIN8 Description PID selected in custom configuration. Size of data returned is determined by custom PID configuration. 8.51. PARAMETER 56: CP1 (CUSTOM PID 1) Custom PID returns raw data from user-defined custom PIDs. See Configuration 7: Custom Parameter IDs on p. 115 for more information. Schema

{"CP1" : {PID : DATA} }

Param PID DATA Type INT8 BIN8 Description PID selected in custom configuration. Size of data returned is determined by custom PID configuration. Copyright 2022 Sensata Technologies, Inc. Page 70 | 271 XT2500 Product Manual 8.52. PARAMETER 57: CP2 (CUSTOM PID 2) Custom PID returns raw data from user-defined custom PIDs. See Configuration 7: Custom Parameter IDs on p. 115 for more information. Schema

{"CP2" : {PID : DATA} }

Param PID DATA Type INT8 BIN8 Description PID selected in custom configuration. Size of data returned is determined by custom PID configuration. 8.53. PARAMETER 58: CP3 (CUSTOM PID 3) Custom PID returns raw data from user-defined custom PIDs. See Configuration 7: Custom Parameter IDs on p. 115 for more information. Schema

{"CP3" : {PID : DATA} }

Param PID DATA Type INT8 BIN8 Description PID selected in custom configuration. Size of data returned is determined by custom PID configuration. 8.54. PARAMETER 59: CP4 (CUSTOM PID 4) Custom PID returns raw data from user-defined custom PIDs. See Configuration 7: Custom Parameter IDs on p. 115 for more information. Schema

{"CP4" : {PID : DATA} }

Param PID DATA Type INT8 BIN8 Description PID selected in custom configuration. Size of data returned is determined by custom PID configuration. Copyright 2022 Sensata Technologies, Inc. Page 71 | 271 XT2500 Product Manual 8.55. PARAMETER 60: CP5 (CUSTOM PID 5) Custom PID returns raw data from user-defined custom PIDs. See Configuration 7: Custom Parameter IDs on p. 115 for more information. Schema

{"CP5" : {PID : DATA} }

Param PID DATA Type INT8 BIN8 Description PID selected in custom configuration. Size of data returned is determined by custom PID configuration. 8.56. PARAMETER 61: CP6 (CUSTOM PID 6) Custom PID returns raw data from user-defined custom PIDs. See Configuration 7: Custom Parameter IDs on p. 115 for more information. Schema

{"CP6" : {PID : DATA} }

Param PID DATA Type INT8 BIN8 Description PID selected in custom configuration. Size of data returned is determined by custom PID configuration. 8.57. PARAMETER 62: CP7 (CUSTOM PID 7) Custom PID returns raw data from user-defined custom PIDs. See Configuration 20: Proprietary PIDs on p. 1 for more information. Schema

{"CP7" : {PID : DATA} }

Param PID DATA Type INT8 BIN8 Description PID selected in custom configuration. Size of data returned is determined by custom PID configuration. Copyright 2022 Sensata Technologies, Inc. Page 72 | 271 XT2500 Product Manual 8.58. PARAMETER 63: CP8 (CUSTOM PID 8) Custom PID returns raw data from user-defined custom PIDs. See Configuration 7: Custom Parameter IDs on p. 115 for more information. Schema

{"CP8" : {PID : DATA} }

Param PID DATA Type INT8 BIN8 Description PID selected in custom configuration. Size of data returned is determined by custom PID configuration. 8.59. PARAMETER 64: CP9 (CUSTOM PID 9) Custom PID returns raw data from user-defined custom PIDs. See Configuration 7: Custom Parameter IDs on p. 115 for more information. Schema

{"CP9" : {PID : DATA} }

Param PID DATA Type INT8 BIN8 Description PID selected in custom configuration. Size of data returned is determined by custom PID configuration. 8.60. PARAMETER 65: MPG (MILES PER GALLON) MPG returns three filtered versions of fuel efficiency. This is the average miles per gallon in tenths. Schema

{"MPG" : [MPG_EMA, MPG_CMA, MPG_TRIPCMA ] }

Param MPG_EMA MPG_CMA MPG_ TRIPCMA Type UINT16 UINT16 UINT16 Description Exponential Moving Average within a 10-minute window (in tenths of MPG). Cumulative Moving Average accumulated since device power-on (in tenths of MPG). Cumulative Moving Average during the last trip (in tenths of MPG). Copyright 2022 Sensata Technologies, Inc. Page 73 | 271 XT2500 Product Manual 8.61. PARAMETER 67: IN1A (INPUT 1 SET COUNT) IN1A is the number of seconds that Input 1 has been active since boot. Schema

{IN1A:IN1A}

Data Type

{IN1A:UINT32}

JSON Syntax

{"IN1A":INTEGER}

Example

{IN1A:0}

MessagePack Bytestream D9 04 49 4E 31 41 CE 00 00 00 00 Parameter IN1A Type UINT32 Description Number of seconds input 1 has been active since boot. 8.62. PARAMETER 68: IN2S (INPUT 2 STATE) IN2S configures the current state of Input Pin 2. Schema

{IN2S:IN2S}

Data Type

{IN2S:UINT8}

JSON Syntax

{"IN2S":INTEGER}

Example

{IN2S:0}

MessagePack Bytestream D9 04 49 4E 32 53 CC 00 Parameter IN2S Type UINT8 Description Input 2 pin state Value 0 1 Description Clear Set Copyright 2022 Sensata Technologies, Inc. Page 74 | 271 XT2500 Product Manual 8.63. PARAMETER 69: IN2A (INPUT 2 SET COUNT) IN2A is the number of seconds that Input 2 has been active since boot. Schema

{IN2A:IN2A}

Data Type

{IN2A:UINT32}

JSON Syntax

{"IN2A":INTEGER}

Example

{IN2A:0}

MessagePack Bytestream D9 04 49 4E 32 41 CE 00 00 00 00 Parameter IN2A Type UINT32 Description Number of seconds input 2 has been active since boot. 8.64. PARAMETER 70: IN3S (INPUT 3 STATE) IN3S configures the current state of Input Pin 3. Schema

{IN3S:IN3S}

Parameter IN3S Type UINT8 Description Input 3 pin state Value 0 1 Description Clear Set 8.65. PARAMETER 71: IN3A (INPUT 3 SET COUNT) IN3A is the number of seconds that Input 3 has been active since boot. Schema

{IN3A:IN3A}

Copyright 2022 Sensata Technologies, Inc. Page 75 | 271 XT2500 Product Manual Parameter IN3A Type UINT32 Description Number of seconds input 3 has been active since boot. 8.66. PARAMETER 72: IG (IGNITION) The ignition state is governed by the states of the ignition sources in Parameter 51: IS (Ignition Source) on p. 69 and how the combination of their states determines ignition to be on or off (Configuration 12: Ignition Status Determination Masks on p. 126). Schema

{IG : IG }

Param IG Type UINT8 Description Ignition status. Value 0 1 2 Description None (ignition never determined). Ignition on. Ignition off. 8.67. PARAMETER 73: DBO (DATA BYTES OUTPUT) DBO returns the number of data bytes output by the device. Schema

{DBO:DBO}

Parameter DBO Type UINT32 Description Number of output bytes. 8.68. PARAMETER 74: DBI (DATA BYTES INPUT) DBI returns the number of data bytes input by the device. Schema

{DBI:DBI}

Parameter DBI Type UINT32 Description Number of input bytes. Copyright 2022 Sensata Technologies, Inc. Page 76 | 271 XT2500 Product Manual 8.69. PARAMETER 75: OC (OVERRIDE COUNT) OC is the number of manual overrides that have been triggered on the output pin. Schema

{OC:{"1":OC,"2":OC,"3":OC}}

Parameter OC Type UINT8 Description Number of manual overrides. 8.70. PARAMETER 76: MNR (PENDING OUTPUT STATE TIMER) Number of seconds remaining until a pending output state will be applied to the specified output pin. Schema

{MNR:{'1':MNR, '2':MNR, "3":MNR}}

Parameter MNR Type UINT32 Description Seconds remaining until the pending output state is applied. 8.71. PARAMETER 77: OT (OUTPUT STATE) OT is output state that is currently applied to the output pin. Schema

{OT:{"1": OT, "2": OT,"3" : OT}}

Parameter OT Type UINT8 Description Output state. Value 0 1 Description Clear Set Copyright 2022 Sensata Technologies, Inc. Page 77 | 271 XT2500 Product Manual 8.72. PARAMETER 78: OTP (OUTPUT PENDING STATE) Pending output state that will be applied to the output pin when the delay time has expired. If no delayed output state has been set, this will be equal to the OT parameter. Schema

{OTP:{"1": OTP, "2": OTP, "3": OTP}}

Parameter OTP Type UINT8 Description Pending output state that will be applied to the output pin when the delay time has expired. Value 0 1 Description Clear Set 8.73. PARAMETER 87: FWB (FIRMWARE BOOTLOADER VERSION) Main firmware bootloader version string. Schema

{FWB:FWB}

Parameter FWB Type STR8 Description FW Bootloader Version String. Copyright 2022 Sensata Technologies, Inc. Page 78 | 271 XT2500 Product Manual 8.74. PARAMETER 88: PT (PARK TIME) The vehicle is considered parked when it has stopped moving (See Configuration 45: Vehicle Movement Detection on p. 161), the ignition is off (See Parameter 72: IG (Ignition) on p. 76), and it has been in that state for a configurable amount of time (See Configuration 49: Park Time Threshold on p. 165). This parameter will only reset after an ignition on/off event. It will retain its value in movement and ignition off and will continue incrementing where it left off when movement stops again. Schema

{PT:PT}

Parameter PT Type UINT32 Description The number of seconds since the vehicle stopped moving and had the ignition off. 8.75. PARAMETER 90: PBMI (PROPRIETARY AND OBDII BUS ODOMETER) Proprietary bus odometer. Schema

{"PBMI" : {"UNITS" : VALUE} }

Param UNITS Type STR8 Description Unit currently available. Unit KM Description Kilometer. VALUE FLOAT Float 32 value of represented unit. Copyright 2022 Sensata Technologies, Inc. Page 79 | 271 XT2500 Product Manual 8.76. PARAMETER 91: PBFL (PROPRIETARY BUS FUEL LEVEL) Proprietary bus fuel level. Schema

{"PBFL" : {"UNITS" : VALUE } }

Param UNITS Type STR8 Description Unit currently available. String

Description Percent VALUE FLOAT Float 32 value of represented unit. 8.77. PARAMETER 92: NKR (NANOKERNEL) NanoKernel information. Schema

{"NKR": ["NAME", "REVISION" , VERSION, "VIN"] }

Param NAME REVISION VERSION VIN Type STR8 STR8 UINT32 STR8 Description NKR file name. Maximum size is 32. Current revision of the NKR file. Maximum size is 10. Current version of the NKRfile. Vehicle identification number. Maximum size is 18. Copyright 2022 Sensata Technologies, Inc. Page 80 | 271 XT2500 Product Manual 8.78. PARAMETER 93: GSM (GSM REGISTRATION) GSM registration status. Schema

{GSM:GSM}

Parameter GSM Type UINT8 Description GSM Registration State Value 0 1 2 3 4 5 Description None Home Searching Denied Unknown Roaming 8.79. PARAMETER 94: GSMP (GSM REGISTRATION PERCENTAGE) GSM registration time divided by GSM On time, displayed as a percentage with one decimal point of precision. Not tracked while device is in Deep Sleep mode. Schema

{GSMP:GSMP}

Parameter GSMP Type UINT32 Description Percent of GSM Registered Time. Copyright 2022 Sensata Technologies, Inc. Page 81 | 271 XT2500 Product Manual 8.80. PARAMETER 95: GPSP (GPS LOCK PERCENTAGE) GPS lock time divided by GPS On time displayed as a percentage with one decimal point of precision. Schema

{GPSP:GPSP}

Parameter GPSP Type UINT32 Description Percentage of total accumulated GPS lock time over total accumulated GPS power-on time. 8.81. PARAMETER 96: GPSQ (GPS QUALITY LOCK PERCENTAGE) GPS quality lock time displayed as a percentage with one decimal point of precision. Determined when the GPS has at least five locked satellites divided by GPS On time. Schema

{GPSQ:GPSQ}

Parameter GPSQ Type UINT32 Description Percentage of total accumulated GPS locked good time over total accumulated GPS power-on time. 8.82. PARAMETER 97: PBOL (PROPRIETARY BUS OIL LIFE) Proprietary bus oil life remaining. Schema

{"PBOL" : {"UNITS" : VALUE } }

Param UNITS Type STR8 Description Units currently available. Unit

Description Percent of life remaining VALUE FLOAT Float 32 value of represented unit. Copyright 2022 Sensata Technologies, Inc. Page 82 | 271 XT2500 Product Manual 8.83. PARAMETER 98: PBLF (PROPRIETARY BUS LEFT FRONT TIRE PRESSURE) Proprietary bus tire pressure for left front tire. Schema

{"PBLF" : {"UNITS" : VALUE } }

Param UNITS Type STR8 Description Units currently available. Unit kpa Description Kilopascals VALUE FLOAT Float 32 value of represented unit. 8.84. PARAMETER 99: PBRF (PROPRIETARY BUS RIGHT FRONT TIRE PRESSURE) Proprietary bus tire pressure for right front tire. Schema

{"PBRF" : {"UNITS" : VALUE } }

Param UNITS Type STR8 Description Units currently available. Unit kpa Description Kilopascals VALUE FLOAT Float 32 value of represented unit. Copyright 2022 Sensata Technologies, Inc. Page 83 | 271 XT2500 Product Manual 8.85. PARAMETER 100: PBLR (PROPRIETARY BUS LEFT REAR TIRE PRESSURE) Proprietary bus tire pressure for left rear tire. Schema

{"PBLR" : {"UNITS" : VALUE } }

Param UNITS Type STR8 Description Units currently available. Unit kpa Description Kilopascals VALUE FLOAT Float 32 value of represented unit. 8.86. PARAMETER 101: PBRR (PROPRIETARY BUS RIGHT REAR TIRE PRESSURE) Proprietary bus tire pressure for right rear tire. Schema

{"PBRR" : {"UNITS" : VALUE } }

Param UNITS Type STR8 Description Units currently available. Unit kpa Description Kilopascals VALUE FLOAT Float 32 value of represented unit. Copyright 2022 Sensata Technologies, Inc. Page 84 | 271 XT2500 Product Manual 8.87. PARAMETER 102: ADC0 (ANALOG TO DIGITAL CONVERTER INDEX 0) Information about logical ADC 0. Schema

{ADC0:[ID,MV,FLAGS]}

Parameter ID Type UINT8 Description Physical ADC ID. Value 0 1 2 3 4 5 Description None. Main voltage Battery voltage External ADC 1 External ADC 2 External ADC 3 MV FLAGS UINT16 UINT16 Voltage of this ADC (mV). Mask of ADC transition states Value 0x01 0x02 0x04 0x08 0x10 0x20 0x40 Description Indicates this ADC is currently above threshold 1. Indicates this ADC is currently above threshold 2. Indicates this ADC is currently transitioning above or below threshold 1. Indicates this ADC is currently transitioning above or below threshold 2. Indicates this ADC transitioned above or below threshold 1 this second. Indicates this ADC transitioned above or below threshold 2 this second. Indicates this ADC triggered a periodic event this second. Copyright 2022 Sensata Technologies, Inc. Page 85 | 271 XT2500 Product Manual 8.88. PARAMETER 103: ADC1 (ANALOG TO DIGITAL CONVERTER INDEX 1) Information about logical ADC 1. Schema

{ADC1:[ID,MV,FLAGS]}

Parameter ID Type UINT8 Description Physical ADC ID. Value 0 1 2 3 4 5 Description None. Main voltage Battery voltage External ADC 1 External ADC 2 External ADC 3 MV FLAGS UINT16 UINT16 Voltage of this ADC (mV). Mask of ADC transition states Value 0x01 0x02 0x04 0x08 0x10 0x20 0x40 Description Indicates this ADC is currently above threshold 1. Indicates this ADC is currently above threshold 2. Indicates this ADC is currently transitioning above or below threshold 1. Indicates this ADC is currently transitioning above or below threshold 2. Indicates this ADC transitioned above or below threshold 1 this second. Indicates this ADC transitioned above or below threshold 2 this second. Indicates this ADC triggered a periodic event this second. Copyright 2022 Sensata Technologies, Inc. Page 86 | 271 XT2500 Product Manual 8.89. PARAMETER 107: SG0 (SMART GROUP 0) Smart Group 0 returns cellular statistics information. Schema

{SG0:[ERROR_CNT,S_START_CNT,S_END_CNT,S_CONN_CNT,S_DISCON_CNT,S_NOREG_CNT,S_NOCON_ CNT,S_BACKOFF_CNT,S_REG_LOSS_CNT,S_DROP_CNT,S_TIMEO_CNT,NET_HANDOFF_CNT,S_BYTES_IN,S_ BYTES_OUT,SMS_IN,SMS_OUT,SMS_SPAM]}

Parameter ERROR_CNT S_START_CNT S_END_CNT S_CONN_CNT S_DISCON_CNT S_NOREG_CNT S_NOCON_CNT S_BACKOFF_CNT S_REG_LOSS_CNT S_DROP_CNT S_TIMEO_CNT NET_HANDOFF_ CNT S_BYTES_IN S_BYTES_OUT SMS_IN SMS_OUT SMS_SPAM Type UINT8 UINT32 UINT32 UINT32 UINT32 UINT16 UINT16 UINT16 UINT16 UINT16 UINT16 UINT16 UINT32 UINT32 UINT16 UINT16 UINT16 Description Initialization failure count. Started sessions counter. Completed sessions counter. Sessions the device was able to connect to the server counter. Device initiated server disconnects counter. Session failures due to no registration counter. Session failures due to no server connection counter. Session aborted due to active backoff counter. Session where registration is lost during session counter. Sessions dropped by the network or the server. Sessions that timeout counter. Network hand-off counter. Bytes received on session socket. Bytes sent on session socket. Incoming SMS Outgoing SMS Incoming malformed/unknown SMS 8.90. PARAMETER 109: EH (ENGINE HOURS) Schema

{EH:EH}

Parameter EH Type UINT32 Description Engine hours counter in seconds. The counter accumulates while Ignition On is detected, counter stops during Ignition Off. The counter is reset when the device is power cycled. Copyright 2022 Sensata Technologies, Inc. Page 87 | 271 XT2500 Product Manual 8.91. PARAMETER 112: FLF (FUEL LEVEL FILTERED) OBDII fuel level filtered with a simple moving average and additional outlier rejection displayed in tenths of a percent. e.g.: 800 = 80.0%

Schema

{"FLF" : FLF }

Param FLF Type UINT16 Description Fuel Level 0.0 to 100.0 percent. 8.92. PARAMETER 113: LOC (LOCATION) LOC reports the last known location. If location is unknown, the parameter will report NULL. If location is known, the parameter reports a fixmap. Schema

{LOC:[FT:FT, UTC:UTC, LT:LT, LN:LN, AL:AL, HD:HD, SP:SP, QUAL:QUAL, HACC:HACC] }

Parameter FT Type UINT8 Description Fixtype Value 0 1 Description None GPS UTC LT LN AL HD SP QUAL HACC UINT32 INT32 INT32 INT32 INT16 UINT16 UINT16 UINT8 Epoch time. Latitude. Longitude. Altitude. Heading. Speed. Dilution of precision. Horizontal accuracy. Copyright 2022 Sensata Technologies, Inc. Page 88 | 271 XT2500 Product Manual 8.93. PARAMETER 114: PS (POWER STAGE) Reports the current power stage the device is in. NOTE: This field will report "Nil" until the first Power Stage Transition from PS0. Schema

{"PS:PS}

Param PS Type UINT8 Description Power Stage. Value 0 1 2 255 Description Power Stage 0 Power Stage 1 Power Stage 2 Snapshot 8.94. PARAMETER 115: DSN (DEVICE SERIAL NUMBER) Returns device serial number. Schema

{"DSN" : DSN}

Param DSN Type STR8 Description Device serial number. l Maximum length is 30 characters l Supports alphanumeric characters (A-Z and a-z), digits (0-9) Copyright 2022 Sensata Technologies, Inc. Page 89 | 271 XT2500 Product Manual 8.95. PARAMETER 116: ACT(CELLULAR ACCESS TECHNOLOGY) Reports the cellular access technology. Parameter Data Presentation

{ACT:ACT}

Parameter ACT Type UINT8 Description Cellular Access Technology Value 0 1 2 3 Description None 2G 3G LTE 8.96. PARAMETER 117: PSTI (POWER STAGE TRANSITION INFORMATION) Provides information about the most recent power stage transition. NOTE: This field will report "Nil" until the first Power Stage Transition from PS0. Schema

{PSTI:[PSTIDX,TRANS_CNT,[CID0, CID1, , CIDN]]}

Parameter PSTIDX Type INDEX Description Identifies the next power stage ID. Value 0 1 2 4 255 Description PS0 PS1 PS2 Ship Mode Snapshot TRANS_CNT CID UINT32 ARRAY Number of total transitions. Trigger(s) that caused the power stage transition. Where the key is the criterion ID and the value is a group of data describing the trigger cause(s). If device transitioned from one Power Stage to another:

Copyright 2022 Sensata Technologies, Inc. Page 90 | 271 XT2500 Product Manual Parameter Type Data Reported mV mV MASK Description Value 0 1 2 3 6 7 8 9 11 12 13 19 20 21 22 24 25 26 27 29 30 31 32 35 36 37 Description Ignition off Ignition on ADC Main above threshold ADC Main below threshold Vibration InStage Battery Low Battery Normal Input 2 Input 3 Shock GSMRI User 0 User 1 Input 4 Timer A Timer B Timer C Timer D No Motion to Motion Motion to No Motion Motion Periodic No Motion Periodic ADC 0 ADC 1 ADC 2 8.97. PARAMETER 118: DID (DRIVER IDENTIFICATION NUMBER) Schema

{DID:DID}

Param DID Type UINT32 Description Driver identification number. This parameter can be set via the ELD DRIVERID described in Characteristics on p. 254. Additionally, it can be collected via OWB on devices that support the I/O Box. Copyright 2022 Sensata Technologies, Inc. Page 91 | 271 XT2500 Product Manual 8.98. PARAMETER 119: USEQ (UNIDENTIFIED DRIVER RECORD SEQUENCE NUMBER) Schema

{USEQ:USEQ}

Param USEQ Type UINT32 Description Unidentified Driver Record sequence number. Each time an unidentified driver record is collected, this number increments. The sequence number gets reset on each device reset and when the UDR log is emptied. 8.99. PARAMETER 120: JOMI (JBUS TRUE ODOMETER) This parameter is used for heavy duty trucks. Schema

{JOMI:ODOMETER_M,TRUEODOM_M,TRIPODOM_M}

Param ODOMETER_M TRUEODOM_M TRIPODOM_M Type UINT32 UINT32 UINT32 Description Odometer derived from the OMI parameter (calculated based on speed). True odometer derived from PBMI read directly from the vehicle ECU. Reports 0. 8.100. PARAMETER 121: JEH (JBUS ENGINE HOURS) Schema

{JEH:[ENGINE_S, ENGINE_BUS_S, IDLE_S, IDLE_BUS_S]}

Param ENGINE_S ENGINE_ BUS_S IDLE_S Type UINT32 UINT32 UINT32 IDLE_BUS_S UINT32 Description Engine hours collected from the software in seconds. Engine hours collected from the vehicle in seconds. Number of seconds the vehicle has spent idle (ignition on and not moving) collected by the software. Number of seconds the vehicle has spent idle (ignition on and not moving) collected by the vehicle. Copyright 2022 Sensata Technologies, Inc. Page 92 | 271 XT2500 Product Manual 8.101. PARAMETER 122: AVT (ACCELERATION VECTOR THRESHOLD VIOLATION) Provides a mask of all the configuration 63 (accel-on-axis) indices that are in violation during the current second. See Configuration 63: Accel on Axis on p. 181 for more details. Schema

{AVT : [AVT] }

Param AVT Type INT16 Description Mask of indices. Bit 0 is index 0 of the config 63, bit 1 is index 1, etc. 8.102. PARAMETER 147: PBBL (PROPRIETARY BUS PARKING BRAKE LAMP) Schema

{"PBBL":"PBBL"}

Param PBBL Type UINT8 Description Available values. Index 0 1 254 255 Description Lamp off. Lamp on. Unknown state. Invalid state. 8.103. PARAMETER 148: PBBS (PROPRIETARY BUS PARKING BRAKE STATUS) Schema

{"PBBS":"PBBS"}

Param PBBS Type UINT8 Description Available values. Index 0 1 254 255 Description Brake off. Brake on. Unknown state. Invalid state. Copyright 2022 Sensata Technologies, Inc. Page 93 | 271 XT2500 Product Manual 8.104. PARAMETER 149: PBSP (PROPRIETARY BUS SHIFTER POSITION) Schema

{"PBSP":"PBSP"}

Param PBSP Type UINT8 Description Available values. Index 16 17 18 19 20 21 254 255 Description Neutral. Second. Low. Forward/drive. Park. Reverse. Unknown state. Invalid state. 8.105. PARAMETER 150: PBDS (PROPRIETARY BUS DRIVER SEATBELT) Schema

{"PBDS":"PBDS"}

Param PBDS Type UINT8 Description Available values. Index 0 1 254 255 Description Not buckled. Buckled. Unknown state. Invalid state. Copyright 2022 Sensata Technologies, Inc. Page 94 | 271 XT2500 Product Manual 8.106. PARAMETER 151: PBPS (PROPRIETARY BUS PASSENGER SEATBELT) Schema

{"PBPS":"PBPS"}

Param PBPS Type UINT8 Description Available values. Index 0 1 254 255 Description Not buckled. Buckled. Unknown state. Invalid state. 8.107. PARAMETER 152: PBAL (PROPRIETARY BUS AIRBAG LAMP) Schema

{"PBAL":"PBAL"}

Param PBAL Type UINT8 Description Available values. Index 0 1 254 255 Description Lamp off. Lamp on. Unknown state. Invalid state. 8.108. PARAMETER 153: FA (FAULTY ALTERNATOR) Returns an unsigned integer associated with a transition in the alternator voltage outside of the configured expected behavior. Schema

{"FA" : FAULTY_ALTERNATOR_STATUS}

Param FAULTY_ ALTERNATOR_ STATUS Type UINT8 Description True or False Value 0 2 Description Alternator determined to be normal. Alternator determined to be faulty. Copyright 2022 Sensata Technologies, Inc. Page 95 | 271 XT2500 Product Manual 8.109. PARAMETER 156: OS (ORIENTATION STATUS) Device accelerometer orientation status. Orientation must be achieved before acceleration-on-axis events

(events 56-59) can be triggered. Schema

{OS:[STATUS, CONFIDENCE ] }

Parameter STATUS Type UINT8 Description Orientation status. Value 0 1 Description Not oriented. Oriented. CONFIDENCE UINT16 Higher values represent high confidence in orientation status. Range is from 0 to 1500. 8.110. PARAMETER 158: IN1 (INPUT 1 STATUS) IN1 bypasses the hysteresis that IN1S (Input 1 State) on p. 1 implements; this parameter provides the current state of input 1 and the accumulated time when input 1 is active. Schema

{IN1:[IN1_STATE, IN1_TIME]}

Data Type

{IN1:[UINT8,UINT32]}

JSON Syntax

{"IN1":[INTEGER,INTEGER]}

Parameter IN1_STATE IN1_TIME Type UINT8 UINT32 Description Current state. Accumulated time when the input is active. Copyright 2022 Sensata Technologies, Inc. Page 96 | 271 XT2500 Product Manual 8.111. PARAMETER 159: IN2 (INPUT 2 STATUS) IN2 bypasses the hysteresis Parameter 68: IN2S (Input 2 State) on p. 74 implements; this parameter provides the current state of input 2 and the accumulated time when input 2 is active. Schema

{IN2:[IN2_STATE, IN2_TIME]}

Data Type

{IN2:[UINT8,UINT32]}

JSON Syntax

{"IN2":[INTEGER,INTEGER]}

Parameter IN2_STATE IN2_TIME Type UINT8 UINT32 Description Current state. Accumulated time when the input is active. 8.112. PARAMETER 160: IN3 (INPUT 3 STATUS) IN3 bypasses the hysteresis Parameter 68: IN2S (Input 2 State) on p. 74Parameter 70: IN3S (Input 3 State) on p. 75 implements; this parameter provides the current state of input 3 and the accumulated time when input 3 is active. Schema

{IN3:[IN3_STATE, IN3_TIME]}

Parameter IN3_STATE IN3_TIME Type UINT8 UINT32 Description Current state. Accumulated time when the input is active. 8.113. PARAMETER 161: IN4 (INPUT 4 STATUS) IN3 bypasses the hysteresis Parameter 208: IN4S (Input 4 State) on p. 102 implements; this parameter provides the current state of input 4 and the accumulated time when input 4 is active. Schema

{IN4:[IN4_STATE, IN4_TIME]}

Parameter IN4_STATE IN4_TIME Type UINT8 UINT32 Description Current state. Accumulated time when the input is active. Copyright 2022 Sensata Technologies, Inc. Page 97 | 271 XT2500 Product Manual 8.114. PARAMETER 162: OT1 (OUTPUT 1 STATUS) Schema

{OT1:[OTS,OTP,OTC,OTX,MASK]}

Data Type

{OT1:[UINT8,UINT8,UINT8,UINT32,UINT32]}

JSON Syntax

{"OT1":[INTEGER,INTEGER,INTEGER,INTEGER,INTEGER]}

Parameter OTS OTP OTC OTX MASK Type UINT8 UINT8 UINT8 UINT32 UINT32 Description Current state. This sub-parameter reports the Parameter 77: OT (Output State) on p. 77. Pending State. This sub-parameter reports the Parameter 78: OTP (Output Pending State) on p. 78 Count of manual overrides used. Number of seconds until the output will change to the requested state. Bitmask. Value 0x1 0x2 0x4 Description Command active. Loss of registration active. Manual override active. Copyright 2022 Sensata Technologies, Inc. Page 98 | 271 XT2500 Product Manual 8.115. PARAMETER 163: OT2 (OUTPUT 2 STATUS) Schema

{OT2:[OTS,OTP,OTC,OTR,OTX]}

Data Type

{OT2:[UINT8,UINT8,UINT8,UINT32,UINT32]}

JSON Syntax

{"OT2":[INTEGER,INTEGER,INTEGER,INTEGER,INTEGER]}

Parameter OTS OTP OTC OTX MASK Type UINT8 UINT8 UINT8 UINT32 UINT32 Description Current state. This sub-parameter reports the Parameter 77: OT (Output State) on p. 77. Pending State. This sub-parameter reports the Parameter 78: OTP (Output Pending State) on p. 78 Count of manual overrides used. Number of seconds until the output will change to the requested state. Bitmask. Value 0x1 0x2 0x4 Description Command active. Loss of registration active. Manual override active. 8.116. PARAMETER 164: OT3 (OUTPUT 3 STATUS) Schema

{OT3:[OTS,OTP,OTC,OTR,OTX]}

Parameter OTS OTP OTC OTX MASK Type UINT8 UINT8 UINT8 UINT32 UINT32 Description Current state. This sub-parameter reports the Parameter 77: OT (Output State) on p. 77. Pending State. This sub-parameter reports the Parameter 78: OTP (Output Pending State) on p. 78 Count of manual overrides used. Number of seconds until the output will change to the requested state. Bitmask. Value 0x1 0x2 0x4 Description Command active. Loss of registration active. Manual override active. Copyright 2022 Sensata Technologies, Inc. Page 99 | 271 XT2500 Product Manual 8.117. PARAMETER 190: SCT (SCANTOOL) Scantool provides the CAN ID and first two bytes of the scantools payload. Schema

{"SCT": [{"ID": INTEGER}, {"Payload": [INTEGER, INTEGER]}] }

Param ID Payload Type UINT32 UINT8 Description CANID First two bytes of the payload from scantool. 8.118. PARAMETER 194: DTC2 (VEHICLE BUS DIAGNOSTIC TROUBLE CODES) DTC2 provides a list of codes. This parameter supports pending and permanent DTCs and identifies which physical interface the DTC was on. Schema

{"DTC2": [ECUID,CODE,IDENT,TYPE] }

Param ECUID CODE Type UINT32 UINT32 Description ECU ID. Diagnostic trouble code. Msgpack reports the codes as decimal values between 0 and 4294967295. The hexadecimal equivalent of the value is decoded differently depending on which protocol is in use. Byte 3 Bits 31 - 24 Byte 2 Bits 23 - 16 Byte 1 Bits 15 - 8 Byte 0 Bits 7 - 0 OBDII Bits 31 - 16 15 - 14 Description 0 DTC type Description

'P'

'C'

'B'

'U'

Value 00 01 10 11 Code 13 - 0 J1939 Copyright 2022 Sensata Technologies, Inc. Page 100 | 271 XT2500 Product Manual Param Type Description Bits 31 Description SPN conversion method Description Valid data reported by vehicle Invalid data reported by vehicle. Used by certain vehicles until 1997. Value 0 1 0 FMI SPN Description 0 Fault type Value 0 1 Description PID SID FMI 0 DTC type Value 0 1 Description Standard Expansion 30 - 29 28 - 24 23 - 0 J1708 Bits 31 - 29 28 27 - 24 23 - 17 16 15 - 8 7 - 0 SID/PID Count IDENT UINT8 Physical interface. Index 1 2 3 4 Description CAN1 CAN2 CAN3 J1708 TYPE UINT8 Code type. Copyright 2022 Sensata Technologies, Inc. Page 101 | 271 XT2500 Product Manual Param Type Description Index 1 2 3 Description Stored Pending Permanent 8.119. PARAMETER 197: PFLF (PPID FUEL LEVEL FILTERED) PPID fuel level filtered with a simple moving average and additional outlier rejection displayed in tenths of a percent. e.g.: 800 = 80.0%

Schema

{"PFLF" : PFLF }

Param PFLF Type UINT16 Description Fuel Level 0.0 to 100.0 percent. 8.120. PARAMETER 208: IN4S (INPUT 4 STATE) IN4S configures the current state of Input Pin 4. Schema

{IN4S:IN4S}

Parameter IN4S Type UINT8 Description Input 4 pin state Value 0 1 Description Clear Set 8.121. PARAMETER 209: IN4A (INPUT 4 SET COUNT) IN4A is the number of seconds that Input 4 has been active since boot. Schema

{IN4A:IN4A}

Parameter IN4A Type UINT32 Description Number of seconds input 4 has been active since boot. Copyright 2022 Sensata Technologies, Inc. Page 102 | 271 XT2500 Product Manual 8.122. PARAMETER 216: DIAG (DIAGNOSTIC INFORMATION) Provides information about recent crashes that can be useful for diagnosing errors on remote devices. Schema

{DIAG: [TYPE, R0, R1, R2, R3, R12, LR, PC, PSR, PTR, ID, "NAME"]}

Parameter TYPE R0 R1 R2 R3 R12 LR PC PSR PTR ID NAME Type UINT8 UINT32 UINT32 UINT32 UINT32 UINT32 UINT32 UINT32 UINT32 UINT32 UINT8 STR8 Description Type of crash. Register 0 value. Register 1 value. Register 2 value. Register 3 value. Register 12 value. Link register value. Program counter value. Program status register. Stack pointer value. Interrupt request ID value. Name of the tasklet that caused the crash. If not obtainable, "None" is returned. 8.123. PARAMETER 217: PD0 (PID DATA 0) Schema

{"PD0": {ID: [VALUE, AGE_S ], ID: null, ID: [VALUE, AGE_S ], etc... } }

Parameter ID Type UINT8 VALUE AGE_S Numeric UINT32 Description ID corresponds to a PID that is set in Configuration 86: PIDs on p. 187. If the value is null, no value for the set PID has been recorded. Value is the last recorded numeric value for the set PID. How many seconds have elapsed since the value was recorded. Copyright 2022 Sensata Technologies, Inc. Page 103 | 271 XT2500 Product Manual 8.124. PARAMETER 218: PD1 (PID DATA 1) Schema

{"PD1": {ID: [VALUE, AGE_S ], ID: null, ID: [VALUE, AGE_S ], etc... } }

Parameter ID Type UINT8 VALUE AGE_S Numeric UINT32 Description ID corresponds to a PID that is set in Configuration 86: PIDs on p. 187. If the value is null, no value for the set PID has been recorded. Value is the last recorded numeric value for the set PID. How many seconds have elapsed since the value was recorded. 8.125. PARAMETER 219: PD2 (PID DATA 2) Schema

{"PD2": {ID: [VALUE, AGE_S ], ID: null, ID: [VALUE, AGE_S ], etc... } }

Parameter ID Type UINT8 VALUE AGE_S Numeric UINT32 Description ID corresponds to a PID that is set in Configuration 86: PIDs on p. 187. If the value is null, no value for the set PID has been recorded. Value is the last recorded numeric value for the set PID. How many seconds have elapsed since the value was recorded. 8.126. PARAMETER 220 TRPM (TRIP VBUS DATA) Schema

{TRPM:[RPM, TIMESTAMP]}

Param RPM TIMESTAMP Type DYNAMICINT DYNAMICINT Description Revolutions per minute. Timestamp saved when the RPM sample is collected. Reported in milliseconds. 8.127. PARAMETER 221: HDOP (GPS HDOP) Schema

{HDOP : HDOP }

Parameter HDOP Type UINT8 Description HDOP in tenths. Copyright 2022 Sensata Technologies, Inc. Page 104 | 271 XT2500 Product Manual 9. DEVICE CONFIGURATION NOTE: Configuration changes will not take place until !csu is issued. If this command is issued without making any configuration changes, the response will be INVALID. Description Configuration 1: Cellular Radio Link Access Point Name on p. 107 Configuration 2: GSM Network Profile on p. 108 Configuration 3: GSM Endpoint on p. 108 Configuration 4: Network Quality of Service on p. 110 Configuration 5: Device Power Up Message on p. 112 Configuration 6: GPS Configuration on p. 113 Configuration 7: Custom Parameter IDs on p. 115 Configuration 8: SMS on p. 116 Configuration 9: Event Parameter Mask on p. 116 Configuration 11: Periodic Reset on p. 125 Configuration 12: Ignition Status Determination Masks on p. 126 Configuration 13: Device Battery Health Monitoring on p. 127 Configuration 14: Alternator Detection Configuration on p. 128 Configuration 15: MQTTIdentity and Event Configuration on p. 129 Configuration 16: DNS Cache Configuration on p. 132 Configuration 17: Ignition On Periodic Reporting Interval on p. 132 Configuration 18: Ignition Off Periodic Reporting Interval on p. 133 Configuration 19: Logging on p. 133 Configuration 21: Event Log Trip Buffering on p. 138 Configuration 22: Compression Type on p. 139 Configuration 23: VBUS Mask on p. 139 Configuration 24: Acceleration Threshold VBUS on p. 141 Configuration 25: GPS Acceleration Threshold on p. 142 Configuration 26: Power Stage PMU Modes on p. 143 Configuration 27: Power Stage Transition on p. 144 Configuration 28: Snapshot Configuration on p. 150 Configuration 29: Accelerometer Shock/Vibration on p. 151 Configuration 30: Best Time Configuration on p. 152 Configuration 33: Buzzer Configuration on p. 153 Configuration 34: Direction Change on p. 154 Configuration 35: VBUS Speed Threshold on p. 155 Configuration 36: GPS Speed Threshold on p. 156 Configuration 38: VBUS Odometer Threshold on p. 158 Configuration 39: GPS Odometer Threshold on p. 158 Configuration 43: Heartbeat on p. 159 Copyright 2022 Sensata Technologies, Inc. Page 105 | 271 XT2500 Product Manual Description Configuration 44: Output on p. 160 Configuration 45: Vehicle Movement Detection on p. 161 Configuration 46: Xirgo Gateway Service on p. 162 Configuration 47: FTP Settings on p. 163 Configuration 48: System Information Event on p. 164 Configuration 49: Park Time Threshold on p. 165 Configuration 50: Idle Detection Thresholds on p. 166 Configuration 52: ADC Basic on p. 166 Configuration 53: ADC Advanced on p. 167 Configuration 55: CoAP on p. 169 Configuration 56: Motion/No-Motion on p. 171 Configuration 57: Snapshot Transition on p. 172 Configuration 58: Mapster on p. 177 Configuration 59: Power StageEvent Reporting on p. 179 Configuration 62: GPS Assist on p. 180 Configuration 63: Accel on Axis on p. 181 Configuration 68: LED Behavior on p. 182 Configuration 71: Input Configuration on p. 184 Configuration 74: Faulty Alternator on p. 185 Configuration 77: Bluetooth Enable on p. 185 Configuration 81: Queue Limiting on p. 186 Configuration 86: PIDs on p. 187 Configuration 87: ELD on p. 193 Configuration 89: Update Inhibit on p. 194 Configuration 90: Diagnostic Mask on p. 194 Configuration 92: Enable DTCs on p. 195 Copyright 2022 Sensata Technologies, Inc. Page 106 | 271 XT2500 Product Manual 9.1. CONFIGURATION 1: CELLULAR RADIO LINK ACCESS POINT NAME Configures the APN and the PDN address type for a cellular radio interface. NOTE: A correct APN is required to register with a cellular network. Read Schema

!cp:1,INDEX Write Schema

!cs:1,INDEX,APN,APNT Param INDEX APN Type UINT8 STRING Description Determines the APN index in use. The current valid range is 0. 63-byte maximum length. APNT UINT8 Value 0 1 Description IPV4 IPV4V6 Copyright 2022 Sensata Technologies, Inc. Page 107 | 271 XT2500 Product Manual 9.2. CONFIGURATION 2: GSM NETWORK PROFILE Configures the operator profile, enabling SIM card identification and authentication to the selected network. Read Schema

!cp:2 Write Schema

!cs:2,PROFILE Parameter PROFILE Type UINT32 Description Value Description 0 1 2 3 4 5 6 SARA-R410-

02B N/A Not supported Supported Default SIM Select ATT Verizon Supported Telstra CT U.S. Cellular Not supported Not supported Not supported LARA-R202-

82B N/A Not supported Not supported Not supported Not supported Not supported Supported LARA-R202-

02B N/A Not supported Supported Not supported Not supported Supported Not supported 9.3. CONFIGURATION 3: GSM ENDPOINT Configures network endpoint for communication with the backend server. Read Schema

!cp:3,INDEX Write Schema

!cs:3,INDEX,HOST,PORT,TRANSPORT,FORMAT,COMPRESS Parameter INDEX HOST Type UINT8 STRING Description Valid index is 0. Fully qualified domain name of the host. l 127-byte maximum length. l The encoding of the FQDN shall follow the Name Syntax defined in RFC 2181 [18], RFC 1035 [19] and RFC 1123 [20]. Copyright 2022 Sensata Technologies, Inc. Page 108 | 271 XT2500 Product Manual Parameter Type Description l The FQDN consists of one or more labels. Each label is coded as a one octet length field followed by that number of octets coded as 8-bit ASCII characters. l Following RFC 1035 [19] the labels shall consist only of the alphabetic characters (A-Z and a-z), digits (0-9) and the hyphen (-). l The FQDN is not case sensitive/significant. l The FQDN is not terminated by a length byte of zero. l This setting can alternatively be an Internet Protocol Address provided as a 32-bit numeric address written as four numbers separated by periods. Each number can be zero to 255. PORT UINT16 Host port number. TRANSPORT UINT8 Defines which bitrune transport is in use. l 0 to 65535 Value 0 1 3 Description None MQTT COAP FORMAT UINT8 Defines which formatizer is in use. Value 0 2 4 Description None Message Pack JSON COMPRESS UINT8 Defines which compressor is in use. Value 0 1 Description None LZ4 Copyright 2022 Sensata Technologies, Inc. Page 109 | 271 XT2500 Product Manual 9.4. CONFIGURATION 4: NETWORK QUALITY OF SERVICE Configures the device quality-of-service level. At QoS 0, the device uses less data, however, there is no guarantee the messages are received by the server. At QoS 1, messages are guaranteed to be delivered at least once, but this increases data usage. Additionally, if messages are delivered more than once, wasted data use also increases. Read Schema

!cp:4 Write Schema

!cs:4,QOS,MASK,eDRX,NCSTATIONARY_M,NCMOVING_M,APN_MODE Parameter QOS Type DECIMAL Description Mask Value 0 1 Description Fire-and-forget service level. Device sends messages and does not wait for server response

(no ACK). Device sends messages and waits for server response (ACK). MASK ASCIIHEX Mask Value 1 4 Description Allows device to update the network configuration via the network. When this bit is set, parameters that are "stale"

or "not yet valid" will not be included in the record and will not be present in the report. When this bit is NOT set, parameters that are

"stale" or "not yet valid" are included in the record and will be in the report as NIL (msgpack) and null (JSON). eDRX DECIMAL Mask Extended Discontinuous Reception (Boolean). Allows paging to only operate for a period and again some time later. In between paging windows, the module is in deep sleep mode. The module can still receive downlink message while in deep sleep. The messages will be cached by the network and delivered in the next paging window. Copyright 2022 Sensata Technologies, Inc. Page 110 | 271 XT2500 Product Manual Parameter Type Description Value 0 1 Description Disabled eDRX Enabled NCSTATIONARY_M UINT16 NCMOVING_M UINT16 APN_MODE UINT8 Number of minutes the device can be stationary with a registration status of not-registered and not-searching (CREG 0) before cycling the auto-registration configuration of the modem. Number of minutes the device can be moving with a registration status of not-registered and not-searching (CREG 0) before cycling the auto-registration configuration of the modem. APN Mode. Value 0 Description APN Mode None Copyright 2022 Sensata Technologies, Inc. Page 111 | 271 XT2500 Product Manual 9.5. CONFIGURATION 5: DEVICE POWER UP MESSAGE Configures when the device creates a Power Up event. Multiple Power Up events can be triggered throughout device power on. Read Schema

!cp:5, Write Schema

!cs:5,PMASK Param PMASK Type ASCII HEX Description Power up message mask. Value 0x0 0x1 0x2 0x4 0x8 Description Device will not record any power up messages. System: No criterion; Taken as close to device power up as possible. See event [5] Power Up on p. 28 for more information. GSM: Cellular Registration; Taken as soon as the device obtains registration on the network. See event[7] Power Up GSM on p. 28 for more information. GPS: GPS Lock; Taken as soon as the device obtains a series GPS locks that pass the configured filtering. See event [6]

Power Up GPS on p. 28 for more information. Best Time: Known-good time from an outside source (GSM or GPS); Taken as soon as the device obtains a valid time from an outside source.See event [42] Power Up Best Time on p. 35 for more information. Copyright 2022 Sensata Technologies, Inc. Page 112 | 271 XT2500 Product Manual 9.6. CONFIGURATION 6: GPS CONFIGURATION Configures the GPS date threshold used to filter bad GPS dates. There are times when a GPS receiver can present a date and time as valid without knowing that the date is valid. When this condition occurs, the date is almost always in the past and can be filtered with a simple threshold. The firmware hard-codes this to the year that the firmware was released by default. The dilution of precision (DOP) parameter allows for a threshold to be applied to the DOP figure of merit presented in the GPS solution. If the DOP presented is above the provided threshold the solution is filtered

(considered to be unlocked). The lower the DOP, the more accurate the solution. The HACC parameter allows for a threshold to be applied to the Horizontal Accuracy Estimate figure of merit provided with the GPS solution. If the GPS HACC is more than the threshold then the solution is filtered

(considered to be unlocked). The AOP_CONFIG parameter enables AssistNow Autonomous. The AssistNow Autonomous feature provides functionality like AssistNow Offline without the need for a host and a connection. Based on a broadcast ephemeris downloaded from the satellite (or obtained by AssistNow Online), the receiver can autonomously generate an accurate satellite orbit representation that is usable for navigation much longer than the underlying broadcast ephemeris was intended for. This makes downloading new ephemeris or aiding data for the first fix unnecessary for subsequent start-ups of the receiver. Job Read Schema

!cp:6 Job Write Schema Revision 1: !cs:6,YEAR,DOP,HACC,ASSIST,SPEED_FMASK,SATELLITES Revision 0: !cs:6,YEAR,DOP,HACC,ASSIST,SPEED_FMASK Param YEAR DOP Type UINT16 UINT8 Description It is recommended to configure this value to the current 4-digit year. Dilution of Precision in tenths DOP Value

< 10 Rating Ideal 10-20 Excellent 20-50 Good Description Highest possible confidence level to be used for applications demanding the highest possible precision. At this confidence level, positional measurements are considered accurate enough to meet all but the most sensitive applications. Represents a level that mars the minimum appropriate for making business decisions. Positional measurements could be used to make Copyright 2022 Sensata Technologies, Inc. Page 113 | 271 XT2500 Product Manual Param Type Description DOP Value Rating Description 50-100 Moderate 100-200 Fair 200 255 Poor reliable in-route navigation suggestions to the user. Positional measurements could be used for calculations, but the fix quality could still be improved. A more open view of the sky is recommended. Represents a low confidence level. Positional measurements should be discarded or used only to indicate a very rough estimate of the current location. At this level, measurements are inaccurate by as much as 300 meters with a 6-meter accurate device (50 DOP

* 6 meters) and should be discarded. HACC ASSIST UINT8 ASCII HEX Meters as a radius measurement from the presented GPS coordinate. Enable AssistNow setting. Value 0x0 0x1 0x2 Description Assist none AssistNow Autonomous Online SPEED_FMASK ASCII HEX Speed Filter Mask. Determines which conditions clamp the speed and heading to Null. Value 0x01 0x02 0x04 0x08 0x10 Description Quality If the speed is < 10 MPH and number of satellites is < 7 the speed is clamped to 0. If the speed is < 5 MPH and number of satellites is < 9 the speed is clamped to 0. Motion If the motion state is stopped the speed is clamped to 0. Movement If the movement state is stopped the speed is clamped to 0. Ignition If the ignition state is off the speed is clamped to 0. Vibration If the vibration state is STOP the heading is clamped to 0. Copyright 2022 Sensata Technologies, Inc. Page 114 | 271 XT2500 Product Manual Param SATELLITES Type UINT8 Description This parameter causes the device to remove any GPSsolutions that contain less satellites visible than the configured value. For example, if this parameter is set to 5, any solution that does not contain at least 5 satellites will be removed. 9.7. CONFIGURATION 7: CUSTOM PARAMETER IDS Allows configuration of up to 10 customized OBD-II PIDS. The returned data size from each custom PID is specified by the SIZE parameter, and returned data is unformatted. Only ODB-II Service 01 PIDS are supported. On some protocols the number of PIDs per second may be limited. Exceeding this limit can cause clock stretching. For example, if the protocol only supports 3 PIDs per second, and 6 PIDs are configured, the reporting frequency will shift to 0.5 Hz. Job Read Schema

!cp:7,INDEX Job Write Schema

!cs:7,INDEX,PID,SIZE,PERIOD Param INDEX PID Type UINT8 ASCII HEX Description Valid inputs are 0 - 9. PID service index followed by the PID index described in hexadecimal using two characters. I.e., Service 1, PID F (15) would be written as 10F. SIZE UINT8 PERIOD UINT8 Invalid PIDs or PIDs lacking a service index will not present data. Number of bytes returned from VBUS for specified PID. 1 - 17 bytes. Valid range is 1 - 255 seconds. Copyright 2022 Sensata Technologies, Inc. Page 115 | 271 XT2500 Product Manual 9.8. CONFIGURATION 8: SMS Configures the remote SMS destination number and events based on application triggers. Read Schema

!cp:8 Write Schema

!cs:8,DST,EVENT1,EVENT2,FLAGS Parameter DST Type STRING Description Default destination where SMS responses are sent. l Maximum 19 characters allowed EVENT1 EVENT2 FLAGS UNIT16 UINT16 ASCII HEX Set to 0. Set to 0. Security level flags. Value 0x01 0x02 0x04 0x08 0x10 0x20 0x40 Description SMS responses are directed back to the number which sent the message. Not supported. SMS command will only be accepted if the message contains a salted hash of the following: IMEI + CCID +

COMMAND + SALT. Multisize - SMS responses will be split on size. Multiline - SMSresponses will be split on lines. 7BIT - SMS response will only use 7bit encoding. 7BIT_EXT - SMS response will only use 7bit + extended encoding. 9.9. CONFIGURATION 9: EVENT PARAMETER MASK Configures the parameter sets for each individual event. Read Schema

!cp:9,EV Write Schema Revision 1: !cs:9,EV,MASK[1]MASK[2]...MASK[28],ATTR Revision 0: !cs:9,EV,MASK[1]MASK[2]...MASK[16],ATTR Param EV Type UINT16 Description Refer to Parameter 0: EV (Event Identifier) on p. 42 for details on available event identifiers. Copyright 2022 Sensata Technologies, Inc. Page 116 | 271 XT2500 Product Manual Param MASK[1]

Type ASCII HEX Description Mask Byte 1. Bitmask of parameter values. Value 0x01 0x02 0x04 0x08 0x10 0x20 0x40 0x80 Description EV Reserved D TZ LT LN AL SPT MASK[2]

ASCII HEX Mask Byte 2. Bitmask of parameter values. Value 0x01 0x02 0x04 0x08 0x10 0x20 0x40 0x80 Description GSPT HD SV HP BV CQ MI MG MASK[3]

ASCII HEX Mask Byte 3. Bitmask of parameter values. Value 0x01 0x02 0x04 0x08 0x10 0x20 0x40 0x80 Description GS GT FL XY FWM Reserved Reserved LGTM MASK[4]

ASCII HEX Mask Byte 4. Bitmask of parameter values. Value 0x01 0x02 Description AXYZ VN Copyright 2022 Sensata Technologies, Inc. Page 117 | 271 XT2500 Product Manual Param Type Description Value 0x04 0x08 0x10 0x20 0x40 0x80 Description DTC Reserved FP TID MIL RM MASK[5]

ASCII HEX Mask Byte 5. Bitmask of parameter values. Value 0x01 0x02 0x04 0x08 0x10 0x20 0x40 0x80 Description IT SI BN PN CI AC Reserved HBE MASK[6]

ASCII HEX Mask Byte 6. Bitmask of parameter values. Value 0x01 0x02 0x04 0x08 0x10 0x20 0x40 0x80 Description MTN IM HACC OB MID OMI CNT CH MASK[7]

ASCII HEX Mask Byte 7. Bitmask of parameter values. Value 0x01 0x02 0x04 0x08 0x10 Description CT UT BT IS ACV Copyright 2022 Sensata Technologies, Inc. Page 118 | 271 XT2500 Product Manual Param Type Description Value 0x20 0x40 0x80 Description ACC Reserved CP0 MASK[8]

ASCII HEX Mask Byte 8. Bitmask of parameter values. Value 0x01 0x02 0x04 0x08 0x10 0x20 0x40 0x80 Description CP1 CP2 CP3 CP4 CP5 CP6 CP7 CP8 MASK[9]

ASCII HEX Mask Byte 9. Bitmask of parameter values. Value 0x01 0x02 0x04 0x08 0x10 0x20 0x40 0x80 Description CP9 MPG IN1S IN1A IN2S IN2A IN3S IN3A MASK[10]

ASCII HEX Mask Byte 10. Bitmask of parameter values. Value 0x01 0x02 0x04 0x08 0x10 0x20 0x40 0x80 Description IG DBO DBI Reserved Reserved Reserved Reserved Reserved Copyright 2022 Sensata Technologies, Inc. Page 119 | 271 XT2500 Product Manual Param MASK[11]

Type ASCII HEX Description Mask Byte 11. Bitmask of parameter values. Value 0x01 0x02 0x04 0x08 0x10 0x20 0x40 0x80 Description Reserved Reserved Reserved Reserved Reserved Reserved Reserved FWB MASK[12]

ASCII HEX Mask Byte 12. Bitmask of parameter values. Reserved, set value to 00. Value 0x01 0x02 0x04 0x08 0x10 0x20 0x40 0x80 Description PT Reserved PBMI PBFL NKR GSM GSMP GPSP MASK[13]

ASCII HEX Mask Byte 13. Bitmask of parameter values. Value 0x01 0x02 0x04 0x08 0x10 0x20 0x40 0x80 Description GPSQ PBOL PBLF PBRF PBLR PBRR ADC0 ADC1 MASK[14]

ASCII HEX Mask Byte 14. Bitmask of parameter values. Value 0x01 0x02 Description Reserved Reserved Copyright 2022 Sensata Technologies, Inc. Page 120 | 271 XT2500 Product Manual Param Type Description Value 0x04 0x08 0x10 0x20 0x40 0x80 Description Reserved SG0 Reserved EH Reserved Reserved MASK[15]

ASCII HEX Mask Byte 15. Bitmask of parameter values. Value 0x01 0x02 0x04 0x08 0x10 0x20 0x40 0x80 Description FLF LOC PS DSN ACT PSTI Reserved Reserved MASK[16]

ASCII HEX Mask Byte 16. Bitmask of parameter values. Value 0x01 0x02 0x04 0x08 0x10 0x20 0x40 0x80 Description JOMI JEH AVT Reserved Reserved Reserved Reserved Reserved MASK[17]

MASK[18]

MASK[19]

ASCII HEX ASCII HEX ASCII HEX Mask Byte 17. Bitmask of parameter values. Reserved, set value to 00. Mask Byte 18. Bitmask of parameter values. Reserved, set value to 00. Mask Byte 19. Bitmask of parameter values. Value 0x01 0x02 0x04 Description Reserved Reserved Reserved Copyright 2022 Sensata Technologies, Inc. Page 121 | 271 XT2500 Product Manual Param Type Description Value 0x08 0x10 0x20 0x40 0x80 Description PBBL PBBS PBSP PBDS PBPS MASK[20]

ASCII HEX Mask Byte 20. Bitmask of parameter values. Value 0x01 0x02 0x04 0x08 0x10 0x20 0x40 0x80 Description PBAL FA Reserved Reserved OS Reserved IN1 IN2 MASK[21]

ASCII HEX Mask Byte 21. Bitmask of parameter values. Value 0x01 0x02 0x04 0x08 0x10 0x20 0x40 0x80 Description IN3 IN4 OT1 OT2 OT3 Reserved Reserved Reserved MASK[22]

ASCII HEX Mask Byte 22. Bitmask of parameter values. Value 0x01 0x02 0x04 0x08 0x10 0x20 Description Reserved BB Reserved Reserved Reserved Reserved Copyright 2022 Sensata Technologies, Inc. Page 122 | 271 XT2500 Product Manual Param Type Description Value 0x40 0x80 Description Reserved Reserved MASK[23]

MASK[24]

ASCII HEX ASCIIHEX Mask Byte 23. Bitmask of parameter values. Reserved, set value to 00. Mask Byte 24. Bitmask of parameter values. Value 0x01 0x02 0x04 0x08 0x10 0x20 0x40 0x80 Description Reserved Reserved Reserved Reserved Reserved Reserved SCT Reserved MASK[25]

ASCII HEX Mask Byte 25. Bitmask of parameter values. Value 0x01 0x02 0x04 0x08 0x10 0x20 0x40 0x80 Description Reserved Reserved DTC2 Reserved Reserved PFLF Reserved Reserved MASK[26]

ASCII HEX Mask Byte 26. Bitmask of parameter values. Value 0x01 0x02 0x04 0x08 0x10 0x20 0x40 0x80 Description Reserved Reserved Reserved Reserved Reserved Reserved Reserved Reserved Copyright 2022 Sensata Technologies, Inc. Page 123 | 271 XT2500 Product Manual Param MASK[27]

Type ASCII HEX Description Mask Byte 27. Bitmask of parameter values. Value 0x01 0x02 0x04 0x08 0x10 0x20 0x40 0x80 Description IN4S IN4A Reserved Reserved Reserved Reserved Reserved Reserved MASK[28]

ASCII HEX Mask Byte 28. Bitmask of parameter values. Value 0x01 0x02 0x04 0x08 0x10 0x20 0x40 0x80 Description DIAG PD0 PD1 PD2 TRPM HDOP Reserved Reserved ATTR UINT16 Event attributes Value 1 4 Description Flush (causes trip log to be sent) NoCache (Causes record to only be attempted for sending once not supported yet) Copyright 2022 Sensata Technologies, Inc. Page 124 | 271 XT2500 Product Manual 9.10. CONFIGURATION 11: PERIODIC RESET Configures the time to reset the cellular modem (GSM)or system. This periodic reset prevents the modem or device from being stuck in an inoperable state. The GSM_RESET timer is started when the cellular module is initialized. The cellular module is initialized after power up, wake from deep sleep, asynchronous module reset, or software reset. The GSM_RESET timer is reset when a successful publish has occurred. The SYS_RESET timer is started when device is first initialized. The timer is cleared with either a software reset or power cycle. The SYS_RESET timer is reset when an Ignition On or Ignition Off event occurs. Read Schema

!cp:11, Write Schema

!cs:11,GSM_RESET_M,SYS_RESET_M,FLAGS Parameter GSM_RESET_ M Type UINT16 Description Minutes before resetting GSM. l 1 65535 minutes l Setting this value to 0 disables the feature l 60 is default SYS_RESET_M UINT16 Minutes before resetting SYSTEM. FLAGS ASCIIHEX l 30 65535 minutes l Setting this value to 0 disables the feature l 1440 is default Flags to determine which activities update the reset timer. If the GSM event flag is turned on, the timer for the GSM reset is updated

(preventing the device from doing a reset until it fails to send another event after GSMreset minutes) whenever the device successfully sends an event. Value 0x00100 0x10000 0x20000 Description GSM event. Ignition off. Ignition on. Copyright 2022 Sensata Technologies, Inc. Page 125 | 271 XT2500 Product Manual 9.11. CONFIGURATION 12: IGNITION STATUS DETERMINATION MASKS Provides a method of controlling what causes ignition on to be determined on the platform. The masks can be used to configure which system states are necessary for deriving ignition. The method of operation is that either of the AND mask or the OR mask can be satisfied to determine ignition as on. For VBUS ignition source to be considered On, alternator source must also be detected On, thus VBUS ignition source is dependent on Configuration 14: Alternator Detection Configuration on p. 128. Read Schema

!cp:12, Write Schema

!cs:12,AM,OM,AND_MODE Param AM Type DECIMAL Description AND mask Value 1 2 4 8 0x20 Description VBUS Ignition (ECU comms) Virtual Battery (alternator based) Virtual Vibration (accelerometer based) Virtual Movement (GPS based) VBUS Ignition Pin (tied to pin 8 on external pins) OM DECIMAL OR mask Value 1 2 4 8 0x20 Description VBUS Ignition (ECU comms) Virtual Battery (alternator based) Virtual Vibration (accelerometer based) Virtual Movement (GPS based) VBUS Ignition Pin (tied to pin 8 on external pins) AND_ MODE UINT8 AND Mode determines Ignition Off behavior if Ignition On state is derived via AND mask. Value 0 1 Description Any Off All Off Copyright 2022 Sensata Technologies, Inc. Page 126 | 271 XT2500 Product Manual 9.12. CONFIGURATION 13: DEVICE BATTERY HEALTH MONITORING Configures thresholds and counts which determine whether a battery is normal or low. Thresholds must exceed the configuration count before state transitions occur. l Low battery threshold is determined by subtracting low battery hysteresis (LBH) from normal battery threshold (NBT). l The disconnect/reconnect threshold is hard-coded to 6.0 volts. l From a disconnect state, once the device measures over 6.0 volts for DCC seconds, the device will enter the appropriate power state:

o Normal if voltage is above NBT o Low if voltage is below NBT Read Schema

!cp:13, Write Schema

!cs:13,NBT,LBH,LBC,NBC,DCC,BER,DC_PERIODIC Param NBT LBH LBC NBC DCC BER Type UINT16 UINT16 UINT16 UINT16 UINT16 ASCIIHEX Description Normal battery threshold. (millivolts) Low battery hysteresis. (millivolts) Count needed to enter Low Battery state from Normal Battery state.

(seconds) Count needed to enter Normal Battery state from Low Battery state.

(seconds) Count needed to enter Disconnect state from Low/Normal Battery state, or to enter Low/Normal Battery state from Disconnect state. (seconds) Modifies battery event reporting behavior. Value 0x1 0x2 0x4 0x8 Description Low battery event reporting Battery disconnect event reporting Battery reconnect event reporting Battery periodic disconnect reporting DC_ PERIODIC UINT16 Battery periodic disconnect report. (minutes) Copyright 2022 Sensata Technologies, Inc. Page 127 | 271 XT2500 Product Manual 9.13. CONFIGURATION 14: ALTERNATOR DETECTION CONFIGURATION Configures voltage threshold which can be used to determine whether the vehicle alternator is On or Off. Alternator must be detected On before the device attempts vehicle bus communications. While dynamic modes are enabled, the On threshold is determined dynamically by averaging the voltage when the VBUS ignition is Off. The configured hysteresis is then added to that average to derive the new On threshold. Once the new threshold is determined, the alternator state works in the same manner as Simple mode: Measured voltage must be above the ONTHS threshold for ONCNT seconds. Once on, the alternator state will return to Off when the voltage falls below ONTHS for more than ONCNT seconds. Read Schema

!cp:14, Write Schema

!cs:14,ONTHS,ONCNT,ONHYST,MODE Param ONTHS ONCNT ONHYST Type Rev 1:

UINT16 Rev 0:

UINT8 UINT8 UINT8 MODE UINT8 Description Starting threshold in tenths of volts. (125 = 12.5) Number of seconds above for On or below for Off. Deadband configuration in tenths of volts. (If ONTHS is 125 and ONHYST is 5, On is 12.5 V and Off is < 12 V.) Mask Value 0 1 2 Description Simple. Uses the 12.5 12.0V deadband threshold. Dynamic SMA. On/Off based on a simple moving average. Dynamic EMA. On/Off based on an exponential (fading) moving average. Copyright 2022 Sensata Technologies, Inc. Page 128 | 271 XT2500 Product Manual 9.14. CONFIGURATION 15: MQTTIDENTITY AND EVENT CONFIGURATION Configures the MQTT client identity and MQTT event topic. CLIENT_ID and EVENT_TOPIC parameters support string-factory variables. It is possible to enter variables into these strings. The following are available variables, where % denotes a variable:

l %p = Platform number l %d = Device serial number (DSN) l %m = International Mobile Equipment Identity (IMEI) l %% = %

Any unsupported variables will be returned as they are written. For example, %s will return %s, whereas %p will return the platform number. Example: !cp:15

!cp:15:1,XT%p-%d,/devices/XT%p-%d/events,60,1800,%logtopic,%shadowtopic OK CAUTION: SHADOW_TOPIC must begin with the CLIENT_ID and must be a subset of the original delta topic. Due to limitations within AWS, follow the example format. Example: XT2469-182000531/shadow/delta CLIENT_ID/shadow/delta If SHADOW_TOPIC is enabled, there must be a rule enabled to redirect delta publishes to a separate topic. Read Schema

!cp:15, Write Schema Revision 2: !cs:15,MASK,CLIENT_ID,EVENT_TOPIC,KEEPALIVE_S,SESSION_S,BLOB_TOPIC,SHADOW_ TOPIC,TRIPSTREAM_TOPIC Revision 1: !cs:15,MASK,CLIENT_ID,EVENT_TOPIC,KEEPALIVE_S,SESSION_S,LOG_TOPIC,SHADOW_ TOPIC,TRIPSTREAM_TOPIC,IMPACT_TOPIC Revision 0: !cs:15,MASK,CLIENT_ID,EVENT_TOPIC,KEEPALIVE_S,SESSION_S,LOG_TOPIC,SHADOW_TOPIC Param MASK Type UINT16 Description The mask defines whether a dynamic trailing string is appended to the event topic. Copyright 2022 Sensata Technologies, Inc. Page 129 | 271 XT2500 Product Manual Param Type Description Value 0x1 Description Appends dynamic trailer. Appends trailer indicating payload formatting and compression scheme. See Configuration 3: GSM Endpoint on p. 108 for details on which formatizer and compression is configured. String appended dependent on formatizer:

Formatizer Msgpack JSON Appended String

/data.msgpack

/data.json String appended dependent on compression used:

Compression LZ4 LZ4X2 ZLIB Appended String

.lz4

.lz4x2

.zlib 0x2 0x4 Shadow trim topic subscribe. Enables subscription to custom shadow topic for trimmed deltas. This subscription is in place of the default shadow topic. Configuration Sync - Performs a configuration synchronization on transport initialization. CLIENT_ID STRING Character array that sets the MQTT client identifier. Maximum length 32. Value STRING Description MQTT ClientID EVENT_TOPIC STRING Character array that specifies the MQTT event topic. Maximum length 128. Value STRING Description MQTT Event topic KEEPALIVE_S SESSION_S UINT16 UINT16 AWS keepalive time in seconds. Valid range 60 1200 (seconds). Determines how long the device will waits between events before ending the MQTT session. Value 0 Non-zero Description The device will not disconnect MQTT session Number of seconds device waits before disconnecting MQTT session (seconds) Copyright 2022 Sensata Technologies, Inc. Page 130 | 271 XT2500 Product Manual Param Type Description BLOB_TOPIC STRING MQTT topic where device publishes both impact and log data. Data published to this resource will always be in an uncompressed Msgpack object with the following format:

"TYPE": <type_uint8>,

"REV": <rev_uint8>,

"CMP": "lz4/lz4x2/zlib",

"DATA": <binary_data> (lz4/lz4x2/zlib compressed)

The TYPE field provides what type of data is in the DATA field. The REV field accounts for a change to the format for the specific type. The CMP field is dependent on which compressor is configured in Configuration 3: GSM Endpoint on p. 108. If no compressor is used, the CMP field will not be present and the DATA field will be uncompressed. If the CMP field is present, it will be a string of lz4, lz4x2, or zlib. The DATA will then be compressed with that algorithm. LOG_TOPIC SHADOW_ TOPIC TRIPSTREAM_ TOPIC IMPACT_TOPIC STRING STRING The DATA field contains the actual log or impact data. Defines the MQTT topic where logs are published. Defines the MQTT topic where trimmed shadow messages are received. STRING Defines the MQTT topic where tripstream data is received. STRING Defines the MQTT topic where impact data is received. NOTE: It is mandatory to enter a value in this field but it will be ignored. Copyright 2022 Sensata Technologies, Inc. Page 131 | 271 XT2500 Product Manual 9.15. CONFIGURATION 16: DNS CACHE CONFIGURATION Allows configuration of DNS caching on the device. Read Schema

!cp:16, Write Schema

!cs:16,FLAGS,TIMETOLIVE Param FLAGS Type DECIMAL Description Modifies event behavior. Value 0 1 Description Disable DNScaching. Enable DNS caching. TIMETOLIVE UINT32 Seconds for which a DNS cache entry is valid. 9.16. CONFIGURATION 17: IGNITION ON PERIODIC REPORTING INTERVAL Configures the interval for the periodic reports during a trip (while ignition is determined on). Read Schema

!cp:17, Write Schema

!cs:17,IP,FLAGS,MAX_REP Parameter IP FLAGS Type UINT32 UINT8 Description Ignition On Periodic Interval (seconds). Enables/disables ignition on periodic reporting. Value 0x0 0x1 Description Disable. Enable. MAX_REP UINT8 Reserved; enter 0 in the job write schema. Copyright 2022 Sensata Technologies, Inc. Page 132 | 271 XT2500 Product Manual 9.17. CONFIGURATION 18: IGNITION OFF PERIODIC REPORTING INTERVAL Configures the interval for the periodic reports between trips (while ignition is determined off). Read Schema

!cp:18, Write Schema

!cs:18,IP,FLAGS Param IP FLAGS Type UINT32 UINT8 Description Ignition Off Periodic Interval. (seconds) Enables/disables ignition off periodic reporting. Value 0x0 0x1 Description Disable. Enable. 9.18. CONFIGURATION 19: LOGGING Configures which events trigger logs, the log recording duration, and the channels the logs report on. Job Read Schema

!cp:19, Job Write Schema Revision 2: !cs:19,T_MASK,DURATION_S,LOGMASK,LEVMASK,EVMASK[0]EVMASK[1]...EVMASK

[8],DESTINATION Revision 1: !cs:19,T_MASK,DURATION_S,LOGMASK,LEVMASK,EVMASK[0]EVMASK[1]...EVMASK[8]

Revision 0: !cs:19,T_MASK,DURATION_S,LOGMASK,LEVMASK Param T_MASK Type UINT16 Description Trigger that will cause logging to begin. Value 0x01 0x02 0x04 0x08 0x10 0x20 0x40 Description Ignition On Alternator On Registration State GPSLock Movement Start Movement Stop Enable logging when any event enabled in EMASK (see below) is stored in the event log. If EVMASK is 0 then this bit will not enable logging. Copyright 2022 Sensata Technologies, Inc. Page 133 | 271 XT2500 Product Manual Param Type Description DURATION_S LOGMASK UINT16 UINT16 Duration logging will be active. (seconds) Diagnostic channels which are turned on. Value 0x001 0x002 0x008 0x010 0x020 0x040 0x080 0x100 0x200 0x400 0x800 Description GPS GSM VBUS NanoKernel Event Filesystem XOR Backend Power Management Geofence Debugging XDM LEVMASK UINT8 Mask applied to the diagnostic channels. Value 0x00 0x01 0x02 0x04 0x08 0x10 0x20 0xFF Description Off Debug Information Warning Error Fatal Trace All EVMASK ASCII HEX EVMASK[0]

Description Reserved Ignition On (1) Ignition Off (2) Periodic Ignition On (3) Periodic Ignition Off (4) Power Up (5) Power Up GPS (6) Power Up GSM (7) Value 0x01 0x02 0x04 0x08 0x10 0x20 0x40 0x80 EVMASK[1]

Copyright 2022 Sensata Technologies, Inc. Page 134 | 271 XT2500 Product Manual Param Type Description Value 0x01 0x02 0x04 0x08 0x10 0x20 0x40 0x80 EVMASK[2]

Value 0x01 0x02 0x04 0x08 0x10 0x20 0x40 0x80 EVMASK[3]

Value 0x01 0x02 0x04 0x08 0x10 0x20 0x40 0x80 EVMASK[4]

Value 0x01 0x02 0x04 0x08 0x10 0x20 Description Low Battery (8) Acceleration (9) Acceleration VBUS (10) Acceleration GPS (11) Stage 0 Periodic (12) Stage 1 periodic (13) Stage 2 Periodic (14) Battery Disconnect (15) Description Battery Reconnect (16) Battery Disconnect Periodic (17) Direction Change (18) Speed VBUS (19) Speed GPS (20) Geofence Crossing (21) Unused Odometer VBUS (23) Description Odometer GPS (24) Input 1 Set (25) Input 1 Clear (26) Input 2 Set (27) Input 2 Clear (28) Input 3 Set (29) Input 3 Clear (30) N/A Description Output Manual Override (32) Diagnostics (33) Movement Start (34) Movement Stop (35) System Report 0 (36) System Info (37) Copyright 2022 Sensata Technologies, Inc. Page 135 | 271 XT2500 Product Manual Param Type Description Value 0x40 0x80 EVMASK[5]

Description Park (38) Idle Start (39) Value 0x01 0x02 0x04 0x08 0x10 0x20 0x40 0x80 EVMASK[6]

Value 0x01 0x02 0x04 0x08 0x10 0x20 0x40 0x80 EVMASK[7]

Value 0x01 0x02 0x04 0x08 0x10 0x20 0x40 0x80 Description Idle Stop (40) Idle Periodic (41) Power Up Best Time (42) ADC Threshold (43) ADC Periodic (44) N/A N/A N/A Description Motion (48) No-Motion (49) Motion Periodic (50) No-Motion Periodic (51) powerstage Transition (52) Unused N/A N/A Description Accel Positive X Threshold (56) Accel Negative X Threshold (57) Accel Positive Y Threshold (58) Accel Negative Y Threshold (59) Accel Orientation (60) Faulty Alternator (61) N/A Watchdog (63) EVMASK[8]

Value 0x01 Description N/A Copyright 2022 Sensata Technologies, Inc. Page 136 | 271 XT2500 Product Manual Param Type Description Value 0x02 0x04 0x08 0x10 0x20 0x40 0x80 EVMASK[9]

Value 0x01 0x02 0x04 0x08 0x10 0x20 0x40 0x80 Description Scantool Detection (65) N/A N/A Input 4 Set (68) Input 4Clear (69) N/A Snapshot (71) Description DTC (72) N/A N/A N/A N/A N/A N/A N/A DESTINATION UINT8 Destination where logging data is sent. Value 0x0 0x1 Description Customers server as specified in Configuration 3: GSM Endpoint on p. 108 Sensata's PIDs server Copyright 2022 Sensata Technologies, Inc. Page 137 | 271 XT2500 Product Manual 9.19. CONFIGURATION 21: EVENT LOG TRIP BUFFERING Configures the overall trip-log buffering strategies for the device. Configurable features include a trigger-event mask, a buffer collection timeout and a raw buffer size threshold. Read Schema

!cp:21, Write Schema Revision 1: !cs:21,FLAGS,SECONDS,SIZE Revision 0: !cs:21,SECONDS,SIZE Param FLAGS Type UINT16 Description Dynamic array flag. When enabled, the array should only be used if necessary. Value 0x0 0x1 0x2 Description Default event reporting. Enable dynamic arrays. SEQ. Setting this flag causes the MessagePack event payload to be wrapped with a volatile event counter. SECONDS UINT16 This data-latency-threshold timer (seconds) starts when the first entry is placed into the event buffer. When this timer expires ANDanother event is generated, the buffer will be flushed (packaged and sent to server). l Configuring this as 0 has the effect of disabling buffering entirely. SIZE UINT16 Raw output buffer size (bytes) threshold. When this threshold is reached the buffer is flushed (packaged and sent to server). l Max 8 kilobytes. l Configuring this as 0 has the effect of disabling buffering entirely. Copyright 2022 Sensata Technologies, Inc. Page 138 | 271 XT2500 Product Manual 9.20. CONFIGURATION 22: COMPRESSION TYPE Configures the type of compression/decompression used for message reporting. NOTE: This configuration is in the process of being deprecated, Compression Type is now set in Configuration 3: GSM Endpoint on p. 108 Read Schema

!cp:22, Write Schema

!cs:22,MODE Param MODE Type UINT8 Description Compression type used. Value 0 1 Description None LZ4 9.21. CONFIGURATION 23: VBUS MASK VBUSMASK determines which parameters are queried in session detect and session start states. Read Schema

!cp:23, Write Schema

!cs:23,DETECT_MASK,START_MASK,MODE Param DETECT_ MASK Type ASCII HEX Description Mask of parameters queried during a VBUS session detect state. These are only queried after power cycle. Value 0x00000001 0x00000002 0x00000004 0x00000008 Name VIN. LILHAMMER_ END. BIGHAMMER END. BACKOFF_OBDII 0x00000010 BACKOFF_ Description Enable VIN read. Not used. Speed == 0 and stale RPM for 30 seconds ends the session. Backoff on detection of OBDII scantool requests. Backoff on detection of Copyright 2022 Sensata Technologies, Inc. Page 139 | 271 XT2500 Product Manual Param Type Description Value 0x00000020 Name ONSTAR BACKOFF_ DIAGSESSION 0x00000040 BACKOFF_TP 0x00000080 BACKOFF_ SECURITY 0x00000100 TRIP_DELAY 0x00000200 BACKOFF_ ENDTRIP 0x00000400 J1708_ONLY 0x80000000 PIDS Description proprietary ONSTAR requests. Backoff on detection of proprietary start of a diagnostic session. Backoff on detection of proprietary tester present message. Backoff on detection of proprietary request to set security mode. Delay vehicle bus communications for 10 seconds after an ignition on state. When a backoff is detected, the trip is ended and the device waits for the next ignition cycle to restart vehicle communications. Set the vehicle as a J1708/J1587 vehicle only. Enable proprietary PID feature. START_ MASK ASCIIHEX Mask of parameters that are either queried at trip start, or enable filters that force a backoff. This difference is denoted in parentheses in each field. Value 0x04 0x08 Description Freeze Frame (only queried at trip start). DTC (used instead of the DTC nugget). MODE UINT8 Selects standard OBDII or proprietary PID mode. PPID mode is only supported with ISO15765-4 CAN-BUS vehicles. Value 0 255 Description Normal. Disables vehicle communication. Copyright 2022 Sensata Technologies, Inc. Page 140 | 271 XT2500 Product Manual 9.22. CONFIGURATION 24: ACCELERATION THRESHOLD VBUS Configures the VBUS acceleration event trigger threshold. Read Schema Revision 1: !cp:24,INDEX Revision 0: !cp:24, Write Schema Revision 1: !cs:24,INDEX,ENABLED,POS_THS,NEG_THS Revision 0: !cs:24,ENABLED,POS_THS,NEG_THS Param INDEX ENABLED Type UINT8 UINT8 Description Index of acceleration threshold configuration. (0 - 2) This parameter determines whether the VBUS acceleration threshold, and associated event ([10] Acceleration VBUS on p. 28), are enabled. Value 0 1 Description Disabled Enabled POS_THS UINT16 NEG_THS UINT16 This parameter controls the threshold for acceleration, as measured over the vehicle bus at a frequency of 1hz, which will trigger an ACCELVBUS event upon being crossed. l Tenths of kilometers-per-hour, per second This parameter controls the threshold for deceleration, as measured over the vehicle bus at a frequency of 1hz, which will trigger an ACCELVBUS event upon being crossed. l Tenths of kilometers-per-hour, per second Copyright 2022 Sensata Technologies, Inc. Page 141 | 271 XT2500 Product Manual 9.23. CONFIGURATION 25: GPS ACCELERATION THRESHOLD Configures the GPS acceleration event trigger threshold. Read Schema Revision 1: !cp:25,INDEX Revision 0: !cp:25, Write Schema Revision 1: !cs:25,INDEX,ENABLED,POS_THS,NEG_THS Revision 0: !cs:25, ENABLED,POS_THS,NEG_THS Param INDEX ENABLED Type UINT8 ASCIIHEX Description Index of acceleration threshold configuration. (0 - 2) This parameter determines whether the GPS acceleration threshold, and associated event ([11] Acceleration GPS on p. 29), are enabled. Value 0 1 Description Disabled Enabled POS_THS UINT16 NEG_THS UINT16 This parameter controls the threshold for acceleration, as measured by the GPS at a frequency of 1hz, which will trigger an ACCELGPS event upon being crossed. l Tenths of kilometers-per-hour, per second This parameter controls the threshold for deceleration, as measured by the GPS at a frequency of 1hz, which will trigger an ACCELGPS event upon being crossed. l Tenths of kilometers-per-hour, per second Copyright 2022 Sensata Technologies, Inc. Page 142 | 271 XT2500 Product Manual 9.24. CONFIGURATION 26: POWER STAGE PMU MODES Configures the desired PMU mode for each stage. Read Schema

!cp:26,PSIDX,PMUIDX Write Schema

!cs:26,PSIDX,PMUIDX,PMUID,PMUMODE Param PSIDX Type INDEX Description Power stage index. Value 0 1 2 Description PS0 PS1 PS2 PMUIDX PMUID INDEX UINT8 PMU index, valid inputs: 0 - 2 ID of configurable PMU. Value 1 2 3 Description Cellular module GPS module Primary microcontroller PMUMODE UINT8 Desired power mode of the PMU Cellular (PMU ID: 1) 1 2 3 GPS (PMU ID: 2) 1 2 4 Microcontroller (PMU ID: 3) 1 2 Cellular Module On Cellular Module Off Cellular Module Low Power GPS Module On GPS Module Off GPS Module Power Supply Off Microcontroller Running Microcontroller Deep Sleep Copyright 2022 Sensata Technologies, Inc. Page 143 | 271 XT2500 Product Manual 9.25. CONFIGURATION 27: POWER STAGE TRANSITION Configures the criteria which triggers a power stage transition. Read Schema Revision 1: !cp:27,TCIDX Revision 0: !cp:27,PSTIDX, TCIDX Write Schema Revision 1: !cs:27,TCIDX:SRC,DST,ENABLED,ID,AGE,THS,TYPE Revision 0: !cs:27,PSTIDX,TCIDX,ENABLE,ID,AGE,THS,TYPE Parameter PSTIDX Type INDEX Description Power stage transition index. Value 0 1 2 3 4 5 Description PS0 to PS1 PS1 to PS2 PS2 to PS1 PS1 to PS0 PS0 to PS2 PS2 to PS0 TCIDX INDEX Transition criterion index. Revision 0 1 Range 0 - 7 0 - 47 SRC UINT8 The starting power stage. Value 0 1 2 Description PS0 PS1 PS2 DST UINT8 The destination power stage. Value 0 1 2 Description PS0 PS1 PS2 Copyright 2022 Sensata Technologies, Inc. Page 144 | 271 XT2500 Product Manual Parameter ENABLE Type UINT8 Description Enable/Disable Power Stage Transition Event. Value 0x0 0x1 Description Disable this criterion. Enable this criterion. ID UINT8 ID of configurable criteria. NOTE: Iobox must be connected for Input 1/2/3/4 to be available in deep sleep. Currently, the only supported mask in deepsleep is 0x3 - clear->set and set->clear NOTE: If any ADCs are configured for the external ADC on the I/O Box they will only work properly if an I/O Box is connected. They will not work in deepsleep. Value 0 1 2 3 4 6 7 10 11 12 13 19 20 21 22 Description Ignition off Ignition on ADC Main above threshold ADC Main below threshold Motion / No Motion detected Vibration InStage (minimum time in current stage) Input 1 Input 2 Input 3 Shock GSMRI. Cell ring indicator pin, only SMS currently supported. User 0 User 1 Input 4 Deep Sleep Not Available Not Available Yes Yes Yes Yes Yes Limited. See limitation note above. Limited. See limitation note above. Limited. See limitation note above. Yes Yes No No Limited. See Copyright 2022 Sensata Technologies, Inc. Page 145 | 271 XT2500 Product Manual Parameter Type Description Value Description 24 25 26 27 30 31 32 33 Timer A Timer B Timer C Timer D GSM registration state ADC 0 ADC 1 ADC 2 Deep Sleep limitation note above. No No No No No Yes. See limiation note above. Yes. See limiation note above. Yes. See limiation note above. AGE UINT32 Length of time (seconds) criteria must be true. The Input 1 and Input 2 criteria correlate to the Input Mask bits specified in the THS parameter. Criterion availability from the following power stages:

Criterion Ignition off Ignition on ADC Main above threshold ADC Main below threshold Motion/No-motion Vibration InStage (min time in current stage) Input 1 Clear to Set Input 1 Set to Clear Input 1 Set Input 1 Clear Input 2 Clear to Set Input 2 Set to Clear Input 2 Set Input 2 Clear Input 3 Clear to Set Input 3 Set to Clear Input 3 Set Input 3 Clear Shock Copyright 2022 Sensata Technologies, Inc. Page 146 | 271 XT2500 Product Manual Parameter Type Description Criterion GSMRI User 0 User 1 Input 4 Clear to Set Input 4 Set to Clear Input 4 Set Input 4 Clear Timer A Timer B Timer C Timer D GSM registration state ADC 0 ADC 1 ADC 2 THS INT32 Threshold configuration parameter lists either units or the mask. Criterion Ignition off Ignition on ADC Main above threshold ADC Main below threshold Motion / No Motion Type Not Used Not Used Threshold Description N/A N/A Threshold in millivolts Threshold Threshold in millivolts Mask When the following bits are set, they look to the AGE parameter and not the motion/no-motion configuration. Transition Mask 0x1 0x2 0x4 0x8 No-motion to motion Motion to no-motion Motion periodic No-motion periodic Vibration InStage Not Used Not Used N/A N/A Copyright 2022 Sensata Technologies, Inc. Page 147 | 271 XT2500 Product Manual Parameter Type Description Criterion Input 1 Type Mask Input 2 Mask Input 3 Mask Shock GSMRI User 0 User 1 Input 4 Not Used Not Used Threshold Threshold Mask Description Input Mask 0x1 0x2 0x4 0x8 Input Mask 0x1 0x2 0x4 0x8 Input Mask 0x1 0x2 0x4 0x8 Clear to Set Set to Clear Set Clear Clear to Set Set to Clear Set Clear Clear to Set Set to Clear Set Clear N/A N/A Must be set to 1. Must be set to 1. Input Mask 0x1 0x2 0x4 0x8 Clear to Set Set to Clear Set Clear TIMER

(A,B,C,D) Mask Timer Criterion. Transition Mask 0x00001 0x00002 0x00010 0x00020 0x00040 0x00080 0x00100 Ignition off. Ignition on. Motion. No-Motion. Battery low. Battery normal. Input 1 set. Copyright 2022 Sensata Technologies, Inc. Page 148 | 271 XT2500 Product Manual Parameter Type Description Criterion Type Threshold GSM registration state Description Transition Mask 0x00200 0x00400 0x00800 0x01000 0x02000 0x04000 0x08000 Value 0 1 Input 1 clear. Input 2 set. Input 2 clear. Input 3 set. Input 3 clear. Input 4 set. Input 4 clear. Description Not registered. Registered. ADCx Threshold See Configuration 52: ADC Basic on p. 166 for more information. Value 0 1 2 3 Description Below threshold 1 Above threshold 1 Below threshold 2 Above threshold 2 TYPE UINT8 Transition will trigger if all AND are true, or any OR criteria are true. All criteria are forced to use OR type when transitioning from a power stage that has the micro-controller configured for deep sleep. Value 0 1 2 Description None AND OR Copyright 2022 Sensata Technologies, Inc. Page 149 | 271 XT2500 Product Manual 9.26. CONFIGURATION 28: SNAPSHOT CONFIGURATION Configures the conditions under which the device temporarily transitions out of a power stage to report a periodic power stage event (Events [12] Stage 0 Periodic on p. 29, [13] Stage 1 Periodic on p. 29, and [14] Stage 2 Periodic on p. 29). The device then transitions back to the previous power stage. If the device is in deep sleep, it will transition from deep sleep to send a periodic power stage event and then return to deep sleep. Read Schema

!cp:28,SSIDX Write Schema

!cs:28,SSIDX,W_CONFIRM, W_GPS,W_NET, FLAGS Parameter SSIDX Type INDEX DECIMAL Description Snapshot index, each power stage has a unique snapshot. I.e. Power stage 0 is connected to Snaphot 0. Value 0 1 2 Description SS0 SS1 SS2 W_CONFIRM UINT32 W_GPS W_NET UINT32 UINT32 FLAGS DECIMAL The max amount of time the device waits for the event to be sent before transitioning back to the previous power stage. Number of seconds to wait for GPS lock before creating snapshot event. Number of seconds to wait for network registration before creating snapshot event. Flags mask to enable snapshot behavior options. Value 1 2 4 8 16 32 64 Description Wait GPS Lock Wait Network Deliver Snapshot Delivery Confirm Deep Snap Filter (enables sending ONLY periodic power stage events in snapshot). Wait Max. Forces device to stay in snapshot mode for a configurable number of seconds. Disable periodic power stage events (12, 13, 14). Copyright 2022 Sensata Technologies, Inc. Page 150 | 271 XT2500 Product Manual 9.27. CONFIGURATION 29: ACCELEROMETER SHOCK/VIBRATION Configures the conditions under which the device records an accelerometer event. If this threshold is enabled and exceeded by any one accelerometer vector for the set duration, a shock event will be generated and the accelerometer code will collect the last 100 samples from the buffer, which will be reported in Parameter 53:

ACC (Accelerometer) on p. 70. Read Schema

!cp:29, Write Schema Revision 1: !cs:29,ENABLED,THRESH_SHOCK,DURATION,THRESH_VIBRATION,FREQUENCY_HZ Revision 0: !cs:29,ENABLED,THRESH_SHOCK,DURATION,THRESH_VIBRATION Parameter ENABLED Type DECIMAL Description Enable/Disable Accelerometer Event. Value 0 1 Description Disable. Enable. THRESH_SHOCK UINT16 DURATION THRESH_ VIBRATION FREQUENCY_HZ UINT16 UINT16 UINT16 Threshold is measured in milli-Gs and is used for shock detection. Valid range is 0 to 2000. Duration is measured in milliseconds. Threshold is measured in milli-Gs and is used for vibration detection. Valid range is 0 to 2000. Sample rate of accelerometer vectors in Hz. The only valid value is 100. Copyright 2022 Sensata Technologies, Inc. Page 151 | 271 XT2500 Product Manual 9.28. CONFIGURATION 30: BEST TIME CONFIGURATION Sets the priority of the time source vs. cellular time and the maximum age of the prioritized value before it switches to the deprioritized value when available. Setting this value to zero will disable switching to the lower priority time source and will always use the prioritized time source + system RTC if available. Read Schema Revision 1: !cp:30,TIME_TTL, PRIORITY Revision 0: !cp:30, TIME_TTL Write Schema Revision 1: !cs:30,TIME_TTL, PRIORITY Revision 0: !cs:30,TIME_TTL Param TIME_TTL Type UINT32 Description Configure threshold or disable switch to lower priority time source. PRIORITY UINT8 Value 0 Non-zero Description Always use the prioritized time source + system RTC if available. Duration in seconds before switching to the lower priority time source. Recommended range is 21600 seconds (6 hours) to 86400 seconds (1 day). Allows the prioritization of real GPS or real GSMtime sources. If no available, priority is given to time sources with GPS older than 1 second above cell time. See note in Parameter 50: BT (Best Time) on p. 68. Value 0 1 Description GPS_REAL GSM_REAL Copyright 2022 Sensata Technologies, Inc. Page 152 | 271 XT2500 Product Manual 9.29. CONFIGURATION 33: BUZZER CONFIGURATION Allows configuration of buzzer songs, and their triggers. Buzzer songs must include at least 1 frequency/duration pair and may include up to 10 pairs. Read Schema Revision 1: !cp:33,INDEX Revision 0:!cp:33, Write Schema Revision 1: !cs:33,INDEX,VOLUME,MASK,DEBOUNCE_S[,FRQ,DUR]

Revision 0: !cs:33,VOLUME,MASK[,FRQ,DUR]

Param INDEX VOLUME MASK Type UINT8 UINT8 ASCIIHEX Description Song index that is being set/requested.(0 - 4) Volume as a percentage of max. (1 - 100) This mask defines which things trigger this buzzer song. Value 0x001 0x002 0x008 0x010 0x020 0x040 0x080 0x100 0x200 0x400 0x800 0x1000 Description Ignition On Speed threshold exceeded Accel/Decel (GPS 0) threshold exceeded Accel/Decel (VBUS 0) threshold exceeded Idle Start Idle Periodic Accel/Decel (GPS 1) threshold exceeded Accel/Decel (GPS 2) threshold exceeded Accel/Decel (VBUS 1) threshold exceeded Accel/Decel (VBUS 2) threshold exceeded Ignition Off Driver ID. Triggers a buzzer song anytime the driver ID is set. The buzzer will not trigger if Bluetooth connection is lost or the driver ID is reset to zero. DEBOUNCE_S UINT16 FRQ DUR UINT16 UINT16 Debounce time in seconds. This prevents a triggered buzzer song from being played within a certain number of seconds from the previous time it was played. Frequency in Hz. Duration in milliseconds. Copyright 2022 Sensata Technologies, Inc. Page 153 | 271 XT2500 Product Manual 9.30. CONFIGURATION 34: DIRECTION CHANGE Configures the direction change event trigger criteria. Read Schema

!cp:34, Write Schema Revision 1: !cs:34,FLAGS,SPD_THS,HEAD_THS,EXPIRE_MS Revision 0: !cs:34,FLAGS,SPD_THS,HEAD_THS Param FLAGS Type UINT8 Description Event flags. Value 0x0 0x1 0x2 Description Disable direction change reporting. Enable direction change reporting. Expire Immediately. SPD_THS UINT8 HEAD_THS UINT16 TIMEOUT_MS UINT16 GPS-based speed (kph) must be above this threshold in order to send direction change events. Triggers the event if the GPS-based heading changes by more than this amount from the last time this event was sent (Tenths of degrees). A value of 0 will inhibit [18] Direction Change on p. 30 Timeout in milliseconds used to determine when to invalidate the pinned heading for event [18] Direction Change on p. 30. If 0x2 (expire immediately) is set this parameter is ignored. Copyright 2022 Sensata Technologies, Inc. Page 154 | 271 XT2500 Product Manual 9.31. CONFIGURATION 35: VBUS SPEED THRESHOLD Configures the speed threshold exceeded event trigger criteria. If this threshold is enabled, and is exceeded by VBUS speed (calculated at 1hz), an event will be generated. After the threshold has been exceeded, the speed must fall below the threshold minus hysteresis for the event to be enabled again. Read Schema

!cp:35, Write Schema Revision 1: !cs:35,ENABLE,SPD_THS,HYST,TIME Revision 0: !cs:35,ENABLE,SPD_THS,HYST Param ENABLE Type UINT8 Description Modifies event behavior. Value 0x0 0x1 Description Disable VBUSspeed reporting. Enable VBUS speed reporting. SPD_THS HYST UINT8 UINT8 TIME UINT8 VBUS-based speed threshold (kph) to trigger event. After this event has been triggered, speed must fall below ("SPD_THS"

HYST) before this event can occur again. (kph) Time in seconds speed must be above the threshold to trigger an event. Copyright 2022 Sensata Technologies, Inc. Page 155 | 271 XT2500 Product Manual 9.32. CONFIGURATION 36: GPS SPEED THRESHOLD Configures the speed threshold exceeded event trigger criteria. If this threshold is enabled, and is exceeded by GPS speed (calculated at 1hz), an event will be generated. After the threshold has been exceeded, the speed must fall below the threshold minus hysteresis for the event to be enabled again. Read Schema

!cp:36, Write Schema

!cs:36,ENABLE,SPD_THS,HYST Param ENABLE Type UINT8 Description Enables/disables GPS speed reporting. Value 0x0 0x1 Description Disable. Enable. SPD_THS HYST UINT8 UINT8 GPS-based speed threshold (kph) to trigger event. After this event has been triggered, speed must fall below ("SPD_THS"

HYST) before this event can occur again. (kph) Copyright 2022 Sensata Technologies, Inc. Page 156 | 271 XT2500 Product Manual 9.33. CONFIGURATION 37: GENERAL GEOFENCE Allows configuration of geofences. These settings are applied to all added geofences. XT2500 supports the following:

l 11-point polygons l circle, rectangle (stored as 2 points), and polygon fences l 3 concentric fences (the device can be inside or integrating into 3 fences max) l 500 total fences Read Schema

!cp:37, Write Schema

!cs:37,MASK,TIMEOUT,ENTER_S,EXIT_S Parameter MASK Type ASCIIHEX Description Enables/disables Timeout. Value 0 1 Description Disable. Enable. TIMEOUT UINT16 ENTER_S UINT8 EXIT_S UINT8 Timeout in seconds. If the timeout is enabled in the mask, this will cause an exit from any entered geofences after this number of seconds has elapsed without GPS lock. Number of consecutive seconds device must be inside a fence before declared inside. Number of consecutive seconds device must be outside a fence before declared outside. Copyright 2022 Sensata Technologies, Inc. Page 157 | 271 XT2500 Product Manual 9.34. CONFIGURATION 38: VBUS ODOMETER THRESHOLD Configures the criteria used to trigger an odometer threshold exceeded event. If this thresh is enabled, and is exceeded by 1 kilometer (calculated at 1hz) an event will be generated. Read Schema

!cp:38, Write Schema

!cs:38,ENABLE,THRESH Param ENABLE Type UINT8 Description Enables/disables VBUS odometer threshold. Value 0 1 Description Disable. Enable. THRESH UINT32 Sets the distance interval between VBUS odometer threshold exceeded events. (kilometers) 9.35. CONFIGURATION 39: GPS ODOMETER THRESHOLD Configures the criteria used to trigger an odometer threshold exceeded event. If this thresh is enabled, and is exceeded by 1 kilometer (calculated at 1hz) an event will be generated. Read Schema

!cp:39, Write Schema

!cs:39,ENABLE,THRESH Parameter FLAGS Type DECIMAL Description Enables/disables GPS odometer threshold. Value 0 1 Description Disable. Enable. THRESH UINT32 Sets the distance interval between GPS odometer threshold exceeded events. (meters) Copyright 2022 Sensata Technologies, Inc. Page 158 | 271 XT2500 Product Manual 9.36. CONFIGURATION 43: HEARTBEAT The Heartbeat configuration causes a heartbeat event to be generated after the configured time. Read Schema

!cp:43, Write Schema

!cs:43,FLAGS,INTERVAL_S Param FLAGS Type ASCIIHEX Description Enables/disables heartbeat reporting. Value 0 1 Description Disable. Enable. INTERVAL_S UINT32 Sets the interval timer in seconds. After this time elapses, an event is generated if the flags parameter is enabled. Copyright 2022 Sensata Technologies, Inc. Page 159 | 271 XT2500 Product Manual 9.37. CONFIGURATION 44: OUTPUT Determines the Output pin function and override configuration. Read Schema

!cp:44, Write Schema

!cs:44,ID,FLAGS,N_MANOVER,MANOVER_M,STATE,GSMOVER_M Parameter OUTPUT_ID Type UINT8 Description Defines the output ID to be configured. Value 1 2 Description Output 1. Output 2. FLAGS UINT8 Enables/disables GSM registration loss override. Value 0x0 0x1 Description Disable. Enable. AMO MOM STATE UINT8 UINT32 UINT8 Allowed Manual Overrides. The number of manual overrides that can occur. Manual Override Minutes. The number of minutes the override will apply for when an override is triggered. The current desired state of the starter control pin. Value 0 1 Description Vehicle starter is enabled (vehicle can start). Vehicle starter is disabled (vehicle cannot start). GOM UINT32 Length of time in minutes the device needs to continuously not have a GSM connection before a GSM override is applied to the output. Copyright 2022 Sensata Technologies, Inc. Page 160 | 271 XT2500 Product Manual 9.38. CONFIGURATION 45: VEHICLE MOVEMENT DETECTION Configures the criteria used to determine whether a device is moving. Read Schema

!cp:45, Write Schema

!cs:45,FLAGS,START_THS,STOP_THS,START_S,STOP_S Parameter FLAGS Type DECIMAL Description Enables/disables generation of the vehicle movement detection event(s). See events [34] Movement Start on p. 33 and [35] Movement Stop on p. 33 Value 0 1 Description Disable. Enable. START_THS STOP_THS START_S UINT8 UINT8 UINT16 STOP_S UINT16 Threshold speed for determining movement has started (KPH). Threshold speed for determining movement has stopped (KPH). Time in seconds needed to be above the start threshold to transition to a moving state. Time in seconds needed to be below the stop threshold to transition to a stopped state. Copyright 2022 Sensata Technologies, Inc. Page 161 | 271 XT2500 Product Manual 9.39. CONFIGURATION 46: XIRGO GATEWAY SERVICE Configures the check-in behavior for PPIDs and where they report to. Read Schema

!cp:46, Write Schema

!cs:46,FLAGS,HOST,PORT,INTERVAL_S Param FLAGS Type UINT32 Description Controls the PPIDcheck-in behavior. Value 0x1 0x2 0x4 0x8 Description Enables PPID check-in when a new VIN is discovered. Enables Periodic check-ins at the configured interval. Causes the device to refuse updates for the nanokernel or the vec_bin from XGS if it remains plugged into the same vehicle. If this flag is still set when the device is plugged into a new vehicle, receipt of a new nanokernel and vec_ bin will be allowed once when it recieves a new VIN, after which updates will continue to be prevented. Skips downloads when all pins are configured. HOST UINT8 PORT INTERVAL_S UINT16 UINT32 Resource address where check-in messages and sent and NKartifacts are retrieved from. Resource port. Interval between periodic check-ins (a periodic check-in can only be triggered at ignition off). Copyright 2022 Sensata Technologies, Inc. Page 162 | 271 XT2500 Product Manual 9.40. CONFIGURATION 47: FTP SETTINGS Configures FTP authentication and endpoint information, and determines active or passive FTP mode. Read Schema

!cp:47, Write Schema

!cs:47,MODE Param MODE Type UINT8 Description Determines FTP mode. Value 0 1 Description Active. (default) Passive. Copyright 2022 Sensata Technologies, Inc. Page 163 | 271 XT2500 Product Manual 9.41. CONFIGURATION 48: SYSTEM INFORMATION EVENT Allows configuration of when the system info event is recorded. Read Schema Revision 1: !cp:48,INDEX Revision 0: !cp:48, Write Schema Revision 1: !cs:48,INDEX,OR_MASK,AND_MASK,FLAGS,INTERVAL_S Revision 0: !cs:48,OR_MASK,AND_MASK,FLAGS,INTERVAL_S Param INDEX OR_MASK Type UINT8 ASCII HEX Description Valid range is 0-2. OR mask. Value 0x01 0x02 0x04 Description Update. Ignition on. Ignition off. AND_MASK ASCII HEX AND mask. Value 0x01 0x02 0x04 Description Update. Ignition on. Ignition off. FLAGS ASCII HEX Flags mask. Value 0x1 0x2 Description Asserted. Not asserted. INTERVAL_S UINT32 Periodic System Information Event reporting interval in seconds. Copyright 2022 Sensata Technologies, Inc. Page 164 | 271 XT2500 Product Manual 9.42. CONFIGURATION 49: PARK TIME THRESHOLD Determines when the device will send a park time threshold exceeded event. NOTE: This feature does not work with Virtual GPS Ignition Type. Read Schema

!cp:49, Write Schema

!cs:49,FLAGS,PT_THRESH Parameter FLAGS Type ASCIIHEX Description Enables/disables the park detection event. Value 0 1 Description Disable. Enable. PT_THRESH UINT32 Park Time threshold in seconds. Copyright 2022 Sensata Technologies, Inc. Page 165 | 271 XT2500 Product Manual 9.43. CONFIGURATION 50: IDLE DETECTION THRESHOLDS Configures the idle start, stop, and periodic events. Read Schema

!cp:50, Write Schema

!cs:50,IDM,IDT,IDS,IDP Parameter IDM Type DECIMAL Description Idle Report Mask. Value 0 1 2 4 Description None (default) Start Alert Stop Alert Periodic Alert IDT IDS IDP UINT32 UINT32 UINT32 Idle time start threshold in seconds. Idle time stop threshold in seconds. Idle time periodic threshold in seconds. 9.44. CONFIGURATION 52: ADC BASIC Basic ADC configuration determines how physical ADCs are tied to specific functions and threshold event reporting. Read Schema

!cp:52,INDEX Write Schema

!cs:52,IDX,PADC,FLAGS,EVMASK,THRESHOLD1,THRESHOLD2 Parameter IDX PADC Type UINT8 UINT8 Description Index of logical ADC being configured. (0 - 4) Selects the physical ADC the logical ADC uses for input. Value 0 1 2 3 Description None. Main voltage. Battery voltage. External ADC 1. Copyright 2022 Sensata Technologies, Inc. Page 166 | 271 XT2500 Product Manual Parameter FLAGS Type ASCIIHEX Description Selects additional options for the ADC. Value 0x1 0x2 0x4 Description Enable advanced configuration. Reserved. Interpret as wired ignition (THRESHOLD1 parameter acts as the logic level threshold when this is set). EVMASK ASCII HEX Determines when to send ADC event. Value 0x1 0x2 0x4 0x8 Description Above threshold 1. Below threshold 1. Above threshold 2. Below threshold 2. THRESHOLD1 THRESHOLD2 UINT16 UINT16 Voltage (in mV) threshold event trigger 1. Voltage (in mV) threshold event trigger 2. 9.45. CONFIGURATION 53: ADC ADVANCED Advanced ADC configuration allows classification and tracking of input voltages, threshold duration, and hysteresis settings. The index defines the logical ADC, multiple logical ADCs may use a single physical ADC as its source. NOTE: THS1 and THS2 are configured in ADC(Configuration 52) of the same index. The threshold above/below count determines how long the voltage must be above/below the threshold before a state-change is detected. The threshold above/below hysteresis determines how much above/below the threshold a voltage must be before a state-change is detected. Read Schema

!cp:53,IDX Write Schema

!cs:53,IDX,THS1_AC,THS1_BC,THS2_AC,THS2_BC,THS1_AH,THS1_BH,THS2_AH,THS2_BH,LL_PER_S,HL_PER_ S,LH_PER_S,HH_PER_S,PER_EVENTMASK Copyright 2022 Sensata Technologies, Inc. Page 167 | 271 XT2500 Product Manual Parameter IDX THS1_AC Type UINT8 UINT32 THS1_BC UINT32 THS2_AC UINT32 THS2_BC UINT32 THS1_AH UINT16 THS1_BH UINT16 THS2_AH UINT16 THS2_BH UINT16 LL_PER_S UINT32 HL_PER_S UINT32 LH_PER_S UINT32 HH_PER_S UINT32 PER_ EVENTMASK ASCII HEX Description Index of logical ADC being configured. (0 - 4) Duration in seconds that voltage must be above threshold 1 to detect a state change and send an event (if the event is enabled). Duration in seconds that voltage must be below threshold 1 to detect a state change and send an event (if the event is enabled). Duration in seconds that voltage must be above threshold 2 to detect a state change and send an event (if the event is enabled). Duration in seconds that voltage must be below threshold 2 to detect a state change and send an event (if the event is enabled). Sets the hysteresis which is used in conjunction with THS1 required to move from a "below" to an above threshold state. Actual threshold voltage can be found by adding THS1 and THS1_AH. Sets the hysteresis which is used in conjunction with THS1 required to move from an above to a "below" threshold state. Actual threshold voltage can be found by subtracting THS1_BH from THS1. Sets the hysteresis which is used in conjunction with THS2 required to move from a "below" to an above threshold state. Actual threshold voltage can be found by adding THS2 and THS2_AH. Sets the hysteresis which is used in conjunction with THS2 required to move froman above to a "below" threshold state. Actual threshold voltage can be found by subtracting THS2_BH from THS2. Duration in seconds at which the device sends periodic events from the LL state. Duration in seconds at which the device sends periodic events from the HL state. Duration in seconds at which the device sends periodic events from the LH state. Duration in seconds at which the device sends periodic events from the HH state. Event mask to select which states will send a periodic event. Value 0x1 0x2 0x4 0x8 Description Periodic LL Periodic HL Periodic LH Periodic HH Copyright 2022 Sensata Technologies, Inc. Page 168 | 271 XT2500 Product Manual 9.46. CONFIGURATION 55: COAP This configuration controls what resources the device will report to within the configured endpoint. The following are available substitutions to place within any of the resource names during configuration with characters before and/or after them, where % denotes a variable:

l %p = Platform number l %d = Device serial number (DSN) l %m = International Mobile Equipment Identity (IMEI) l %% = %

Any unsupported variables will be returned as they are written. For example, %s will return %s, whereas %p will return the platform number. Example:

!cs:55,0,xt%p/%d/event,xt%p/%d/command,xt%p/%d/config,xt%p/%d/blob,xt%p/%d

/tripstream Read Schema

!cp:55, Write Schema Revision 2: !cs:55,FLAGS,EVENT,CMD,CFG,BLOB,TRIPSTREAM Revision 1: !cs:55,FLAGS,EVENT,CMD,CFG,LOG,TRIPSTREAM,IMPACT Revision 0: !cs:55,FLAGS,EVENT,CMD,CFG,LOG Parameter FLAGS EVENT CMD CFG LOG_TOPIC BLOB Type UINT32 UINT8 UINT8 UINT8 STRING UINT8 Description Placeholder for CoAP transport (not supported). CoAP resource where device publishes event data. Max character length is 127. CoAP resource observed for device commands. Max character length is 127. CoAP resource where device publishes a read-only configuration (not supported). Max character length is 127. Defines the CoAP resource where logs are published. CoAP resource where device publishes both impact and log data. Data published to this resource will always be in an uncompressed Msgpack object with the following format:

Copyright 2022 Sensata Technologies, Inc. Page 169 | 271 XT2500 Product Manual Parameter Type Description

"TYPE": <type_uint8>,

"REV": <rev_uint8>,

"CMP": "lz4/lz4x2/zlib",

"DATA": <binary_data> (lz4/lz4x2/zlib compressed)

The TYPE field provides what type of data is in the DATA field. The REV field accounts for a change to the format for the specific type. The CMP field is dependent on which compressor is configured in Configuration 3: GSM Endpoint on p. 108. If no compressor is used, the CMP field will not be present and the DATA field will be uncompressed. If the CMP field is present, it will be a string of lz4, lz4x2, or zlib. The DATA will then be compressed with that algorithm. TRIPSTREAM UINT8 The DATA field contains the actual log or impact data. CoAP resource where device publishes tripstream data. Max character length is 127. STRING Unused. Defines the CoAP resource where impact data is received. IMPACT_ TOPIC NOTE: It is mandatory to enter a value in this field but it will be ignored. Copyright 2022 Sensata Technologies, Inc. Page 170 | 271 XT2500 Product Manual 9.47. CONFIGURATION 56: MOTION/NO-MOTION System configuration for determining motion and no-motion events. Events can be configured to report at periodic intervals or by percent of a state over a time window. Read Schema

!cp:56, Write Schema

!cs:56,MO_WIN_S,MO_HIT_PCT,MO_PER_S,NOMO_WIN_S,NOMO_HIT_ PCT, EVENT_REP Parameter MO_WIN_S Type UINT32 MO_HIT_PCT UINT8 MO_PER_S NOMO_WIN_S UINT32 UINT32 NOMO_HIT_ PCT NOMO_PER_S EVENT_REP UINT8 UINT32 ASCIIHEX Description Time in seconds for detecting motion state change from no motion to motion. (Max of 1024 seconds) The percentage of time slices in current window required to transition motion state to no-motion state. Duration in seconds at which motion periodic events are sent. Time in seconds for detecting no-motion state change from motion to no motion. (Max of 1024 seconds) The percentage of time slices in current window required to transition no-motion state to motion state. Duration in seconds at which no-motion periodic events are sent. Send an event to backend server. Event Mask 0x1 0x2 0x4 0x8 No-motion to motion. Motion to no-motion. Motion periodic. No-motion periodic. Copyright 2022 Sensata Technologies, Inc. Page 171 | 271 XT2500 Product Manual 9.48. CONFIGURATION 57: SNAPSHOT TRANSITION Configures the conditions under which the device transitions to and from a snapshot. NOTE: It is important to keep note of power stage transition timers when setting periodic snapshot timers because a power stage transition will reset them. Additionally, if periodic snapshot timers are longer than the power stage transition timers, they will never generate a snapshot if a timer is the only criteria for the power stage transition. Read Schema Revision 1: !cp:57,TRIDX Revision 0: !cp:57,SSDIX,TRIDX Write Schema Revision 1: !cs:57,TRIDX,STAGE_ID,FLAGS,ID,AGE,THS,TYPE Revision 0: !cs:57,SSIDX,TRIDX,FLAGS,ID,AGE,THS,TYPE Parameter SSIDX Type INDEX Description Snapshot index. Each Power Stage has a unique snapshot. Value 0 1 2 Description PS0 PS1 PS2 TRIDX INDEX Trigger criterion index. Revision 0 1 Range 0 - 7 0 - 23 STAGE_ID UINT8 The power stage the transition from snapshot is setup from. Value 0 1 2 Description PS0 PS1 PS2 FLAGS UINT8 Modifies trigger criterion behavior. Value 0x0 0x1 Description Disable the trigger. Enable the trigger. Copyright 2022 Sensata Technologies, Inc. Page 172 | 271 XT2500 Product Manual Parameter Type Description ID UINT8 ID of configurable trigger criterion. NOTE: Iobox must be connected for Input 1/2/3/4 to be available in deep sleep. Currently, the only supported mask in deepsleep is 0x3 - clear->set and set->clear NOTE: If any ADCs are configured for the external ADC on the I/O Box they will only work properly if an I/O Box is connected. They will not work in deepsleep. Value 0 1 2 3 4 6 7 10 11 12 13 20 21 22 24 25 26 27 30 31 32 Description Ignition off Ignition on ADC Main above threshold ADC Main below threshold Motion / No Motion detected Vibration InStage (minimum time in current stage) Input 1 Input 2 Input 3 Shock User 0 User 1 Input 4 Timer A Timer B Timer C Timer D GSM registration state ADC 0 ADC 1 Available in Deep Sleep No No Yes Yes Yes Yes Yes Limited. See limitation note above. Limited. See limitation note above. Limited. See limitation note above. Yes No No Limited. See limitation note above. No No No No No Yes. See limiation note above. Yes. See limiation note above. Copyright 2022 Sensata Technologies, Inc. Page 173 | 271 XT2500 Product Manual Parameter Type Description Value 33 Description ADC 2 Available in Deep Sleep Yes. See limiation note above. AGE UINT32 Length of time the trigger criteria must be true. (seconds) Criterion Ignition off Ignition on ADC Main above threshold ADC Main below threshold Motion/No-motion Vibration InStage (min time in current stage) Input 1 Clear to Set Input 1 Set to Clear Input 1 Set Input 1 Clear Input 2 Clear to Set Input 2 Set to Clear Input 2 Set Input 2 Clear Input 3 Clear to Set Input 3 Set to Clear Input 3 Set Input 3 Clear Shock GSMRI User 0 User 1 Input 4 Clear to Set Input 4 Set to Clear Input 4 Set Input 4 Clear Timer A Timer B Timer C Timer D GSM registration state ADC 0 ADC 1 ADC 2 Copyright 2022 Sensata Technologies, Inc. Page 174 | 271 XT2500 Product Manual Parameter Type Description THS INT32 Criterion Ignition off Ignition on ADC Main above threshold ADC Main below threshold Motion / No Motion Type Not Used Not Used Threshold Description N/A N/A Threshold in millivolts Threshold Threshold in millivolts Mask The least significant bits (0x01, 0x02) and the most significant bits

(0x04, 0x08) cannot be enabled at the same time within the same TCIDX. For example, a value of 3 or 12 would be acceptable, but a value of 15 would not. Wake Mask 0x1 0x2 0x4 0x8 No-motion to motion Motion to no-

motion Motion periodic No-motion periodic Vibration Instage Input 2 Not Used Not Used Mask N/A N/A The least significant bits (0x01, 0x02) and the most significant bits

(0x04, 0x08) cannot be enabled at the same time within the same TCIDX. For example, a value of 3 or 12 would be acceptable, but a value of 15 would not. Input Mask 0x1 0x2 0x4 0x8 Clear to Set Set to Clear Set Clear Copyright 2022 Sensata Technologies, Inc. Page 175 | 271 XT2500 Product Manual Parameter Type Description Criterion Input 3 Type Mask Shock Input 4 Not Used Mask Description The least significant bits (0x01, 0x02) and the most significant bits

(0x04, 0x08) cannot be enabled at the same time within the same TCIDX. For example, a value of 3 or 12 would be acceptable, but a value of 15 would not. Input Mask 0x1 0x2 0x4 0x8 Clear to Set Set to Clear Set Clear N/A The least significant bits (0x01, 0x02) and the most significant bits

(0x04, 0x08) cannot be enabled at the same time within the same TCIDX. For example, a value of 3 or 12 would be acceptable, but a value of 15 would not. Input Mask 0x1 0x2 0x4 0x8 Clear to Set Set to Clear Set Clear Battery ADCabove Battery ADCbelow Timer A Timer B Timer C Timer D GSM registration state ADCx Threshold Threshold in millivolts Threshold Threshold in millivolts Yes Yes Yes Yes Threshold Threshold Yes Yes Yes Yes Value 0 1 See Configuration 52: ADC Basic Description Not registered. Registered. Copyright 2022 Sensata Technologies, Inc. Page 176 | 271 XT2500 Product Manual Parameter Type Description Criterion Type Description on p. 166 for more information. Value 0 1 2 3 Description Below threshold 1 Above threshold 1 Below threshold 2 Above threshold 2 TYPE UINT8 Snapshot will trigger if all AND are true, or any OR criteria are true. All criteria are forced to use OR type when transitioning from a power stage that has the micro-controller configured for deep sleep. Value 1 2 Description AND OR 9.49. CONFIGURATION 58: MAPSTER Mapster is a subsystem that creates a mapping from the system defined event IDs to XT event IDs and Verbose event IDs. Event IDs are presented to the backend in the EV parameter which reports the events as a string. Read Schema

!cp:58, Write Schema

!cs:58,FLAGS,EVENTMAP_ID Parameter FLAGS EVENTMAP_ID Type ASCIIHEX UINT8 Description Reserved Determines which mapping is used to report event IDs Value 0 1 Description Default system ID XT 9.49.1. Mapster Default Table Default System ID 1 XT ID 6011 Copyright 2022 Sensata Technologies, Inc. Page 177 | 271 XT2500 Product Manual Default System ID 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 23 24 25 26 27 28 31 32 33 34 35 36 37 38 39 40 41 43 44 45 46 XT ID 6012 4001 4002 6115 6015 6014 6060 6006 6080 6081 6082 6001 6002 6004 6005 6021 6022 6019 6020 4006 6044 4050 6030 6031 7001 6050 6032 6017 6018 6016 6048 6049 4051 4052 Copyright 2022 Sensata Technologies, Inc. Page 178 | 271 XT2500 Product Manual Default System ID 47 48 49 50 51 XT ID 4053 6070 6071 6072 6073 9.50. CONFIGURATION 59: POWER STAGEEVENT REPORTING Enables event reporting upon entering a new power stage. Read Schema

!cp:59, Write Schema Revision 1: !cs:59,R_MASK, FLAGS, SPECIAL_REPORTING Revision 0: !cs:59,R_MASK,FLAGS Parameter R_MASK Type UINT8 Description Report Mask. Sends event 52 upon entering power stage if enabled in mask. On device reset, event 52 will be sent if Power Stage 0 is enabled in mask. Value 0x01 0x02 0x04 Description Power Stage 0. Power Stage 1. Power Stage 2. FLAGS SPECIAL_ REPORTING UINT8 UINT8 Reserved. Reserved. Value 0x01 0x02 Description Low Battery Lockout. Ship Mode. Copyright 2022 Sensata Technologies, Inc. Page 179 | 271 XT2500 Product Manual 9.51. CONFIGURATION 62: GPS ASSIST Configures the Multiple GNSSAssisted (MGA). Read Schema

!cp:62, Write Schema

!cs:62,FLAGS,TOKEN,GNSS,TACC,DTYPE,AGE,DELAY,ATMPTS Param FLAGS Type UINT32 Description Settings for GPS assistance. Value 0x1 0x2 0x4 Description Turn off the MGA download if a good lock is achieved. Turn off the MGA download if there are 9 sats. Turn off the MGA download if there DOP 1.5. TOKEN STRING GNSS ASCIIHEX Token used for the MGA download service (maximum length of 63 characters). Mask of which GNSS data to be requested. Value 0x01 0x02 0x04 0x08 0x10 Description GPS QZSS GLONASS BEIDOU GALILEO TACC DTYPE UINT16 UINT8 Timing accuracy (0-3600 seconds). Types of data to retrieve. Value 0x1 0x2 0x4 0x8 Description Ephemeris Almanac Auxiliary Position AGE DELAY ATMPTS UINT32 UINT16 UINT8 MGA valid period in seconds. Must be greater than or equal to 3600. Initial delay before downloading in seconds. Must be less than 3600. Maximum number of MGA download attempts for each MGA period. Copyright 2022 Sensata Technologies, Inc. Page 180 | 271 XT2500 Product Manual 9.52. CONFIGURATION 63: ACCEL ON AXIS Contains the thresholds and settings used to detect acceleration events using the accelerometer hardware. This configuration utilizes an oriented accelerometer and detects events "on-axis". When the thresholds and conditions defined by this configuration are satisfied, events 56 to 59 will be generated. Read Schema

!cp:63, Write Schema Revision 1: !cs:63,IDX,FLAGS,THS,ACTIVE_MS,HYST_MS,DIR Revision 0: !cs:63, IDX,THS,ACTIVE_MS,HYST_MS,DIR Shadow Schema Revision 1: 63:IDX,FLAGS,THS,ACTIVE_MS,HYST_MS,DIR Revision 0: 63:IDX,THS,ACTIVE_MS,HYST_MS,DIR Param IDX FLAGS Type UINT8 UINT8 Description Index of acceleration on axis threshold configuration (0 - 3). Enables/disables triggering events 56 to 59 for set thresholds. Value 0 1 Description Disabled (default). Enabled. THS ACTIVE_MS INT16 UINT16 HYST_MS UINT16 DIR UINT8 Force threshold (milli-Gs) Time (milliseconds) the threshold must be exceeded before a violation event occurs. Time (milliseconds) after threshold is no longer exceeded when the violation event ends. Direction of force. X axes are the front/back of the car for braking/accelerating while the Y axes are for turning the car right/left. Value 0 1 2 3 Description Positive Y axis (right). Negative Y axis (left). Positive X axis (front). Negative X axis (back). Copyright 2022 Sensata Technologies, Inc. Page 181 | 271 XT2500 Product Manual 9.53. CONFIGURATION 68: LED BEHAVIOR LEDbehavior is configured by a 32-bit mask that describes a two second duration. Each bit of the mask represents a duration of 1/16 second. Read Schema

!cp:68,LEDIDX Write Schema

!cs:68,LEDIDX,STATEIDX,TRIGGER,MODE,ITERATIONS,MASK,FLAGS Param LEDIDX Type UINT32 Description Index of LED STATEIDX TRIGGER UINT16 UINT8 There are 6 state slots per LED. Valid range is 0 - 5. Triggers for LEDbehavior changes Index 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 224 225 226 227 Description Default GPSLock GPS No Lock GPS Off GPSOn GSMRegistration GSMNo Registration GSMOff GSMOn Trip Start Trip End PPIDDISCO BLE Connect BLENo Connect BLEOff BLEOn Alternator On GSM Roaming UAP 0 UAP 1 UAP 2 UAP 3 MODE UINT8 Modes determine the presentation type. Background mode is used for state presentation, while Event mode is for transitory presentations. Copyright 2022 Sensata Technologies, Inc. Page 182 | 271 XT2500 Product Manual Param Type Description Example:The LEDBackground mode could be a steady blinking green LED. At a Triggered Event, the LEDscan be configured to an Event pattern. After the Event mode pattern is complete, the LEDs would resume the Background mode. Index 0 1 Description Background Event ITERATIONS MASK UINT16 UINT32 LEDbehavior iterations. 0 is disable, 65535 is forever. Mask to determine LEDblink pattern. Each bit represents 1/16th of a second. FLAGS UINT8 A blink pattern of ON for one second, OFF for one second uses the mask:

0xFFFF0000 LED Flags. Value 0x1 0x2 0x4 Description Disable LEDpattern in PS0. Disable LEDPattern in PS1. Disable LEDpattern in PS2. 9.54. CONFIGURATION 70: ACCELEROMETER Read Schema

!cp:70, Write Schema

!cs:70,EWMA_ALPHA,EWMA_WINDOW,FIR_MODE,VECTOR_FORCE,VECTOR_ORIENTATION,VECTOR_ IMPACT Parameter EWMA_ ALPHA EWMA_ WINDOW FIR_MODE VECTOR_ FORCE Type UINT8 Description EWMAalpha value: 0 - 20. UINT16 EWMA sample window. UINT8 UINT8 Reserved. Selects FIRfilter. Selects the vectors used for force threshold. Value 0 1 2 Description Accelerometer orientation vector raw. Accelerometer Orientation Vector EWMA. Accelerometer orientation vector FIR. Copyright 2022 Sensata Technologies, Inc. Page 183 | 271 XT2500 Product Manual 9.55. CONFIGURATION 71: INPUT CONFIGURATION Read Schema

{!cp: [71, INDEX ] }

Write Schema Revision 1: !cs:71,INDEX,FLAGS,HYSTERESIS_S,BLANKING_S Revision 0: !cs:71,INDEX,FLAGS,HYSTERESIS_S Parameter INDEX Type UINT8 Description Determines which input to configure. Index 0 1 2 3 Description Input1 Input2 Input3 Input4 FLAGS ASCII HEX Defines pin behavior. Value 0x02 0x04 0x08 0x10 0x20 0x40 Description Accumulator. Interpret as wired ignition. Clear event. Set event. Blanking. External Pull direction. If this bit is not set within the FLAGS parameter, it means the pin "clr" by default. To change the state of this pin to set, 12V need to be applied to the pin. If this bit is set within the FLAGS parameter, it means the pin is pulled up is "set" by default. To change the state of the pin to "clr", it will need to be pulled back down by grounding the pin. See Harpsiobox Connector on p. 18 for more information. HYSTERESIS_S BLANKING_S UINT16 UINT16 Hysteresis in seconds. Blanking duration. If blanking is enabled when a set/clear event is fired for a given input, further instances of transitions to that state will not generate an event during the blanking period. Once the blanking period Copyright 2022 Sensata Technologies, Inc. Page 184 | 271 XT2500 Product Manual Parameter Type Description passes, events can once again be generated. NOTE: Blanking for SET and CLEAR are independent. 9.56. CONFIGURATION 74: FAULTY ALTERNATOR Configures the thresholds for determining if an alternator's behavior is deemed faulty. Read Schema

!cp:74, Write Schema

!cs:74,HIGH_THRESH,LOW_THRESH,DBNC,DBNC_FAULTY Param HIGH_ THRESH LOW_ THRESH DBNC DBNC_ FAULTY Type UINT8 UINT8 UINT8 UINT8 Description The threshold in decivolts that the alternator voltage must go back above for DBNC seconds to be considered normal, after previously being considered faulty, and trigger a faulty alternator normal event. The threshold in decivolts the alternator voltage must go under for DBNC_ FAULTY seconds to be considered faulty and trigger a faulty alternator event. Time in seconds used to determine a faulty alternator normal event. Time in seconds used to determine a faulty alternator event. 9.57. CONFIGURATION 77: BLUETOOTH ENABLE Allows various operational/behavioral settings of bluetooth component. Read Schema

!cp:77,""

Write Schema

!cs:77,FLAGS Param FLAGS Type UINT8 Description Enables/disables bluetooth component. Value 0 1 Description Disable. Enable Copyright 2022 Sensata Technologies, Inc. Page 185 | 271 XT2500 Product Manual 9.58. CONFIGURATION 81: QUEUE LIMITING Allows for configuration of the number of events stored by the device. When the configured limit is met, the oldest events are dropped. Read Schema

!cp:81,INDEX Write Schema

!cs:81,INDEX,FS,MODE,THRESH Param INDEX FS Type UINT8 UINT8 Description Valid index is 0. Filesystem. Configures which filesystem the limit is applied to. Value 1 Description Triplog MODE UINT8 Mode. Identifies how the limit operates on the queue. Value 0 1 2 Description Disabled. First in, first out (FIFO). Makes space for new items to maintain the limit. When there are pending events (events in a transport buffer) because event buffering is enabled, this will revert to block mode and new items will not be logged. Block. Prevents new items when there are too many entries in the log. THRESH UINT16 Threshold. Number of entries allowed in the queue (when enabled). Copyright 2022 Sensata Technologies, Inc. Page 186 | 271 XT2500 Product Manual 9.59. CONFIGURATION 86: PIDS Read Schema

!cp:86,INDEX Write Schema

!cs:86,INDEX,FLAGS,PID_NUGGET_ID,INTERVAL_S Paramet er INDEX FLAGS Type Description UINT8 UINT1 6 Valid range is 0 to 23. It is recommended to start at index 4 when starting a new configuration setting. PID mask. If one of the PIDs has 0x08, 0x10, and/or 0x10 enabled, then parameters PD0/1/2 will attempt to report that PID's value. A single PID can get reported in multiple PD0/1/2 parameters, but a PD0/1/2 parameter can only report up to 10 PIDs at once. Example PID data set:

!cp:86,0:9,0,1

!cp:86,1:19,1,1

!cp:86,2:11,2,15

!cp:86,3:21,3,5

!cp:86,4:39,33,0 In this example, the PD0 parameter will report values for IDs 0, 1, and 33 since 0x08 is set with 9, 19, and 39. The PID1 parameter will report IDs 1, 2, and 33 since 0x10 is set with 19, 11, and 39. And the PID2 parameter will report 3 and 33 since 0x20 is set with 21 and 29. Value 0x00 0x01 0x02 0x04 0x08 0x10 0x20 Description Disable. Enable. Capture one per trip. High priority. Ensures PID is captured at its interval when there are timeslice conflicts with another PID. PD0. PD1. PD2. UINT8 Nugget ID. PID_ NUGGE T_ID Copyright 2022 Sensata Technologies, Inc. Page 187 | 271 XT2500 Product Manual Paramet er Type Description NOTE: In the nugget list below, there are some nuggets that do not have their own individual reference identifier to be packed into an event message. The PID data (PD0/1/2 found above in FLAGS) must be used to move parameter(s) that do not have their own reference identifier into event messages. A maximum of 10 nuggets per PD structure is allowed. Nugget ID 0 1 2 3 4 5 6 7 8 9 10 11 Units KPH RPM

MPG Celsius Discrete Sec Sec Sec

PD Req. N JBUS|OBDII|PPI D J|O N N N Y Y N Y Y Y Y Y J|O J|O|P J|O J J J|O J J J J J Description Speed (Factory default is 1)

(Factory default is 1) Fuel level (Factory default is 30) Miles per gallon

(Factory default is 5) Engine coolant temp PTO status Valu e 0x0 0x1 0x2 0x3 Descripti on No PTO drive engaged At leaset one PTO drive engaged Error Status not available Engine time PTO time Idle Time Throttle Engine load Accelerator Pedal Position Copyright 2022 Sensata Technologies, Inc. Page 188 | 271 XT2500 Product Manual Paramet er Type Description Nugget ID 12 13 14 15 16 Units

Celsius Celsius Celsius Discrete 18 19 20 21 22 23 Liters Sec Liters Sec Liters Discrete PD Req. Y Y JBUS|OBDII|PPI D J J Y Y Y Y Y Y y Y y J J J|P J J J J J J|P Description Engine torque Intake manifold temperature Intake air temperature Engine oil temperature Park Brake Status Valu e 0x0 0x1 0x2 0x3 Descripti on Parking brake not set Parking brake set Error Status not available Fuel Used Cruise Time PTO Fuel used Total Vehicle Hours Idle Fuel Used Gear Position

(PRNDL) Val ue 0x0 0 1-

125 126 127-

Descripti on JBUS Neutral JBUS Reverse Gears JBUS Park JBUS Copyright 2022 Sensata Technologies, Inc. Page 189 | 271 XT2500 Product Manual Paramet er Type Description Nugget ID Units PD Req. JBUS|OBDII|PPI D Description Descripti on Forward Gears Gear 1-16 Neutral Low Second Drive/For ward Park Reverse Overdrive Val ue 250 0x0 1-

0x1 0 0x1 0 0x1 1 0x1 2 0x1 3 0x1 4 0x1 5 0x1 6 Oil Level Oil Pressure Coolant Pressure Coolant Level Fuel Temperature Malfunction Indicator Lamp Valu e 0x0 0x1 Descripti on Off On LAMPstatus (only available on heavy duty vehicles). 25 26 27 28 29 33

KPA KPA

Celsius Discrete Y Y Y Y Y N J J J J J O 34 Discrete N J Copyright 2022 Sensata Technologies, Inc. Page 190 | 271 XT2500 Product Manual Paramet er Type Description Nugget ID Units PD Req. JBUS|OBDII|PPI D Description Valu e 0x00 0x01 0x02 0x04 0x08 0x10 0x20 0x40 Descripti on No Lamp Flashing Protect Lamp Flashing Amber Warning Lamp Flashing Red Stop Lamp Flashing Malfunct ion Indicator Lamp Protect Lamp Amber Warning Lamp Red Stop Lamp 0x80 Malfunct ion Indicator Lamp True odometer

(Factory default is 5) Oil Life Remaining Left Front Tire Pressure Right Front Tire Pressure Left Rear Tire Pressure 150 152 153 154 155 Kilometers

Kilopascals Kilopascals Kilopascals N N N N N J|O|P P P P P Copyright 2022 Sensata Technologies, Inc. Page 191 | 271 XT2500 Product Manual Paramet er Type Description Nugget ID 156 157 158 159 160 Units Kilopascals Kilopascals Kilopascals Kilopascals Discrete PD Req. N JBUS|OBDII|PPI D P N N N N P P P P Description Right Rear Tire Pressure Left Rear Inside Tire Pressure Right Rear Inside Tire Pressure Spare Tire Pressure Brake lamp Valu e 0x0 0x1 Descripti on Off On 163 Discrete Driver seat belt 164 Discrete Valu e 0x0 0x1 0x2 0x3 Descripti on Detache d Attached Reserve d Reserve d Passenger seat belt Valu e 0x0 0x1 Descripti on Detache d Attached 165 Discrete Airbag lamp Copyright 2022 Sensata Technologies, Inc. Page 192 | 271 XT2500 Product Manual Paramet er Type Description Nugget ID Units PD Req. JBUS|OBDII|PPI D Description Valu e 0x0 0x1 Descripti on Off On Interval_ S UINT1 6 Period at which this PID should be requested on the vehicle bus (seconds). 9.60. CONFIGURATION 87: ELD Read Schema

!cp:87, Write Schema

!cs:87,FLAGS,UDR_INTERVAL_S Parameter FLAGS Type UINT16 Description ELDcreation flags. Value 0x1 0x2 0x4 Description Enable. UDR Enable. DID via BLE. UDR_ INTERVAL_S UINT16 Interval in seconds between UDR creation when the DID parameter has not been set and a trip is active. Copyright 2022 Sensata Technologies, Inc. Page 193 | 271 XT2500 Product Manual 9.61. CONFIGURATION 89: UPDATE INHIBIT Configures when to prevent the installation of updates after downloading them. If both the FLAGS and TIMEOUT are set to 0, the inhibitor flags are bypassed (I.e. not in a trip, and/or triplog is empty). If the timeout is exceeded the installation will proceed. Alternatively, the command !mfs:20 can be sent to force the installation. Read Schema

!cp:89, Write Schema

!cs:89,FLAGS,TIMEOUT Param FLAGS Type UINT16 Description Value 0x1 0x2 Description Prevent updates from installing during a trip. Prevent Updates from installing when the eventlog is not empty. TIMEOUT UINT16 Maximum delay in minutes before installing the update. 9.62. CONFIGURATION 90: DIAGNOSTIC MASK Allows configuration of event 33 (diagnostic) generation based on specific criteria. Read Schema

!cp:90, Write Schema

!cs:90,MASK Parameter MASK Type ASCIIHEX Description Mask values. Value 0x1 Description Generate a diagnostic event on power-up if a Watchdog reset occurs. Copyright 2022 Sensata Technologies, Inc. Page 194 | 271 XT2500 Product Manual 9.63. CONFIGURATION 92: ENABLE DTCS Enables DTCs, sets a periodic rate in seconds, and sets a maximum speed (kph) for DTC gathering. Read Schema

!cp:92 Write Schema

!cs:92,FLAGS,INTERVAL_S,SPEED_KPH Parameter Flags Type UINT8 Description Flags. Value 0x0 0x1 0x2 Description DTC configuration disabled. DTCs enabled. Capture once at the start of each trip. INTERVAL_S UINT16 SPEED_KPH UINT8 Interval in seconds between DTC gathering. The recommended time is approximately 10 minutes (600 seconds). Speed threshold in kilometers per hour. DTC gathering will not occur while the vehicle speed is greater than SPEED_KPH. Copyright 2022 Sensata Technologies, Inc. Page 195 | 271 XT2500 Product Manual 10. SUBSYSTEMS 10.1. APPLICATION 10.1.1. Application Reset Performs a software reset. NOTE: If the <flags> field is not filled out when issuing this command, it will default to 0x1 and will not save the stash. Command Type UART Syntax Command

!nx:<flags>

Network Response OK Parameter

<flags>

Type UINT8 Description Optional flags field. Value 0x1 Description Does NOT save configurations prior to the reboot. 10.2. BACKEND 10.2.1. Backend Debug Enable Turn on back-end server communication debug prints. Command Type UART Syntax Command

!sde Response OK Copyright 2022 Sensata Technologies, Inc. Page 196 | 271 XT2500 Product Manual 10.2.2. Backend Debug Disable Turn off back-end server communication debug prints. Command Type UART Syntax Command

!sdd Response OK 10.2.3. Backend Check-In Sending this command causes the device to perform a check-in with AWS where commands can then be issued via job. Command Type JOB, UART, or SMS Syntax Command

@callhome 10.3. BOOT COUNT 10.3.1. Boot Count Query Requests current boot count. Command Type UART Syntax Command

!nbc Response OK 10.3.2. Boot Count Set Sets new boot count Command Type UART Syntax Command

!nbc:<new_count>

Response OK Copyright 2022 Sensata Technologies, Inc. Page 197 | 271 XT2500 Product Manual 10.4. BUZZER 10.4.1. Play Song Plays any of the configured songs. Command Type UART Syntax Command

!zp,<index>

Response OK Parameter

<index>

Type UINT8 Description Index of configured song. 10.5. CELLULAR 10.5.1. Cellular Debug Enable Requests cellular subsystem to route debug messaging to the interface which the command was sent to. Command Type UART Syntax Command

!gde Response OK 10.5.2. Cellular Debug Disable Requests cellular subsystem to disable routing of debug messaging to the interface which the command was sent to. Command Type UART JOB Syntax Command

!gdd Response OK Command

{!gdd: [: ] }

Response OK Copyright 2022 Sensata Technologies, Inc. Page 198 | 271 XT2500 Product Manual 10.5.3. Cellular Print Information Provides information about the cellular subsystem. This include the model, firmware revision, IMEI and CCID. Command Type UART JOB Syntax Command

!gpd Response Model: <model>

FW Revision: <fwrev>

IMEI: <imei>

CCID: <ccid>

Command

{!gpd: [: ] }

Response Model: <model>

FW Revision: <fwrev>

IMEI: <imei>

CCID: <ccid>

Parameter

<model>

<fwrev>

<imei>

<ccid>

Type STRING STRING STRING STRING Description Cellular Model Cellular Firmware Revision IMEI CCID 10.5.4. Cellular Reset Resets the cellular module. If the reset is performed without a specified severity level, the device progresses through sequenced security levels as needed. If the device can not be successfully reset at the current severity level, it automatically progresses to the next method of reset. If the severity is specified (!gx:<severity>), the device uses only the specified severity level which is implemented per module:

SARA-R410M Severity Level 1 2 3 4 Description AT+CFUN=1,1 Power-off via RESET pin for 10s Power-off via ONOFF pin Load switch off for 15s Copyright 2022 Sensata Technologies, Inc. Page 199 | 271 XT2500 Product Manual LARA-R202 Severity Level 1 2 3 4 Description AT+CFUN=1,1 Power-off via RESET pin for 10s Power-off via ONOFF pin Load switch off for 15s NOTE: These descriptions are subject to change over firmware versions if any new behavior is needed. Command Type UART Syntax Command

!gx OR !gx:<severity>

Response OK Copyright 2022 Sensata Technologies, Inc. Page 200 | 271 XT2500 Product Manual 10.5.5. Load Certificates Loads specified certificate onto device. This command can only be used after the device has been set to bypass mode, and previous certificates have been deleted from the module. Command Type UART JOB Syntax Command

!gcc:<index>

Response OK Command

{!gcc: [<index>: ] }

Response OK Parameter

<index>

Type UINT8 Description Value 0 1 2 3 4 5 6 7 8 9 Description Device Private Key Device Certificate Server Certificate 1 Server Certificate 2 Server Certificate 3 Server Certificate 4 Server Certificate 5 Server Certificate 6 Server Certificate 7 Server Certificate 8 10.5.6. GSM uFOTA Command The uFOTA check-in command (!gfc) is a job-only command, and will not work via the console. Causes the device cell module to check in to the uFOTA server to determine if a cell module firmware is available. If an update is available, the device will install the new firmware. If the command is sent before new firmware is available or before the device IMEI has been added to the campaign, the server will instruct the device to try again in 3,153,600 seconds (1 year). Command Type JOB Syntax Command

{!gfc: [, ] }

Response AT+UFOTACONF=2,31536000 Copyright 2022 Sensata Technologies, Inc. Page 201 | 271 XT2500 Product Manual 10.5.7. Cellular Status Provides information about the cellular status. Command Type UART Syntax Command

!gps Response PowerMode: <PowerMode>

State: <state>

Pins: <pins>

Certificates: <certificates>

Parameter

<PowerMode>

<state>

<pins>

Type STRING STRING STRING Description Displays the current power mode. Displays the current cellular state (e.g. ATTACHED). Displays state (s/c) of the following pins:

<PWR_ON>, <RESET_N>, <PWR>, <PWR_IND>

Pin PWR_ON RESET_N PWR PWR_IND Description Pin is cleared to power on the module. Pin is set to reset the cellular module. Pin is set to enable the voltage regulator that powers the cellular module. Indicates whether the module is powered on.

<certificates>

STRING Displays the number of certificates. Copyright 2022 Sensata Technologies, Inc. Page 202 | 271 XT2500 Product Manual 10.5.8. Cellular Statistics Provides information about the cellular statistics. Command Type UART Syntax Command

!gpc Response Data Bytes Out: <#>, In: <#>

Session Socket: <#>, Http: <#>, Ftp: <#>

Session Activate Attempt: <#>, Success: <#>

Session Deactivate Attempt: <#>, Success: <#>

SessionConnect Attempt: <#>, Success: <#>

Session Disconnect Attempt: <#>, Success:<#>

Registration State: <#> {#s}

Registration Change: {#}

Registration Time: {#s,#s}

Module Reset: <#>, Crash: <#>

Errors: <errors>

Flow-Control Module CTS: <#>, Device CTS: <#>

10.6. EVENT FILESYSTEM 10.6.1. Event Filesystem Debug Enable Turn on event filesystem debug prints. Command Type UART Syntax Command

!ede Response OK 10.6.2. Event Filesystem Debug Disable Turn off event filesystem debug prints. Command Type UART Syntax Command

!edd Response OK Copyright 2022 Sensata Technologies, Inc. Page 203 | 271 XT2500 Product Manual 10.6.3. Event Filesystem Print Information Print information about the event filesystem state. Command Type UART JOB Syntax Command

!epi:<file_system_id>

Response index: ffff5630 segment0.key: cafebabe, index: ffff5631 segment0.bitmap:

00 00 00 00 00 00 00 00 00 00 00 7F FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF table.head: 2000, tail: 40000, wr: 1af6e, rd: 19c58, rdptr: 1ac58 segment1.key: cafebabe, index: ffff5630 segment1.bitmap:

00 00 00 00 00 00 00 00 00 00 00 3F FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF table.head: 2000, tail: 40000, wr: 1af6e, rd: 19c58, rdptr: 1af6e OK Command

{!epi: [<file_system_id>, ]}

Response index: ffff5630 segment0.key: cafebabe, index: ffff5631 segment0.bitmap:

00 00 00 00 00 00 00 00 00 00 00 7F FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF table.head: 2000, tail: 40000, wr: 1af6e, rd: 19c58, rdptr: 1ac58 segment1.key: cafebabe, index: ffff5630 segment1.bitmap:

00 00 00 00 00 00 00 00 00 00 00 3F FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF Parameter

<file_system_ ID>

table.head: 2000, tail: 40000, wr: 1af6e, rd: 19c58, rdptr: 1af6e OK Type UINT8 Description Identifies the triplog the user wants to erase. Value 7 Description TRIPLOG Copyright 2022 Sensata Technologies, Inc. Page 204 | 271 XT2500 Product Manual 10.6.4. Event Filesystem Reset Clear the event filesystem event log. Command Type UART JOB Parameter

<file_system_ id>

Syntax Command

!ex:<file_system_id>

Response OK Command

{!ex: [<file_system_id>, ]}

Response OK Type UINT8 Description Identifies the triplog the user wants to erase. Value 7 Description TRIPLOG 10.6.5. Event Filesystem Header Read Reads events and prints diagnostic information from a selected number of records. Command Type UART Parameter

<file_system_ ID>

Syntax Command

!er:<file_system_ID>,<count>

Response read <number of records> records

<index0>:<readptr0>,<ret0>

event: <event id>, extension_size: <extension size>

Type UINT8 Description Identifies the triplog the user wants to erase.

<count>

UINT16 Value 7 Number of records. Description TRIPLOG Copyright 2022 Sensata Technologies, Inc. Page 205 | 271 XT2500 Product Manual 10.7. GPIO 10.7.1. GPIO Pin Configuration Pin ID 1 2 4 5 6 7 8 11 12 13 20 21 23 24 30 31 35 36 37 73 88 223 224 225 226 227 228 229 230 231 232 233 Pin Function Input 1 Input 2 Output 1 Output 2 GSM Module Reset GSM Module ON/OFF GSM Module Power UART1Rts UART1Cts GPS Power Button 1 Blue LED Accelerometer INT1 Accelerometer INT2 Main Voltage ADC GSM Voltage ADC Battery ADC Temp ADC External ADC1 External ADC2 Buzzer External ADC3 TRILED_Red TRILED_Green TRILED_Blue OWB FetCtl OWB LdoEn OWB I/O Temperature Switch Charge Status Charge Fault Charge Set Copyright 2022 Sensata Technologies, Inc. Page 206 | 271 XT2500 Product Manual 10.7.2. GPIO Print Display pin configuration. Command Type UART JOB Syntax Command

!ip:<func>

Response INPUT

<func>,<type>,<state>,<mode>,<trigger>

OUTPUT

<func>,<type>,<state>

PERIPH

<func>,<periph>

OK Command

{!ip: [<func>, ]}

Response N/A Parameter

<func>

Type UINT16 Description Function Identifier

<type>

UINT8

* will print all pins. Pin Type Value Input Output Periph Description GPIO Input GPIO Output Peripheral controlled pin

<state>

UINT8 Pin State Value SET CLEAR Description Pin is asserted Pin is not asserted

<mode>

UINT8 Pin Mode Value ACTIVE_ HIGH Description Pin is asserted when logic level is high and not asserted when logic level is low. Copyright 2022 Sensata Technologies, Inc. Page 207 | 271 XT2500 Product Manual Parameter Type Description Value ACTIVE_ LOW Description Pin is asserted when logic level is low and is not asserted when logic level is high

<trigger>

UINT8 Pin Trigger Value NONE SET CLEAR BOTH Description This pin does not generate system interrupts Pin generates an interrupt when <state> transitions from CLEAR to SET. Pin generates an interrupt when <state> transitions from SET to CLEAR. Pin generates an interrupt when <state> transitions from either SET to CLEAR or CLEAR to SET. 10.7.3. GPIO Clear Clear output pin state. Command Type UART JOB Syntax Command

!ic:<func>

Response OK Command

{!ic: [<func>, ]}

Response N/A Parameter

<func>

Type UINT16 Description Function Identifier Copyright 2022 Sensata Technologies, Inc. Page 208 | 271 XT2500 Product Manual 10.7.4. GPIO Set Set output pin state. Command Type UART Syntax Command

!is:<func>

Response OK Command

{!is: [<func>, ]}

Response N/A Parameter

<func>

Type UINT16 Description Function Identifier 10.8. GPS 10.8.1. GPS Debug Enable Requests GPS subsystem to route debug messaging to the interface which the command was sent to. Command Type UART Syntax Command

!yde Response OK 10.8.2. GPS Debug Disable Requests GPS subsystem to disable routing of debug messaging to the interface which the command was sent to. Command Type UART JOB Syntax Command

!ydd Response OK Command

{!ydd: [: ] }

Response OK Copyright 2022 Sensata Technologies, Inc. Page 209 | 271 XT2500 Product Manual 10.8.3. GPS Print Information Provides information about the GPS subsystem. This includes the state, mode, and power mode at the time the command was issued. Command Type UART JOB Syntax Command

!ypi Response State: <state>

Mode: <mode>

PowerMode: <powermode>

Command

{!ypi: [: ] }

Response State: <state>

Mode: <mode>

PowerMode: <powermode>

Parameter

<state>

Type String Description Value NONE INIT PREPARE ACTIVE RESET TESTINIT TEST Description State-machine is disabled Initializing Being configured for solutions Normal operation Chip is being reset Test mode is being initialized Test mode is active

<mode>

String Value OFF ON REFRESH Description Chip is Off Chip is On Chip is On for the function of an ephemeris refresh

<powermode>

String Value OFF ON OFFREFRESH Description Chip is Off Chip is On Chip is in an Off mode where it will manage a periodic ephemeris refresh Copyright 2022 Sensata Technologies, Inc. Page 210 | 271 XT2500 Product Manual 10.9. LED 10.9.1. LED Enable/Disable Enables/disables normal LED activity. Copyright 2022 Sensata Technologies, Inc. Page 211 | 271 XT2500 Product Manual 10.9.2. LED Configuration Command Type UART Syntax Command

!lps:<ident>,<mode>,<iterations>,<mask>,<slice_reset>,<flags>

Response OK Parameter

<ident>

Type UINT8 Description Identity of LED. Value 1 4 16 Index 4 64 128 512 1024 4096 8192 Value 0 1 Description Green Blue Amber Description Center blue Left orange Right orange Left green Right green Left blue Right blue Description Background: Changes base LED behavior. Event: Triggers configured pattern then returns to background behavior. Duration of sequence. Entering values over 0xFF will cause the pattern to repeat indefinitely. AND pattern mask of the 32 time slices Unused. LED flags inhibit the particular LED pattern from being displayed if the device is in the corresponding power stage. If there is a second pattern that is inhibited and active, e.g. an inhibited event pattern and an uninhibited background pattern, it will still display. Copyright 2022 Sensata Technologies, Inc. Page 212 | 271

<mode>

UINT8

<iterations>

UINT32

<mask>

<slice_reset>

<flags>

UINT32 HEX N/A UINT32 XT2500 Product Manual Parameter Type Description Value 0x1 0x2 0x4 Description Disable LEDpattern in PS0. Disable LEDPattern in PS1. Disable LEDpattern in PS2.

/*Pattern progresses from lsb to msb

* pattern.mask = 0x0000f0ac;

* slice 0: (0x0000f0ac & 0x00000001) = 0

* slice 1: (0x0000f0ac & 0x00000002) = 0

* slice 2: (0x0000f0ac & 0x00000004) = non-zero

* slice 3: (0x0000f0ac & 0x00000008) = non-zero

* slice 4: (0x0000f0ac & 0x00000010) = 0

* slice 5: (0x0000f0ac & 0x00000020) = non-zero

* slice 6: (0x0000f0ac & 0x00000040) = 0

* slice 7: (0x0000f0ac & 0x00000080) = non-zero

* slice 8: (0x0000f0ac & 0x00000100) = 0

* slice 9: (0x0000f0ac & 0x00000200) = 0

* slice 10: (0x0000f0ac & 0x00000400) = 0

* slice 11: (0x0000f0ac & 0x00000800) = 0

* slice 12: (0x0000f0ac & 0x00001000) = non-zero

* slice 13: (0x0000f0ac & 0x00002000) = non-zero

* slice 14: (0x0000f0ac & 0x00004000) = non-zero

* slice 15: (0x0000f0ac & 0x00008000) = non-zero

* slice 16: (0x0000f0ac & 0x00010000) = 0

* slice 31: (0x0000f0ac & 0x80000000) = 0 Copyright 2022 Sensata Technologies, Inc. Page 213 | 271 XT2500 Product Manual 10.10. MANAGER 10.10.1. Manager Enable Security Enables JTAG security on the microprocessor. Command Type UART JOB Syntax Command

!mss Response OK Command

{!mss: [, ] }

Response N/A Copyright 2022 Sensata Technologies, Inc. Page 214 | 271 XT2500 Product Manual 10.10.2. Set Device Description Parameter Configure parameter in the persistent device description. Command Type UART JOB Syntax Command

!mcs:<item>[,<params>]

Response OK Command

{!mcs: [<item>, <params> ] }

Response N/A Parameter

<item>

Type UNIT8 Description Value 0 1 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 Description Reset Description Version Mask Bits Pin Configuration Sensor Conversions HWID DSN Cellular Model FW Update AES Key Customer AES Key Sim Position Sim Default Dual Sim Supported Auxiliary Port Selection Version String Transport AES Key FWMode Bits FW Flag Bits Certificate Mark Configuration HW Platform Hardware Options

<params>

0,0 0,1 Description Accelerometer disable Accelerometer enable Copyright 2022 Sensata Technologies, Inc. Page 215 | 271 XT2500 Product Manual Parameter Type Description Value 22 23 24 Description SMS Salt Number of LEDs Sets the number of LED bs that have defined behavior in the device description.

<IDX>,<LEDID>,<BEHAVIOR>

IDX Index oif the LEDbehavior being updated. Should be less than the number of LEDs set by !mcs:23 LEDID The identifier of the LED on the board we want assign a behavior. The LED's that are available on a particular board can be found via the !lil command. The ident describes the physical LED. Bits 15:13 12:10 9:0 Behavior Value 0 1 2 Description LEDinstance, 0 = the first LED of this kind, 1 =

seconds instance of this kind, etc. Range 0- 7. LEDcount, number of colors/gpio for the LED object, typically 1 or 3 for single or tri-color LED. LEDcolormask for each individual color, not combinations. See LEDCOLORMASK enumerations. Description No flashing ever GPSlegacy behavior (See green LED for description of this behavior) GSMlegacy behavior (See blue LED for description of this behavior) 25 26 Under voltage lockout threshold in mV. Determines when the device will enter lockout mode based on internal battery voltage. Under voltage lockout hysteresis in mV. Hysteresis used to determine when the device should exit lockout mode based on internal battery voltage. Device exits when voltage exceeds Undervoltage Lockout + Undervoltage Hysteresis. Copyright 2022 Sensata Technologies, Inc. Page 216 | 271 XT2500 Product Manual Parameter Type Description Value 27 Description Sensor conversion setup.

<IDX>,<FAMILY>,<FUNCTION>,<CONVERSION>,<SLOPE>,<OFFSE T>

IDX Family Enumeration Value 0 1 2 3 4 Description PIO ADC MEMS OWB MAX Function Enumeration Value 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 Description None Main Voltage GSM Voltage GPSVoltage VBUS 5 Voltage Battery Voltage Ext 1 Voltage Ext 2 Voltage Ext 3 Voltage Temperature Voltage Accelerometer Input 1 Input 2 Input 3 Button 1 Temperature Switch Charge Status Charge Fault Maximum Conversion Type Enumeration Value 0 1 Description Count to mV Count to C * 1E -3 Copyright 2022 Sensata Technologies, Inc. Page 217 | 271 XT2500 Product Manual Parameter Type Description Value Description Slope Slope int32_t in units of the base conversion type *10^6 (if we are mV, then slope is taken in Volts*10^6) Description units of the base conversion type *10^6 Value 0 Offset Offset int32_t in units of the base conversion type *10^6(if we are mV, then slope is taken in Volts*10^6) Value 0 Description units of the base conversion type *10^6 28 Firmware Options. Value 0 1 Description Battery lockout Charge monitor 36 GPS model. Value 0 1 2 3 4 5 6 Description GPSHWRevision_uBlox_00040007 GPSHWRevision_uBlox_00070000 GPSHWRevision_uBlox_00080000 GPSHWRevision_sony_CDX5612 GPSHWRevision_quectel_BGSOC GPSHWRevision_alt_ALTSOC GPSHWRevision_uBlox_000A0000 Copyright 2022 Sensata Technologies, Inc. Page 218 | 271 XT2500 Product Manual 10.10.3. Watchdog Disable Triggers a watchdog reset by letting the time elapse. Command Type UART JOB Syntax Command

!mwd Response OK Command

{!mwd: [, ] }

Response N/A 10.10.4. Reset Diagnostic Data Resets the diagnostic counters. Command Type UART Syntax Command

!mdr Response OK 10.10.5. Diagnostic Print Prints a list of diagnostic values. Command Type UART Syntax Command

!mpd Response OK Copyright 2022 Sensata Technologies, Inc. Page 219 | 271 XT2500 Product Manual 10.10.6. Manager print Prints information stored in device description, DSN, platform, etc. Command Type UART JOB Syntax Command

!mcp Response OK Command

{!mcp: [, ] }

Response N/A 10.10.7. Crash Information Reports information when unexpected resets ocurr. Command Type UART Syntax Command

!mhp Response OK 10.11. NANOKERNEL 10.11.1. Check-in Set Forces the device to check-in to the Xirgo gateway server once a trip is completed. Command Type UART Syntax Command

!qcs Response OK Copyright 2022 Sensata Technologies, Inc. Page 220 | 271 XT2500 Product Manual 10.11.2. Clear Fault State Clears the nanokernel fault state which allows device to resume PPID requests after a nanokernel fault has been detected. A reset command (!nx) must be executed after this command. Command Type UART Syntax Command

!qsr Response OK Copyright 2022 Sensata Technologies, Inc. Page 221 | 271 XT2500 Product Manual 10.12. POWER MANAGEMENT 10.12.1. Power Management Debug Enable Requests Power Management subsystem to route debug messaging to the interface which the command was sent to. Command Type SET Syntax Command

!bde Response OK 10.12.2. Power Management Debug Disable Requests Power Management subsystem to disable routing of debug messaging to the interface which the command was sent to. Command Type UART JOB Syntax Command

!bdd Response OK Command

{!bdd: [: ] }

Response OK Copyright 2022 Sensata Technologies, Inc. Page 222 | 271 XT2500 Product Manual 10.12.3. Power Management Ship Mode Enable Enable ship mode by setting user trigger 0. Command Type UART Syntax Command

!but:<id>

Network Response OK Parameter ID Type UINT8 Description Set user trigger. Value 0 1 Description User trigger 0 User trigger 1 10.13. UPDATE 10.13.1. Firmware Update Command to initiate update of various system components. NOTE: GSMFW method does not accept port when an HTTP URI is passed in. Command Type UART JOB Syntax Command

!uf:<type>,<xmodem>

Command

{!uf: [<type>: <uri> ] }

Parameter

<type>

Type UINT8 Description Value 1 2 3 6 10 20 30 31 Description Main Firmware Bootloader Main firmware and Bootloader package Geofence Command List Cellular Module Firmware Security Truststore Device Certificate Copyright 2022 Sensata Technologies, Inc. Page 223 | 271 XT2500 Product Manual Parameter Type Description Value 32 33 40 41 Description Device Private Key Server Certificate (Certificate Authority) BLEFirmware VEC NOTE: The command list can support all commands. Any command that resets the unit should be placed at the end of the list as they will interrupt the process.

<xmodem>

<uri>

STRING STRING Update via xmodem transfer over UART. Absolute URI of resource l The absolute URI must include the port even when using the default HTTPs port 443. l Username/password in the URI for basic authentication is not supported. Method ftp://

http://

https://

Description Update via FTP over the network. Update via HTTP over the network. Update via HTTPS over the network. 10.14. USER CONFIGURATION 10.14.1. Configuration Set Sets configuration id with given arguments and assumes most current revision. See Device Configuration section for further detail. Command Type UART Syntax Command

!cs : <id>,<args>

Response OK Copyright 2022 Sensata Technologies, Inc. Page 224 | 271 XT2500 Product Manual 10.14.2. Configuration Print Prints active configuration of specified id and assumes the most current revision. See Device Configuration section for further detail. Command Type UART Syntax Command

!cp : <id>

Response OK 10.14.3. Configuration Set Version Allows the user to specify a version for the configuration to set. Revision 255 is current. This command follows the same syntax as !cs other than the <revision> parameter. See the Device Configuration section for details on a specific configuration. Command Type UART Syntax Command

!css:<id>,<revision>,<args>

Response OK 10.14.4. Configuration Get Version Allows the user to specify a version for the configuration to get. Revision 255 is current. This command follows the same syntax as !cp other than the <revision> parameter. See the Device Configuration section for details on a specific configuration. Command Type UART Syntax Command

!csp:<id>,<revision>

Response OK Copyright 2022 Sensata Technologies, Inc. Page 225 | 271 XT2500 Product Manual 10.14.5. Configuration RevisionSet Sets the configuration ID to the specified revision. Command Type UART Syntax Command

!crs:<config_id>,<revision>

Response OK 10.14.6. Configuration Revision Return Returns the revision number of the configuration ID entered. Command Type UART Syntax Command

!crg:<config_id>

Response

<revision>

10.14.7. Configuration Revision Return All Returns all the revisions of configurations. If the configuration is current (255), it will not be returned. Command Type UART Syntax Command

!crg:*

Response

<config_id>:<revision>

10.14.8. Configuration Revision Write Current Sets all configuration revisions that are specified and applies any specific changes the user has made. NOTE: If pinning to the current firmware, issue !crx and !crw in that order. Command Type UART Syntax Command

!crw Response OK Copyright 2022 Sensata Technologies, Inc. Page 226 | 271 XT2500 Product Manual 10.14.9. Revision Reset Resets configurations to unspecified, meaning they will use the latest on the device Command Type UART Syntax Command

!crx Response OK 10.14.10. Save Configuration Stash Overwrites the current configuration, saving the stash. A software reset is subsequently performed. If a configuration change is made, this command must be issued for the changes to take affect. NOTE: An error will be returned if the current configuration matches the new desired configuration. There will be no update to current configurations and no software reset. Command Type UART Syntax Command

!csu Response OK 10.14.11. Configuration Default Stores the current active configuration as the default configuration. The 32-bit ASCII Hexadecimal mask defines which configurations are saved to the default. If no mask is provided, ALL configurations will be saved to the default configuration. See Device Configuration section for further detail. Command Type UART Syntax Command

!cd : <mask>

Response OK Copyright 2022 Sensata Technologies, Inc. Page 227 | 271 XT2500 Product Manual Definitions Config Byte 0 ID 1 2 3 4 5 6 7 8 9 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 Type ASCII HEX ASCII HEX ASCII HEX ASCII HEX ASCII HEX ASCII HEX ASCII HEX ASCII HEX ASCII HEX ASCII HEX ASCII HEX ASCII HEX ASCII HEX ASCII HEX ASCII HEX ASCII HEX ASCII HEX ASCII HEX ASCII HEX ASCII HEX ASCII HEX ASCII HEX ASCII HEX ASCII HEX ASCII HEX ASCII HEX ASCII HEX ASCII HEX ASCII HEX ASCIIHEX Config Byte 1 ID 33 34 35 36 37 Type ASCII HEX ASCII HEX ASCII HEX ASCII HEX ASCII HEX Name GSMAPN GSMMNO ENDPOINT NETCONFIG PWRUPMSG GPSCONFIG CUSTOMPID SMS EVENTMASK PERIODICRESET IGNITIONMASK BATTERY ALTERNATORCONFIG MQTTCONFIG DNSCONFIG IGNONPERIOD IGNOFFPERIOD LUMBERJACK PROPRIETARYPID EVENTREPORT COMPRESSIONTYPE VBUS ACCTHSVBUS ACCTHSGPS POWERSTAGEPMU POWERSTAGETRX SNAPSHOTCFG XCLCONFIG TIME XBPS Name BUZZERSONG DIRECTIONCHANGE SPEEDTHSVBUS SPEEDTHSGPS GEOFENCECONFIG 32-bit Mask 0x00000002 0x00000004 0x00000008 0x00000010 0x00000020 0x00000040 0x00000080 0x00000100 0x00000200 0x00000800 0x00001000 0x00002000 0x00004000 0x00008000 0x00010000 0x00020000 0x00040000 0x00080000 0x00100000 0x00200000 0x00400000 0x00800000 0x01000000 0x02000000 0x04000000 0x08000000 0x10000000 0x20000000 0x40000000 0x80000000 32-bit Mask 0x00000002 0x00000004 0x00000008 0x00000010 0x00000020 Copyright 2022 Sensata Technologies, Inc. Page 228 | 271 XT2500 Product Manual Config Byte 1 ID 38 39 43 45 46 47 48 49 50 52 53 54 55 56 57 58 59 62 63 Type ASCII HEX ASCII HEX ASCII HEX ASCII HEX ASCII HEX ASCII HEX ASCII HEX ASCII HEX ASCII HEX ASCIIHEX ASCIIHEX ASCIIHEX ASCII HEX ASCII HEX ASCII HEX ASCII HEX ASCIIHEX ASCIIHEX ASCIIHEX Config Byte 2 ID 68 70 74 77 81 86 87 89 90 Type ASCII HEX ASCII HEX ASCII HEX ASCII HEX ASCIIHEX ASCII HEX ASCIIHEX ASCII HEX ASCII HEX Name ODOMETERTHSVBUS ODOMETERTHSGPS HEARTBEAT MOVEMENT XGS FTPCONFIG SYSTEMINFO PARKCONFIG IDLECONFIG ADC ADCADVANCED ADCFILTER COAP MONOMO SNAPSHOTTRX MAPSTER PSTRXEVENT GPSASSIST ACCELONAXIS Name LED ACCELEROMETER FAULTERNATOR BLUETOOTH QUEUELIMIT PIDS ELD UPDATEINHIBIT DIAGNOSTICS 32-bit Mask 0x00000040 0x00000080 0x00000800 0x00002000 0x00004000 0x00008000 0x00010000 0x00020000 0x00040000 0x00100000 0x00200000 0x00400000 0x00800000 0x01000000 0x02000000 0x04000000 0x08000000 0x40000000 0x80000000 32-bit Mask 0x00000010 0x00000040 0x00000400 0x00002000 0x00020000 0x00400000 0x00800000 0x02000000 0x04000000 Copyright 2022 Sensata Technologies, Inc. Page 229 | 271 XT2500 Product Manual 10.14.12. Configuration Info Returns information about the configuration signature. Command Type UART Syntax Command

!ci Network Response signature: <config signature stored in ram>, mask: <config mask>

sigtest: <config signature calculated>

OK 10.14.13. Configuration Reset Resets device to default configuration settings. See Device Configuration command for further detail. Only supported on the UART interface located on the connector. CAUTION: This command resets all configuration settings, including network settings. NOTE: Defaulted configurations will NOTget applied until after the !csu command is issued. Command Type UART Syntax Command

!cx Response OK Copyright 2022 Sensata Technologies, Inc. Page 230 | 271 XT2500 Product Manual 10.15. VBUS 10.15.1. VBUS Supported Protocols CAN ISO1765 ISO 15765-4 CAN (11 bit ID,500 Kbaud) ISO 15765-4 CAN (29 bit ID,500 Kbaud) ISO 15765-4 CAN (11 bit ID,250 Kbaud) ISO 15765-4 CAN (29 bit ID,250 Kbaud) ISO ISO 14230-4 KWP (5 baud init,10.4 Kbaud) ISO 14230-4 KWP (fast init,10.4 Kbaud) ISO 9141-2 J1850 SAE J1850 VPW SAE J1850 PWM 10.15.2. VBUS Debug Enable Requests VBUS subsystem to route debug messaging to the interface which the command was sent to. NOTE: Only supported on the UART interface located on the connector. Command Type UART Syntax Command

!vde Response OK 10.15.3. VBUS Debug Disable Requests VBUS subsystem to disable debug messaging to the interface which the command was sent to. NOTE: Only supported on the UART interface located on the connector. Command Type UART Syntax Command

!vdd Response OK Copyright 2022 Sensata Technologies, Inc. Page 231 | 271 XT2500 Product Manual 10.15.4. VBUS Set Voltage Requests VBUS subsystem to overwrite VBUS interpreted alternator voltage. NOTE: Only supported on the UART interface located on the connector. Command Type UART Syntax Command

!vsv:<voltage>

Response OK 10.15.5. VBUS Set Motion Requests VBUS subsystem to set motion state. NOTE: Only supported on the UART interface located on the connector. Command Type UART Syntax Command

!vsm:<state>

Response OK 10.15.6. VBUS Production Test Runs the VBUS production test, that tests all the RX/TX pins on the device. l Device must be connected to a HARP device that is configured for VBUS testing. l The VBUS debug enable command (!vde) must be sent before this command or the results will not display. l The test output is displayed via the VBUS debug prints. Command Type UART Syntax Command

!vt Response OK Copyright 2022 Sensata Technologies, Inc. Page 232 | 271 XT2500 Product Manual 10.15.7. Clear "Fallback to OBDII"status Only applies if the VBUS MODE is configured as Proprietary PID w/ OBDII Fallback. Sending this command will clear the fallback state, allowing the device to attempt PPID communication again. After clearing, the possibility to fallback will remain unless the VBUS MODE is changed. A reset must be sent after clearing the fallback state, in order for the change to take effect. Command Type UART Syntax Command

!vsr Response OK 10.16. XOR 10.16.1. Xirgo Core Data Processing XOR collects and processes data from all subsystems, (VBUS, GPS, etc.). XOR is the source of all event parameters. 10.16.2. XOR Debug Enable Requests XOR subsystem to route debug messaging to the interface which the command was sent to. Command Type UART Syntax Command

!ade Response OK 10.16.3. XOR Debug Disable Requests XOR subsystem to disable debug messaging to the interface which the command was sent to. Command Type UART Syntax Command

!add Response OK 10.16.4. Set System Parameter Sets the value for a system parameter. Copyright 2022 Sensata Technologies, Inc. Page 233 | 271 XT2500 Product Manual Command Type UART Syntax Command

!apu:<param>,<ASCII-HEX Bytes>[,<OFFSET>]

Response OK 10.16.5. XOR Generate Event Generates the event provided and stores the event to either a buffer or EFS. Events logged to EFS will be sent out along with other events. Events stored in the buffer will be printed as a response to the !ate command. Command Type UART Syntax Command

!ate:<event_id>,<dest>

Response OK Parameter

<event_id>

<dest>

Type UINT8 UINT8 Description See events section. Destination. Value 1 2 Description EFS Buffer Returns on the channel from which the command was sent, for example CoAP, SMS, etc. 10.16.6. XOR Event Enable Mask Setting this mask controls whether an event is enabled or disabled. does not persist over a power cycle. Command Type UART Syntax Command

!aem:<mask[0]><mask[1]><mask[2]>, Network Response OK Peripheral: <peripheral>

Address: <addr>

Size: <bytes>

Hardware ID: <HWID>

Copyright 2022 Sensata Technologies, Inc. Page 234 | 271 XT2500 Product Manual Mask[0] bit 02 04 08 10 20 40 80 Mask[1] bit 02 08 10 20 40 Mask[2] bit 04 10 20 Mask[3] bit 01 02 04 08 10 80 Mask[4] bit 01 02 04 08 10 20 40 80 Type UINT8 UINT8 UINT8 UINT8 UINT8 UINT8 UINT8 Type UINT8 UINT8 UINT8 UINT8 UINT8 Type UINT8 UINT8 UINT8 Type UINT8 UINT8 UINT8 UINT8 UINT8 UINT8 Type UINT8 UINT8 UINT8 UINT8 UINT8 UINT8 UINT8 UINT8 Description Ignition On Ignition_Off Ignition_On_Periodic Ignition_Off_Periodic Power Up Power Up Gps Power Up Gsm Description Acceleration Acceleration (GPS) Stage 0 Periodic Stage 1 Periodic Stage 2 Periodic Description Direction Change Speed (GPS) Geofence Crossing Description Odometer (GPS) Input 1 Set Input1 Clear Input 2 Set Input 2 Clear Heartbeat Description Output Manual Override Diagnostics Movement Start Movement Stop System Report_0 System Info Park Idle Start Copyright 2022 Sensata Technologies, Inc. Page 235 | 271 XT2500 Product Manual Mask[5] bit 01 02 04 08 10 20 40 80 Mask[6] bit 01 02 04 08 10 Type UINT8 UINT8 UINT8 UINT8 UINT8 UINT8 UINT8 UINT8 Type UINT8 UINT8 UINT8 UINT8 UINT8 Description Idle Stop Idle Periodic Power Up Best Time ADC Threshold ADC Periodic Diagnostics_1 Diagnostics_2 Diagnostics_3 Description Motion No-motion Motion Periodic No-motion Periodic Power Stage Transition Mask[7] bit 04 Type UINT8 Description BLE Beacon Report Copyright 2022 Sensata Technologies, Inc. Page 236 | 271 XT2500 Product Manual 11. EOL DEVICE PROVISIONING 11.1. CERTIFICATE ROTATION If the root certificate used for signing certificates is older than 30 days or has been used to sign 5,000 or more device certificates, a new root certificate is created. 11.2. ROOT CERTIFICATE GENERATION 1. Generate root keypair. 2. Use keypair public key to create X.509 verification certificate. a. 30-day expiration. b. Random serial number. c. Subject: As specified by customer. d. Write verification certificate to filesystem. e. Generate verification certificate keypair. f. Use verification certificate to create PKCS10 certificate signing request (CSR). Subject = CN={AWS IOT REGISTRATION CODE}. g. Sign with verification certificate private key using SHA256withRSAencryption. h. Write certificate signing request (CSR) to filesystem. i. Generate signed X.509 verification certificate using root CA. 30 days valid period from time of creation. Root CA private key used to sign with SHA256withRSA. j. Write certificate to filesystem. 11.3. DEVICE CERTIFICATE GENERATION 1. Generate device keypair. 2. Use verification certificate to create PKCS10 certificate signing request (CSR). Subject OU=Xirgo Technologies,O=Xirgotech.com Inc.,L=Camarillo,ST=Calafornia,C=US. 3. Sign with device certificate private key using SHA256withRSAencryption. 4. Write certificate signing request (CSR) to filesystem. 5. Generate signed X.509 device certificate using root CA. Valid for 10 years from time of creation. Root CA private key used to sign with SHA256withRSA. 6. Write signed certificate to filesystem. 7. Load device signed certificate and private key into keystore. Copyright 2022 Sensata Technologies, Inc. Page 237 | 271 XT2500 Product Manual 8. Register device with Amazon IoT. This sends the root CA, verification certificate and device certificate to Amazons API. 9. Build firmware image with embedded device private key, device public certificate and necessary server certificates. 10. Delete all device certificates from filesystem. 11.4. CERTIFICATE REGISTRATION Steps to register the certificates on the device 11.4.1. Requirements 1. Java 10 must be installed on the computer running the script. 2. The input file, input.csv must have correct information. 3. The configuration file, config.properties must be in the same directory as the jar being run. 4. Verify the following items in config.properties match the details provided for the customer. a. apiKey b. outputFolder c. caCertFolder d. modelNumber e. serverUrl f. serverCert g. clientId h. mqttEndpoint 11.4.2. Procedure 1. Create/edit the file: input.csv. 2. Enter a list of device serial numbers, and the associated IMEIs into input.csv. a. Each line of the file should be formatted as follows:

<Device Serial Number>,<Device IMEI>

3. In a terminal, Run the following command:

java -jar <JAR file provided by Xirgo> -i <path to input.csv>

4. For each serial number/IMEI pair provided, three .BIN files will be outputted into the outputFolder as defined in the config.properties file:

Copyright 2022 Sensata Technologies, Inc. Page 238 | 271 XT2500 Product Manual a. <DeviceSerialNumber>DeviceCert.bin b. <DeviceSerialNumber>PrivateKey.bin c. ServerCert.bin (only one of these is created, regardless of how many s/ns are provided) 5. md5.log will also be generated in the same output folder. This file contains certificate md5 checksums. Each line of this file is formatted as follows:

<serial #>,<private key md5>,<device cert md5>,<server cert md5>

Copyright 2022 Sensata Technologies, Inc. Page 239 | 271 XT2500 Product Manual 12. AUTHENTICATION TO THE DEVICE CONSOLE 12.1. MANUAL AUTHENTICATION To manually authenticate the device to the console:

12.1.1. Enabling Authentication 1. Set the encryption key.

!mcs:10,<key in ASCII hex>

2. Enable console authentication.

!mcs:18,1,1 3. Reset the device. 12.1.2. Logging into the Console NOTE: XT2500 utilizes 128-bit AES ECB encryption, which is 32 hex characters. 1. Send login commandLog into the device via console. The device will prompt ASCII hex string challenge login. 2. Decrypt the AES challenge against the key set in Step 2. Aes_login.exe <KEY> <CHALLENGE>

3. Copy the device response from step 2 and send the response to the device via console. 4. Device sends accepted upon successful login. 12.1.3. Disabling Authentication Send the following command to disable console authentication:

!mcs:18,1,0 Copyright 2022 Sensata Technologies, Inc. Page 240 | 271 XT2500 Product Manual 13. AWS IOT JOBS AWS IoT jobs can be used to define a set of remote operations that are sent to and executed on one or more devices connected to AWS IoT. 13.1. WHAT IS A JOB A job is a remote operation that is sent to and executed on one or more devices connected to AWS IoT. For example, a job can be defined that instructs a set of devices to download and install a firmware update, reboot or perform configuration updates, maintenance operations, or remote troubleshooting. 13.2. WHAT IS A JOB ID Job IDs are unique identifiers assigned to a job during creation. The job length must be at least 1 but no more than 64 alphanumeric characters. 13.3. JOB DOCUMENT To create a job, a job document must first be created that is a description of the remote operations to be performed by the devices. Job documents are UTF-8 encoded JSON documents and should contain any information devices need to perform a job. A job document will most likely contain one or more URLs where the device can download an update or some other data. The job document itself can be stored in an Amazon S3 bucket or be included inline with the command that creates the job. 13.4. JOB TARGET When creating a job, specify a list of targets that are the devices performing the operations. The targets can be things, thing groups, or both. AWS IoT jobs send a message to each target to inform it that a job is available. 13.5. JOB EXECUTION A job execution is an instance of a job on a target device. The target starts an execution of a job by downloading the job document. It then performs the operations the document specifies and reports its progress to AWS IoT. An execution number is a unique identifier of a specific job execution on a specific target. The Jobs service provides commands to track the progress of a job execution on a specific target and the progress of a job generally across all the targets of the job. 13.6. SNAPSHOT JOB By default, a job is sent to all targets specified when a job is created. After those targets complete the job (or report that they are unable to do so), the job is complete. This is a snapshot job. Copyright 2022 Sensata Technologies, Inc. Page 241 | 271 XT2500 Product Manual 13.7. CONTINUOUS JOB A continuous job is one that continues to run and is executed when a change is detected in a target. For example, a job will run on a device when the thing representing the device is added to a target group, even after the job was completed by all things originally in the group. A continuous job can be used to onboard or upgrade devices as they are added to a group. A job can be made continuous by setting an optional parameter when the job is created. 13.8. JOB STATUS The AWS Jobs interface reports the following job status:

Status Queued In-Progress Success Failed Description AWS is waiting for the device to request this job. The device requested the job and is processing it. The device successfully executed the job and sent the command response. The job was either invalid or the device was unable to execute the command. NOTE: If an Over-The-Air update is interrupted with a power cycle while In-Progress, the job status will report as Failed. 13.9. ROLLOUTS When creating a job, the speed targets are notified of a pending job execution can be specified. This allows creation of a staged rollout to better manage updates, reboots, and other operations. The following field can be added to the CreateJob request to specify the maximum number of targets that will be informed of the job per minute:

"jobExecutionRolloutConfig": {

"maximumPerMinute": "integer"

13.10. PRE-SIGNED URIS To allow a device secure, time-limited access to data beyond that included in the job document itself, use pre-

signed Amazon S3 URIs. Place your data in an Amazon S3 bucket and add a placeholder link to the data in the job document. When the Jobs service receives a request for the job document, it parses the job document looking for placeholder links and it replaces them with pre-signed Amazon S3 URIs. General format to pre-sign where bucket is your bucket name and key is the object in the bucket to which you are linking.

$aws s3 presign <S3 Bucket/Key> --expires-in <Seconds>

Copyright 2022 Sensata Technologies, Inc. Page 242 | 271 XT2500 Product Manual Sample command to presign a URI

$aws s3 presign ltem/AAzW.1168BA3.1.e6089f9.x00 --expires-in 3600 General OTA job format

$aws iot create-job --job-id"<ID>"-- targets"<target>"--

document"<document>"

Sample OTA job

$aws iot create-job --job-id"111"--targets arn:aws:iot:us-west-

2:011929418200:thing/XT2469-182000531document

"{"!uf":[1,"https://s3.amazonaws.com/ltem/AAz1.1168BA2.6.bd88028.x00"]}"

13.11. USING THE AWS-IOT CONSOLE APPLICATION TO CREATE JOBS This command creates a job that contains commands "!cp:3", "!nx", and "!cp:15". Jobs containing a job key with the first character "#" can support multiple commands in an array. In the example below, configuration 3 is set, a reset is initiated, and then the sequence is continued and configuration 15 is set. NOTE: Jobs that require a reset may occur in any order.

$aws iot create-job --job-id "multi15" --targets "arn:aws:iot:

us-west-2:190567248221:thing/XT2469-8675309" --document='{"#jobs":

["!cp:3,0","!nx","!cp:15"]}'

"jobArn": "arn:aws:iot:us-west-2:190567248221:job/multi15",

"jobId": "multi15"

This command creates a job that contains the command :cp2 which prints config element #2 (GSMENDHOST).

$aws iot create-job --job-id "2" --targets "arn:aws:iot:us-west-

2:190567248221:thing/XT2473-1" --document="{"!cp":[2,""]}"

"jobArn": "arn:aws:iot:us-west-2:190567248221:job/2",

"jobId": "2"

Copyright 2022 Sensata Technologies, Inc. Page 243 | 271 XT2500 Product Manual

This command creates a job that contains the command :uf1 which initiates a firmware update using the absolute URI presented as a parameter option.

$aws iot create-job --job-id "4" --targets "arn:aws:iot:us-west-

2:190567248221:thing/XT2473-1" --document='{"!uf":[1,"https://s3-us-west-

2.amazonaws.com:443/bucket/key"]}'

"jobArn": "arn:aws:iot:us-west-2:190567248221:job/4",

"jobId": "4"

CAUTION: Job IDs must be a non-zero value between 1 and 64 alphanumeric characters. Strings that evaluate to 0 will cause the device to report Rejected. Job ID of 0 is not supported. 13.12. WHEN DOES THE DEVICE PROCESS JOBS?

The device will subscribe to the jobs topic after any trip data has been published. After connecting the device will retrieve any queued jobs using the start-next topic. 13.13. JOBS AND THING SHADOW INTERACTION Configuration settings changed by Jobs will only persist if the configuration does not exist in the Thing Shadow. The Thing Shadow will reset configurations to their Desired state upon the next Shadow update. CAUTION: Do not use Job write interface to set device configurations that are in Desired section of the Thing Shadow. 13.14. JOB/SHADOW CONFIGURATION SYNTAX To write and read configurations using job/shadow syntax, use the following general shemas. Job Read Schema

{!cp: [##, ] }

Job Write Schema

{!cs: [##, PARAMETER_1,PARAMETER_2,PARAMETER_3, .. ]}

Shadow Schema

{##: PARAMETER_1, PARAMETER_2, PARAMETER_3, .. }

Copyright 2022 Sensata Technologies, Inc. Page 244 | 271 XT2500 Product Manual 14. THING SHADOW 14.1. SHADOW GUIDELINES All hexadecimal strings should be set as caps. Hexadecimal strings written in lowercase will conflict with the Shadow and resolving those conflicts will increase data use. If too many configurations are set at once, especially array based configurations, the shadow update may fail. When setting a configuration in the desired section with type ASCIIHEX, the number of digits must match the number in the reported section of the shadow (including leading zero's). The example below illustrates a case where the delta will never be resolved if the previously mentioned guideline is not followed. 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30

"desired": {

"config": {

"8": ",0,0,D",

"23": "000000FF,FF,0"

"reported": {

"device": {

"CH": "2023142434",

"FWM": "AHz1.1188DB9.1.6c567b8*",

"NKR": "_,0,",

"XVEC": "0,0,0",

"PIDS": "0,0,0,0"

"error": {

"config": "8"

"config": {

"8": ",0,0,0D",

"23": "000000FF,00FF,0"

"delta": {

"config": {

"8": ",0,0,D",

"23": "000000FF,FF,0"

Copyright 2022 Sensata Technologies, Inc. Page 245 | 271 XT2500 Product Manual 14.2. DEFAULT CONFIGURATION

"desired": {

"config": {

"4": "1,0",

"5": 255,

"6": "2018,60,100",

"9": {

"1": "7D58357F01,1",

"2": "7D58457F01,1",

"3": "3D5871028C,0",

"4": "3F58717F0D1703,0",

"5": "3F58717F0D1703,1",

"6": "3F58717F0D1703,1",

"7": "3F58717F0D1703,1",

"8": "3D50F1000E,1",

"9": "3F58717F0D1703,0",

"10": "3F58717F0D1703,0",

"11": "3F58717F0D1703,0",

"12": "3F58717F0D1703,0",

"13": "BD4801A0,1"

"10": "1,86400",

"11": "60,1440",

"12": "0,1,0",

"13": "12000,30,12500,30",

"14": "125,3,3,1",

"17": 30,

"18": 3600, Copyright 2022 Sensata Technologies, Inc. Page 246 | 271 XT2500 Product Manual

"19": "600,1,1",

"20": "600,1,1",

"21": "600,8000",

"22": 1,

"23": "255,65535",

"24": "0,0",

"25": "0,0",

"26": {

"1": "600,131328",

"2": "0,0"

"27": "1,2",

"28": {

"1": "1536,1",

"2": "0,0",

"3": "0,0",

"4": "0,0"

"29": "0,0,0,0,0,0,0,0",

"30": "1800",

"31": {

"1": "300,393472",

"2": "300,0"

"32": "1,16",

"33": {

"1": "4,544",

"2": "65535,544", Copyright 2022 Sensata Technologies, Inc. Page 247 | 271 XT2500 Product Manual

"3": "1024,32",

"4": "0,0"

"34": "0,0,13200,0,0,0,0,0",

"35": "3600"

14.3. WHEN DOES THE DEVICE SYNCHRONIZE WITH THE SHADOW?

The device will subscribe to the shadow update topic when the connection to AWS IoT is established. After connecting the device will trigger an update by publishing. There are three cases in which the device will synchronize with the Shadow:

Initiated By Device Synchronization Type Full Synchronization Case The first time the device connects to AWS from power-up. Device Full Synchronization Any time a configuration is changed by a system other than the Shadow, such as a console command or Job. AWS Partial Synchronization Any time a "delta" is calculated between the "desired" and

"reported" sections AWS will publish a message to the shadow/update topic which will cause the device to sync with the shadow. During a full synchronization, the device reports all configurations to the reported section. During a partial synchronization, the device reports only configurations within the delta section to the reported section. 14.4. SHADOW DELETE The Shadow Delete command (!nsd) is a job-only command, and will not work via the console. This command publishes a message to shadow topic which deletes the Shadow desired section. Using the Shadow Delete command will also remove any deltas. The reported section is not affected. Copyright 2022 Sensata Technologies, Inc. Page 248 | 271 XT2500 Product Manual 14.4.1. Syntax Type JOB Syntax

{!nsd: [, ] }

14.5. DEVICE INFORMATION At the end of a shadow there will be a "device" section that details the following parameters: CH, FWM, NKR, XVEC, and PIDS. At the end of a shadow there will be a "device" section that details the following parameters: CH, FWM, NKR, and XVEC. Parameter CH FWM NKR XVEC PIDS Description Config hash is an identifier for what configs are currently in use. Displays the firmware string. Displays the name, revision, version, and VIN. Displays the status, number of PIDS requested, and number of PIDS detected. Displays the status, hash, checkin hash, and status hash. Copyright 2022 Sensata Technologies, Inc. Page 249 | 271 XT2500 Product Manual 15. CERTIFICATE LOADING PROCEDURE When neither the module nor the devices trust store have certificates currently loaded:

1. Put the device in bypass mode 1.

!mcs:3,21,1 2. Set device certificate mask.

!mcs:19,8007 3. Issue a software reset to the device.

!nx 4. Convert certificates from DER to PEM format with proper headers if not already in PEM format:

a. Use OpenSSL commands to convert the certificate format using openssl x509:

openssl x509 -in <Device Certificate> -inform DER -out certificate.der.crt-outformPEM openssl x509 -in <Root AWS> -inform DER -out root_aws.der-outformPEM opensslrsa-in<PEM key>-informDER -out private.der.key-outformPEM Value

<Device Certificate>

<Root AWS>

Description Device certificate Certificate the device uses to validate the server. Root AWS certificate can be:

l Root certificate authority l Server public certificate l Intermediate certificate

<PEM Key>

Private key a. The header syntax is:

0x58 0x43 <type> 0x00 <size>

Value 0x58 0x43 Type N/A N/A Description Required Required Copyright 2022 Sensata Technologies, Inc. Page 250 | 271 XT2500 Product Manual Value

<type>

Type DECIMAL INT Description Value 0 1 2 3 4 5 6 7 8 9 10 11 Description Private Key Device Certificate Server Certificate 0 Server Certificate 1 Server Certificate 2 Server Certificate 3 Server Certificate 4 Server Certificate 5 Server Certificate 6 Server Certificate 7 Server Certificate 8 Server Certificate 9 0x00

<size>

Reserved 4-byte file size l Little endian format. Least significant bit is ordered first. 5. Send the console the following command:

!uf:30,xmodem 6. Send the <DeviceSerialNumber>TRUSTSTORE.BIN via XMODEM. 7. Send the following command to load all keys and certificates onto the cellular module and print md5 checksums:

!gcc Example Print:

DevicePrivateKey:0 Loaded [A3A4A46AC04C2A5EDDE649D4520C5646]

DeviceCertificate:1 Loaded [4A9ECE79520A90698007F8C1D9E25E50]

ServerCertificate:2 Loaded [CB17E431673EE209FE455793F30AFA1C]

OK 8. Remove device from bypass mode.

!mcs:3,21,0 9. Confirm load by printing the certificate mask. A response of 8007 confirms auto load is enabled, and the device key, device certificate, and server certificate 0 are loaded.

!mcp Copyright 2022 Sensata Technologies, Inc. Page 251 | 271 XT2500 Product Manual 16. XIRGO ELD OVER BLE API SPECIFICATION 16.1. INTRODUCTION Electronic Logging Device (ELD) is a United States federally mandated regulation maintained by the Federal Motor Carrier Safety Administration (FMCSA), a division of the Department of Transportation. From the FMCSAs website:

The electronic logging device (ELD) rule congressionally mandated as a part of MAP-21 is intended to help create a safer work environment for drivers, and make it easier and faster to accurately track, manage, and share records of duty status (RODS) data. An ELD synchronizes with a vehicle engine to automatically record driving time, for easier, more accurate hours of service

(HOS) recording. This device may function as an ELD using Bluetooth Low Energy (BLE) to deliver vehicle and driving data to another internet connected device as part of an ELD rule compliant system. 16.2. UNIDENTIFIED DRIVER RECORDS In addition to live ELD data, this device can store Unidentified Driver Records (UDRs). These records will be stored when a trip occurs, and no Driver ID has been set on the device. The period at which records are generated is set in the Xirgo device configuration. The records will include nearly the same information as a live record but will be stored in non-volatile device flash for later consumption. These records may be read by a connected central device at any time. The connected central device must ACK the reading of a record after it has been consumed to indicate to the Xirgo device that the record can now be discarded. Failure to ACK will result in the Xirgo device running out of UDR storage space. The Xirgo device can store up to a certain number of UDRs at a time (currently TBD). Copyright 2022 Sensata Technologies, Inc. Page 252 | 271 XT2500 Product Manual 16.3. CONFIGURATIONS The following configurations are available for the ELD over the BLEsystem:

16.3.1. BLE Enable/Disable Bit 0 of the FLAGS field of the BLUETOOTH configuration (77). 16.3.2. ELDEnable/Disable Bit 0 of the FLAGS field of the ELD configuration (87). 16.3.3. UDREnable/Disable Bit 1 of the FLAGS field of the ELD configuration (87). 16.3.4. DID Via BLE Enable/Disable Bit 2 of the FLAGS field of the ELD configuration (87). When DID via BLE is enabled, the connected Central device is expected to manage the setting of the Driver ID via the ELD DRIVER ID characteristic upon connection. Failure to do so will result in the device entering an unidentified driver state. Upon disconnection to the Central device, the Xirgo device will reset the DID to 0, putting it into an unidentified driver state once more. 16.3.5. UDR Event Period The UDR_INTERVAL_S period of the ELD configuration (87). 16.4. ADVERTISEMENT DATA The advertisement data for all devices will fit the following format:

Complete local name (0x9): "ELD <device serial number>"

16.5. CONNECTING The device has a GAP role of Peripheral and can be connected to a Central device. The device uses Just Works security as specified by the Bluetooth Core Specification Version 4.2. 16.6. MTU SIZE After connecting, Xirgo recommends that the initiating device negotiates an MTU size exchange to 164 bytes for optimal message packets sizing. Using a larger MTU size may create resource constraints on the device and using a smaller MTU size will result in chunked messages, which creates more overhead and takes more time to transmit. Copyright 2022 Sensata Technologies, Inc. Page 253 | 271 XT2500 Product Manual 16.7. SERVICES The device has only one primary service with the following UUID:

9e675d27-6168-435f-aeab-8b3b55b88352 16.8. CHARACTERISTICS 16.8.1. ELD UDR Description: The UDR read characteristic. Performing a read will read one record from non-volatile memory. UUID: 705dfc85-d511-4dc6-b6eb-834a66338303 R/W: READ only Format: msgpack byte array Size: size may vary 16.8.2. ELDUDRACK Description: The UDR ACK characteristic. This characteristic must be written to acknowledge consumption of a UDR. The data written does not matter. UUID: 4c10425e-95c0-490c-870e-d6a1688f0982 R/W: READ/WRITE Format: UINT8 Size: 1 byte 16.8.3. ELD LIVEREC Description: The live record read characteristic. Reading this will return a live record, generated from data that is stale by no more than 1 second. UUID: edf3390e-7595-44ec-b0ec-78c0994ec480 R/W: READ only Format: msgpack byte array Size: size may vary Copyright 2022 Sensata Technologies, Inc. Page 254 | 271 XT2500 Product Manual 16.8.4. ELDDRIVERID Description: A readable/writable Driver ID characteristic. If DID via BLE is enabled in the device configuration, then the Central device is being used to set the Driver ID. It must set it immediately upon connection to avoid the device thinking it is in an unidentified driver state, which will enable the creation of UDRs if a trip starts. Upon disconnection to the Central device, the Xirgo device will reset the DID to 0, putting it into an unidentified driver state once more. UUID: 66f1f9bd-a832-434e-a5ae-4b4d306dfe5e R/W: READ/WRITE Format: UINT32 Size: 4 bytes 16.9. LIVE RECORD FORMAT The record is a byte-array that encodes a msgpack object. The format of the msgpack object is identical to the formatting of events published to the event data topic at the configured endpoint. The live record contains the following system parameters:

Parameter LT LN SPT SV HP MI GS VN RM BN OMI BT MPG EH DID JOMI JEH ID 004 005 007 010 011 014 016 025 031 034 045 050 065 109 118 120 121 16.10. UNIDENTIFIED DRIVER RECORD FORMAT The record is a byte-array that encodes a msgpack object. The msgpack formatting of the record is identical to the formatting of events published to the event data topic at the configured endpoint. Copyright 2022 Sensata Technologies, Inc. Page 255 | 271 XT2500 Product Manual The UDR contains the same parameters as the live record, with the addition of two more parameters:

Parameter UT USEQ ID 049 119 Copyright 2022 Sensata Technologies, Inc. Page 256 | 271 XT2500 Product Manual 17. UART COMMAND LIST Subsystem Backend Boot Count Cellular Event Filesystem GPIO GPS LED Manager Sentinel Command Description UART Command Debug Enable Debug Disable

!sde

!sdd Query Set

!nbc

!nbc:<new_count>

Debug Enable Debug Disable Print Information Load Certificates GSM uFOTA (job only) Statistics Status Debug Enable Debug Disable Print Information Test Reset

!gde

!gdd

!gpd

!gcc<index>

!gfc

!gpc

!gps

!ede

!edd

!epi

!et

!ex:<file_system_id>

Print Configuration Clear Output Pin State Set Output Pin State

!ip:<func>

!ic:<func>

!is:<func>

Debug Enable Debug Disable Print Information List LEDs Override Sequence LED Configuration

!yde

!ydd

!ypi

!lil

!los:<identifier>,<mask>,<duration>

!los:<ident>,<mode>,<iterations>,<mask>,<slice>

Enable Security Set Description Parameter Watchdog Disable Print

!mss

!mcs:<item>[,<params>]

!mwd

!mcp Debug Enable

!sde Copyright 2022 Sensata Technologies, Inc. Page 257 | 271 XT2500 Product Manual Subsystem System on Chip NanoKernel Power Management Update User Configuration Command Description Debug Disable Watchdog Enable UART Command

!sdd

!sw Debug Enable Debug Disable Print Info Priority Set Shadow Sync Check-in

!sde:<mask>

!sdd

!spi

!sps:<priority,<persist>

!sss

@callhome Check-in set Clear Faule State

!qcs

!qsr Debug Enable Debug Disable Ship Mode Enable

!bde

!bdd

!but:<id>

Update Firmware

!uf:<type>

Configuration Set Save Configuration Stash Configuration Set Version Configuration Print Version Configuration Print Configuration Default Configuration Reset Debug Enable Debug Disable Set Voltage Set Motion Production Test Clear "Fallback to OBDII"Status Print Information Debug Enable Debug Disable

!cs: <id>,<args>

!csu

!css:<id>,<revision>,<args>

!csp:<id>,<revision>

!cp : <id>

!cd : <mask>

!cx

!vde

!vdd

!vsv:<voltage>

!vsm:<state>

!vt

!vsr

!fpi

!ade

!add VBUS XFS XOR Copyright 2022 Sensata Technologies, Inc. Page 258 | 271 XT2500 Product Manual Subsystem Command Description Set Parameter Value Generate Event UART Command

!apu:<param>,<ASCII-HEX Bytes>[,<OFFSET>]

!ate:<event_id>,<dest>

Copyright 2022 Sensata Technologies, Inc. Page 259 | 271 XT2500 Product Manual 18. CONFIGURATION REVISION EXAMPLE 18.1. WHAT IS A CONFIGUATION REVISION As configuration functionality expands over time, there will be minor changes to the way a certain configuration works. If the change results in the user needing to interact with the configuration in a different way, a new revision will be created. This change will allow users to use both the original configuration and the new configuration revision. 18.2. HOW TO USE THE NEWEST CONFIGURATION REVISION By default, the existing configuration of the previous revision will behave the same under the newer revision across firmware updates. 18.3. HOW TO CHECK WHICH CONFIGURATION REVISION IS BEING USED Issue a !crg:<config_id> to print the revision being used. A return of 255 represents the most recent revision. A return of an integer represents the revision number for the configuration. For example, if the most recent revision of a configuration is 2, a return of 255 or 2 represents the same revision. Go to the desired configuration description to see what the most recent revision is. Additionally, you can issue a !crg:* to return the revisions of all configurations. A revision will be returned if it is something other than the most recent revision or if the revision is set (see Writing Configuration Revisions). 18.4. WRITING CONFIGURATION REVISIONS To write a configuration revision, a user may do one of the following:

l Issue a !crw to set the currently defined revisions for all configurations. Issuing a !crg* will now return the set revisions for all configurations. l Issue a !crs:<config_id>,<config_revision> to set the revision of an individual configuration. After writing the configuration revision, the device configuration revisions will persist on an update to a newer firmware. This means the user will continue using a defined revision rather than using a newer revision if available. 18.5. RESETTING CONFIGURATION REVISIONS To reset the configuration revisions of all configurations to the most recent revision, issue a !crx. This will overwrite written configuration revisions for all configurations. Copyright 2022 Sensata Technologies, Inc. Page 260 | 271 XT2500 Product Manual 18.6. EXAMPLE USE CASE For this example there have been changes to a configuration that resulted in revision 1 to be made available on newer firmware. The user is unsure how this new revision may change the way they configure the device and wish to preview the revision on the device before electing to use the latest revision. This may be the case if the user has scripts which expect configuration schema to remain the same. On the older firmware with the configuration revision the user wishes to preserve, write the configuration revisions and verify they were written:

1. Issue !crs:<config_id>,<config_revision>. NOTE: !crw will also work but will write all configuration revisions to be preserved rather than just the configuration of concern. 2. Issue !crg:<config_id>. This returns the written revision. After updating to the newer firmware, the configuration will still be the revision that was written. To print what the configuration would look like with the newer revision, perform the following:

1. Issue !csp:<config_id>,<config_revision_to_be_previewed>,<index_parameters_if_ needed>

This allows the user to see how the configuration will be translated on the newer revision. To set the configuration under the newer revision while remaining on your current revision, perform the following:

1. Issue !css:<config_id>,<config_revision>,<parameters>. 2. Issue !csu. Now, issuing a !csp will print the configuration the user would set if they wrote the revision to the latest with

!crs:<config_id>,<revision_latest> or by resetting the configuration revisions with !crx. 18.7. ACCIDENTALLY UPGRADED TO NEW CONFIGURATION REVISIONS Issue a !crs:<config_id>,<old_revision>. NOTE: The configuration printed with !cp:* will always print the most recent revision, to validate you have configured your device on the revision you intended, issue a !crg:<config_index>

which will return the revision number and print your configuration with !cp:<config_index>

Copyright 2022 Sensata Technologies, Inc. Page 261 | 271 XT2500 Product Manual 19. APPENDIX B: POWER STAGE TRANSITION EXAMPLE (MULTIPLE CRITERIA) How to configure power stage transitions:

As an example, we'll configure the device to transition from power stage 0(PS0) into power stage 1(PS1); based on ignition being off, AND an amount of time in PS0. The device will then be configured to transition back into PS0 on either vibration, OR main voltage above a threshold. To configure the transition from PS0 into PS1, make the following configuration changes based on the desired revision:

19.1. CONFIGURATION REVISION 1 19.1.1. Configuration change 1

!cs:27,0,0,1,1,0,30,0,1 input 1: 27 = configuration index 27 (power stage transition configuration index) input 2: 0 = transition index (0 specifies that we are configuring the first criterion of 48 (zero indexed)) input 3: 0 = this is the src or source power stage (0 = PS0, transitioning from PS0) input 4: 1 = this is the dst or destination power stage (1 = PS1, transitioning to PS1) input 5: 1 = enabled (this criterion is enabled) input 6: 0 = criterion identifier: ignition-off input 7: 30 = required age is 30 seconds (ignition must be off for at least 30 seconds) input 8: 0 = threshold is 0 (doesn't apply to ignition-off criterion) input 9: 1 = type is AND (this, and all other AND criteria must be true in order to transition) Copyright 2022 Sensata Technologies, Inc. Page 262 | 271 XT2500 Product Manual 19.1.2. Configuration Change 2

!cs:27,2,1,0,1,6,0,0,2 input 1: 27 = configuration index 27 (power stage transition configuration index) input 2: 2 = transition index 2 specifies that we are configuring the third criterion of 48 (zero indexed) input 3: 1 = this is the src or source power stage (1 = PS01 transitioning from PS1) input 4: 0 = this is the dst or destination power stage (0 = PS0, transitioning to PS0) input 5: 1 = enabled (this criterion is enabled) input 6: 6 = criterion identifier: ignition-off input 7: 0 = required age is 0 seconds (vibration will immediately cause this criterion to be true) input 8: 0 = threshold is 0 (doesn't apply to vibration criterion) input 9: 2 = type is OR (this criterion alone may trigger the transition) 19.1.3. Configuration Change 3

!cs:27,2,1,0,1,6,0,0,2 input 1: 27 = configuration index 27 (power stage transition configuration index) input 2: 2 = transition index 2 specifies that we are configuring the third criterion of 48 (zero indexed) input 3: 1 = this is the src or source power stage (1 = PS01 transitioning from PS1) input 4: 0 = this is the dst or destination power stage (0 = PS0, transitioning to PS0) input 5: 1 = enabled (this criterion is enabled) input 6: 6 = criterion identifier: ignition-off input 7: 0 = required age is 0 seconds (vibration will immediately cause this criterion to be true) input 8: 0 = threshold is 0 (doesn't apply to vibration criterion) input 9: 2 = type is OR (this criterion alone may trigger the transition) Copyright 2022 Sensata Technologies, Inc. Page 263 | 271 XT2500 Product Manual 19.1.4. Configuration Change 4

!cs:27,3,1,0,1,2,2,12500,2 input 1: 27 = configuration index 27 (power stage transition configuration index) input 2: 3 = transition index 3 specifies that we are configuring the third criterion of 48 (zero indexed) input 3: 1 = this is the src or source power stage (1 = PS1 transitioning from PS1) input 4: 0 = this is the dst or destination power stage (0 = PS0, transitioning to PS0) input 5: 1 = enabled (this criterion is enabled) input 6: 2 = criterion identifier: adc main-voltage above input 7: 0 = required age is 0 seconds (vibration will immediately cause this criterion to be true) input 8: 12500 = threshold is 12500 (thresh is in mV for this criterion, so setting is 12.5V) input 9: 2 = type is OR (this criterion alone may trigger the transition) 19.2. CONFIGURATION REVISION 0 19.2.1. Configuration change 1

!cs:27,0,0,1,0,30,0,1 input 1: 27 = configuration index 27 (power stage transition configuration index) input 2: 0 = transition index 0 (this transition index specifies the PS0 to PS1 transition) input 3: 0 = transition criteria index 0 (specifies that we are configuring the first criterion of eight (zero indexed)) input 4: 1 = enabled (this criterion is enabled) input 5: 0 = criterion identifier: ignition-off input 6: 30 = required age is 30 seconds (ignition must be off for at least 30 seconds) input 7: 0 = threshold is 0 (doesn't apply to ignition-off criterion) input 8: 1 = type is AND (this, and all other AND criteria must be true in order to transition) Copyright 2022 Sensata Technologies, Inc. Page 264 | 271 XT2500 Product Manual 19.2.2. Configuration change 2

!cs:27,0,1,1,7,120,0,1 input 1: 27 = configuration index 27 (power stage transition configuration index) input 2: 0 = transition index 0 (this transition index specifies the PS0 to PS1 transition) input 3: 1 = transition criteria index 1 (specifies that we are configuring the second criterion of eight (zero indexed)) input 4: 1 = enabled (this criterion is enabled) input 5: 7 = criterion identifier: in-stage (true when device is fully in the current power stage (not transitioning)) input 6: 120 = required age is 120 seconds (must have been in stage PS0 for at least 120 seconds) input 7: 0 = threshold is 0 (doesn't apply to in-stage criterion) input 8: 1 = type is AND (this, and all other AND criteria must be true in order to transition) 19.2.3. Configuration change 3-8

!cs:27,0,2,0,0,0,0,0

!cs:27,0,3,0,0,0,0,0

!cs:27,0,4,0,0,0,0,0

!cs:27,0,5,0,0,0,0,0

!cs:27,0,6,0,0,0,0,0

!cs:27,0,7,0,0,0,0,0 These configuration changes are just to clear out all the other transition criteria, and ensure that only the two configured above for PS0 into PS1 are active Now the device will behave transition from PS0 into PS1 after having ignition off for 30 seconds, if it has been in PS0 for at least 120 seconds. To configure the transition from PS1 into PS0, make the following configuration changes:

Copyright 2022 Sensata Technologies, Inc. Page 265 | 271 XT2500 Product Manual 19.2.4. Configuration change 9

!cs:27,3,0,1,6,0,0,2 input 1: 27 = configuration index 27 (power stage transition configuration index) input 2: 3 = transition index 3 (this transition index specifies the PS1 to PS0 transition) input 3: 0 = transition criteria index 0 (specifies that we are configuring the first criterion of eight (zero indexed)) input 4: 1 = enabled (this criterion is enabled) input 5: 6 = criterion identifier: ignition-off input 6: 0 = required age is 0 seconds (vibration will immediately cause this criterion to be true) input 7: 0 = threshold is 0 (doesn't apply to vibration criterion) input 8: 2 = type is OR (this criterion alone may trigger the transition) 19.2.5. Configuration change 10

!cs:27,3,1,1,2,2,12500,2 input 1: 27 = configuration index 27 (power stage transition configuration index) input 2: 3 = transition index 3 (this transition index specifies the PS1 to PS0 transition) input 3: 1 = transition criteria index 1 (specifies that we are configuring the second criterion of eight (zero indexed)) input 4: 1 = enabled (this criterion is enabled) input 5: 2 = criterion identifier: adc main-voltage above input 6: 2 = required age is 2 seconds (voltage must be above the threshold for 2 seconds for criterion to be true) input 7: 12500 = threshold is 12500 (thresh is in mV for this criterion, so setting is 12.5V) input 8: 2 = type is OR (this criterion alone may trigger the transition) Copyright 2022 Sensata Technologies, Inc. Page 266 | 271 XT2500 Product Manual 19.2.6. Configuration change 11-16

!cs:27,3,2,0,0,0,0,0

!cs:27,3,3,0,0,0,0,0

!cs:27,3,4,0,0,0,0,0

!cs:27,3,5,0,0,0,0,0

!cs:27,3,6,0,0,0,0,0

!cs:27,3,7,0,0,0,0,0 These configuration changes are just to to clear out all of the other transition criteria, and ensure that only the two configured above for PS1->PS0 are active Now when the device is in PS1, it will transition back into PS0 if either vibration is sensed, or if the main voltage increases above 12.5V for more than 2 seconds Copyright 2022 Sensata Technologies, Inc. Page 267 | 271 XT2500 Product Manual 20. APPENDIX C: IGNITION MASK CONFIGURATION EXAMPLE As an example, to configure the ignition on to occur on Virtual Vibration, OR on Virtual Battery AND Virtual Movement, the user would set the configuration to 10,4,0 20.1. CONFIGURATION CHANGE 1:

!cs:12,10,4,0 input 1: 10 = This is setting the AND mask to 10 = 2 (Virtual Battery) + 8 (Virtual Movement). An ignition ON event will be sent if ALL conditions set in this mask are true. In this case, ignition will be considered ON when the alternator is above the ON threshold, and the GPS shows the device is moving. input 2: 4 = This is setting the OR mask to 4 (Virtual Vibration). An ignition ON event will be sent if ANY conditions set in this mask are true, regardless of AND mask settings. In this case, ignition will be considered ON when the accelerometer senses vibration. input 3: 0 = This is setting the AND_MODE to 0 (Any Off). The AND_MODE controls when ignition OFF is determined for conditions set in the AND mask. With the any-off setting, when ignition is currently ON, and one of the conditions becomes false (like Virtual Movement in this example), ignition will be considered OFF from the AND mask's perspective. If the all-off setting (value of 1) were used instead, ALL conditions in the and mask need to be false (Virtual Movement and Virtual Battery, in this example), in order the ignition to turn OFF from the AND mask's perspective. Note that if there are conditions specified in the OR mask, which are still true (accelerometer still senses vibration, in this example), that will over-ride any AND mask behavior, and ignition would still be considered ON, regardless of AND mask, and AND_MODE settings. Copyright 2022 Sensata Technologies, Inc. Page 268 | 271 XT2500 Product Manual 21. REGULATORY STATEMENTS 21.1. FCC This equipment with FCC-ID: GKM-XT2594 and IC-ID: 10281A-XT2594, Model: XT2500 is subject to the Federal Communications Commission (FCC) and Industry Canada (IC) rules. NOTICE:

Changes or modifications not expressly approved by the party responsible for compliance could void the user's authority to operate the equipment. This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions:

1. this device may not cause harmful interference, and 2. this device must accept any interference received, including interference that may cause undesired operation. Changes or modifications made to this equipment not expressly approved by Sensata Technologies may void the FCC authorization to operate this equipment. NOTE: This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures:

l Reorient or relocate the receiving antenna. l Increase the separation between the equipment and receiver. l Connect the equipment into an outlet on a circuit different from that to which the receiver is connected. l Consult the dealer or an experienced radio/TV technician for help. Radio frequency radiation exposure Information:

This equipment, XT2500, complies with FCC and ISED radiation exposure limits set forth for an uncontrolled environment. This equipment must be installed and operated with minimum distance of 20cm between the XT2500 and your body. Copyright 2022 Sensata Technologies, Inc. Page 269 | 271 XT2500 Product Manual 21.2. IC Antenna Statement Under Industry Canada regulations, this radio transmitter may only operate using an antenna of a type and maximum (or lesser) gain approved for the transmitter by Industry Canada. To reduce potential radio interference to other users, the antenna type and its gain should be so chosen that the equivalent isotropically radiated power (e.i.r.p.) is not more than that necessary for successful communication. Conformment la rglementation d'Industrie Canada, le prsent metteur radio peut fonctionner avec une antenne d'un type et d'un gain maximal (ou infrieur) approuv pour l'metteur par Industrie Canada. Dans le but de rduire les risques de brouillage radiolectrique l'intention des autres utilisateurs, il faut choisir le type d'antenne et son gain de sorte que la puissance isotrope rayonne quivalente (p.i.r.e.) ne dpasse pas l'intensit ncessaire l'tablissement d'une communication satisfaisante. Licence exempt This device complies with Industry Canada licence-exempt RSS standard(s). Operation is subject to the following two conditions:

1. this device may not cause interference, and 2. this device must accept any interference, including interference that may cause undesired operation of the device Le prsent appareil est conforme aux CNR d'Industrie Canada applicables aux appareils radio exempts de licence. L'exploitation est autorise aux deux conditions suivantes:

1. l'appareil ne doit pas produire de brouillage, et 2. l'appareil doit accepter tout brouillage radiolectrique subi, mme si le brouillage est susceptible d'en compromettre le fonctionnement. Copyright 2022 Sensata Technologies, Inc. Page 270 | 271 XT2500 Product Manual WARNING: This product can expose you to chemicals including Nickel (Metallic), which is known to the State of California to cause cancer and Bisphenol A (BPA), which is known to the State of California to cause birth defects or other reproductive harm. For more information go to www.P65Warnings.ca.gov Copyright 2022 Sensata Technologies, Inc. Page 271 | 271

 

 

 

 

 

 

 

 

 

 

Part #:

Model#:

Serial #:

XT2594Axxxxxxxxx XT2594 YYWW01234 IMEI #: 123456789012345 FCC ID: GKM-XT2594 IC ID: 10281A-XT2594 Contains FCC ID: XMR201912BG77 Contains IC ID: 10224A-201912BG77

 

 

 

 

 

 

Federal Communications Commission Authorization and Evaluation Division 7435 Oakland Mills Road Columbia, MD 21046 USA Date: 02/22/2023 FCC ID: GKM-XT2594 Ref. #1: Attestation Statements Part 2.911(d)(5)(i) Filing Xirgo Technologies (the applicant) certifies that the equipment for which authorization is sought is not covered equipment prohibited from receiving an equipment authorization pursuant to section 2.903 of the FCC rules. Ref. #2: Attestation Statements Part 2.911(d)(5)(ii) Filing Xirgo Technologies (the applicant) certifies that, as of the date of the filing of the application, the applicant is not identified on the Covered List as an entity producing covered equipment. Cover List Link: (https://www.fcc.gov/supplychain/coveredlist) Applicant: Xirgo Technologies Address: 1461 Lawrence Drive, Suite 1, Thousand Oaks, CA 91320 Contact Person: Edward Gabrelian, Engineering Manger Tel.: 805-568-8466 Email: egabrelian@xirgo.com Sincerely, Rev 2/6/2023

 

 

(APPLICANTS COMPANY LETTERHEAD) Federal Communications Commission Authorization and Evaluation Division 7435 Oakland Mills Road Columbia, MD 21046 USA Date of Filing to TCB: 03/28/2023 Ref: Attestation Statements Part 2.911(d)(7) Filing Xirgo Technologies (the applicant) certifies that, as of the date of the filing of the application, Xirgo Technologies is our designated U.S. agent for service of process for the above referenced FCC ID. Xirgo Technologies accepts to maintain an agent for no less than one year after the grantee has terminated all marketing and importation or the conclusion of any Commission-related proceeding involving the equipment and will notify the TCB/FCC in a timely manner if the US Processing Agent changes. Xirgo Technologies accepts, as of the date of the filing of the application, the obligation of the designated U.S. agent for service of process for the above referenced FCC ID. Designated U.S. Agent Information:

Name: Xirgo Technologies FRN: 0021512173 Address: 1461 Lawrence Drive, Suite 1, Thousand Oaks, CA 91320 Contact Person: Edward Gabrelian, Engineering Manager Tel.: 805-568-8466 Email: egabrelian@xirgo.com Sincerely,

(Applicant printed name)

(Applicant signature) Edward Gabrelian

(US Local Agent printed name)

(US Local Agent signature) Edward Gabrelian Rev 2/6/2023

 

 

775 Montague Expressway Milpitas, CA 95035 Tel: 408-526-1188 Fax: 408-526-1088 Email: certification@bureauveritas.com Website: https://www.cps.bureauveritas.com/

Confidentiality Request Letter Reason for Amendment (current / obsolete) Initial Release (obsolete) Adding CFR 2.459 (obsolete) Updated company template & Added text box

(obsolete) Added IC confidentiality letter form (obsolete) Corrections to STC form. Added reference to KDB

(obsolete) Updated company logo (current) Updated References and Contact Info Revision History From 1.0 1.0 2.0 3.0 4.0 5.0 6.0 To 1.0 2.0 3.0 4.0 5.0 6.0 7.0 Approved Date Nov-14-2006 August 11 - 2008 Jan-31-2012 March-26-2015 Nov-19-2015 Jun-26-2019 Aug-30-2020 SCS-F019: Confidentiality Request Letter Page 1 of 3 Rev 7.0 08/05/2022 To:

Federal Communications Commission Authorization and Evaluation Division 7435 Oakland Mills Road Columbia, MD 21046-1609 Cc:

Bureau Veritas Consumer Products Services Inc. 775 Montague Expressway Milpitas, CA 95035 Subject: Confidentiality Request for FCC ID: GKM-XT2594 Pursuant to CFR 47 sections 0.457 and 0.459, we respectfully request permanent confidential treatment of the following Exhibits accompanying this application be held confidential:

Type of Confidentiality Requested Short Term Short Term Short Term Short Term Short Term Short Term Short Term Permanent Permanent i Permanent Permanent Permanent i Exhibit Block Diagram External Photos Internal Photos Operational Description/ Theory of Operation Schematics Test Setup Photos Users Manual The above materials contain trade secrets and proprietary information not customarily released to the public. The public disclosure of these materials may be harmful to the applicant and provide unjustified benefits to its competitors. Permanent Confidentiality:

The applicant requests the exhibits listed above as permanently confidential be permanently withheld from public review due to materials that contain trade secrets and proprietary information not customarily released to the public. Short-Term Confidentiality:

To avoid premature release of sensitive information prior to marketing or release of the product to the public, the applicant requests the following documents contained in this certification application be temporarily withheld from public disclosure for an initial period of 45 or 180 days; or for a specified date of not to exceed 180 days from the Grant Date The applicant understands that disclosure of this application and all accompanying documentation will not be made before the date of the Grant for this application. Sincerely, Clients signature:

Clients name & title: Edward Gabrelian, Manager Hardware Engineering Contact information / address: 1461 Lawrence Drive, Suite 1, Thousand Oaks, CA 91320 SCS-F019: Confidentiality Request Letter Page 2 of 3 Rev 7.0

 

 

775 Montague Expressway Milpitas, CA 95035 Tel: 408-526-1188 Fax: 408-526-1088 Email: certification@bureauveritas.com Website: https://www.cps.bureauveritas.com/

Project and Product Certification Representative Authorization Letter Reason for Amendment (current / obsolete) Initial Release (obsolete) Revised wording (obsolete) Updated company template (obsolete) Updated letter information (obsolete) Added FCC ID field (obsolete) Updated company name & logo (current) Updated References and Contact info Revision History From 1.0 1.0 2.0 3.0 4.0 5.0 6.0 To 1.0 2.0 3.0 4.0 5.0 6.0 7.0 Approved Date Nov-14-2006 Sept25-2007 Jan-31-2012 May-23-2014 Sep-16-2014 Jun-27-2018 Aug-30-202 SCS-F018: Project and Product Certification Representative Authorization Letter Page 1 of 2 Rev 7.0 08/05/2022 To: BVCPS, INC. 775 Montague Expressway, Milpitas, CA 95035 USA Dear Sir/Madam, Re: Project and Product Certification Representative Authorization Letter We, Xirgo Technologies LLC, hereby authorize Bureau Veritas Consumer Product Services, Inc. to act as a Certification Body for certifying for the following project(s):

FCC ID: GKM-XT2594 Product Description: Asset Tracking Device Model: XT2594 We affirm that between Bureau Veritas Consumer Product Services, Inc. and Xirgo Technologies LLC, any difference in understanding, including test plan, measurement methods, applicable standards and relevant procedures and processes have been resolved prior to commencement of testing activities. Sincerely, Clients signature Clients name / title Edward Gabrelian, Manager Hardware Engineering Contact information / address 1461 Lawrence Drive, Suite 1, Thousand Oaks, CA 91320 SCS-F018: Project and Product Certification Representative Authorization Letter Page 2 of 2 Rev 7.0