This configuration supports a WiFi environment that duplicates the functionality of Powerhouse (PhD) physical SAP. It requires scripting/programming to allow existing network infrastructure to provide the same type of “Plug and Play” support that the SAP provides. Therefore, this environment is more suitable for enterprise customers who have invested in their sophisticated network/IT organization. The ‘Automatic’ term of this configuration means a new ConnectWare module can connect to Open Kitchen Cloud without requiring manual entering of network credentials like the Wifi direct connect mode.
The configuration consists of the following steps.
The customer network needs to duplicate two interfaces that are equivalent to a PhD’s SAP:
The first interface is referred to as the public interface identified by:
SSID: <provided by PhD> and PSK: <provided by PhD>
The credential of this interface is known by all ConnectWare modules. The public interface only provides access to the provisioning endpoint (sprovision.sitesage.net or sprovisiondev.sitesage.net). This connection uses port 443. This interface should be configured as “hidden” network for security.
The second SSID is designated as the secure interface and the SSID and PSK are unique to each AP. This interface provides full internet access including traffic to spush.sitesage.net or spushdev.sitesage.net.
This interface can be configured “hidden” or “broadcast”.
The SSID and its PSK of the secure interface must be shared with Open Kitchen through a secure API (to be provided by PhD)
Both interfaces should be isolated with firewall rules and allows only *.sitesage.net
Additional information about connection is provided to Open Kitchen
MAC address of the network gateway of the secure SSID that ConnectWare Modules and Equipment connect. All messages sent to Open Kitchen include a parameter labeled as gwmac carrying this MAC address. If there are multiple gateways at one location, all gwmac(s) should be provided to Open Kitchen
Open Kitchen maintains a mapping table of locations and gwmac(s) which will be used to automatically associate equipment to a specific location
(TBD) Open Kitchen provides a set of APIs that can be used to configure/update interface credential (ssid/psk), gateway MAC address, activate license, etc.
Provisioning API
Access to the API is via a RESTful call to https://provision.sitesage.net or
https://provisiondev.sitesage.net using a x509 certificate key pair (customer cert provided by PhD (cert and key)) for security.
The API call follows the form:
POST
/provision/ProvisionAPI?devid=88665a4a92c3&mac=88665a4a92c3&location_id=6270
GET or POST
/provision/listLocation?
gwmac, ssid, psk can be submitted via https REST API, JSON payload