Soracom Air for Cellular

CHAP Authentication

By default, Soracom uses a SIM authentication mechanism built into cellular networks to check the authenticity of an IoT SIM and determine if it is allowed to connect to a cellular network.

CHAP Authentication allows you to add an extra layer of username and password authentication on top of SIM authentication. Using CHAP authentication can help prevent an IoT SIM from being removed and used in an unauthorized or tampered device, as the new device will be required to provide additional authentication credentials before it can establish a network connection.

CHAP Authentication is managed in Groups. Air devices that are assigned to a group with CHAP Authentication enabled will be required to provide authentication before a network session is established.

When using CHAP Authentication, you must configure your devices to use CHAP authentication, providing the username and password you specified. With CHAP Authentication enabled, devices that use CHAP or PAP authentication will be unable to connect to a cellular network.

Configuration

Enabling the CHAP Authentication option may incur fees. Refer to the Pricing & Fee Schedule for more information.

The CHAP Authentication option is found within Soracom Air for Cellular Group settings.

  1. Login to the User Console. From the Menu, open the Groups screen.

  2. From the list of groups, click the name of the group you want to configure to open its settings page.

    You can also open the group settings page directly from the SIM Management screen. Simply find a SIM that currently belongs to the group you want to configure, then click the group name.

  3. From the Basic Settings tab, click the SORACOM Air for Cellular panel to expand its settings.

  4. Enable the CHAP Authentication option by switching the option to ON. Enter the Username and Password you would like to use.

    https://console.soracom.io

    Enable CHAP Authentication

  5. Click Save at the bottom of the panel.

Your group is now configured to use CHAP Authentication. All Air devices assigned to this group will now be required to provide CHAP Authentication credentials in order to connect to a cellular network.

Advanced Configuration

For security, CHAP authentication credentials are not stored directly within group configuration, and therefore cannot be managed using the Soracom API or Soracom CLI.