NVM Management option?

[GrizzlyAK]

Could someone please tell me what the NVM Management (backup/restore) options is under Advanced in the Control Panel? I assume it is to backup/restore the zwave controller, but wanted to ask before doing anything. If so, for an Aeotec ZStick 5+ is this function the same as (i.e., does it replace) using their backup SW?

[robertsLando]

I think it's the same. But I let @AlCalzone confirm this

[AlCalzone]

AFAIK yes

[GrizzlyAK]

OK, thanks guys. BTW, really like the latest changes to the CP. Lots of extra info readily available on-screen. The only thing I would recommend on the current version is the black text on the green background on the Interview status is hard to read. Perhaps white on green, like the check-mark circles? Just an idea. Cheers.

[GrizzlyAK]

One the Black on Green issue, that only appears in the Light Theme. The Dark Theme has White on Green.

[kpine]

Looks fine to me. Are you sure you're on the latest release?

[GrizzlyAK]

[kpine]

5.11.0 is the latest release.

[kpine]

Also, configure your S2 keys. 😆

[GrizzlyAK]

(1) I think I just had a notification about an update a few days ago, and updated. Where do you do a manual update? My Zwave JS to MQTT Add-On is at 0.28.0 and auto-updates and my Integration just gives the ZWave JS Server and Driver versions. I don't even remember how I got the CP (although I think it came with the Add-On).

(2) When I began 2 years ago, security (unless you were using Locks) was more of a performance problem than a benefit, and the advice was to avoid encryption unless you really needed it. With no locks, do you think I really need it? I'm in a fairly sparsely populated area, especially in regards to zwave range, and I'd probably notice someone camped out with a laptop trying to hack my light switches. Am I operating on outdated info?

[AlCalzone]

We generally recommend S2, but not S0 unless necessary to operate the device at all. S2 provides a few benefits out of the box, while S0 puts additional stress on the network.

[kpine]

The addon is on a different release pace than here, so you you'll have to wait. The theme problem is fixed in 5.11.0 though.

[GrizzlyAK]

@kpine ah, ok. No biggie. Thanks.

@AlCalzone OK, I'm going to have to go do some research. My CP does show an S0 Legacy key, although I don't remember ever adding one, nor have I ever added any node to my network with secure (not intentionally). But wait... when I upgraded from OZW, it was all automated (the inclusions), so I don't think I had a choice of No Encryption, which is what I used exclusively in OZW. Since the upgrade, I do believe I have always chosen No Encryption. For those using S0 now, is it as simple as adding an S2 key, and a reinterview, or will it require an exclude/include cycle? For those with No Encryption, I assume an exclude/include?

[kpine]

Might be grey because you haven't created the S2 keys.

[GrizzlyAK]

Nope. Just did that for all 3 S2 keys and they are still all grey ?. But I did have a Zooz ZEN17 lying around that I added secure (using the default option), which then picked up both S2 Unath and S2 Auth, and which was included successfully. It now has a green check that says S2_Authenticated when hovered. Yay. My first. ;-)

[AlCalzone]

they are still all grey ?

Did you also re-interview after adding the keys? Guess we need driver logs then.

I guess the question is, is it worth it for those that do?

You decide. Here are some things S2 supports out of the box:

• Encryption (obviously)
• Message integrity (no more flipped bits resulting in weird sensor measurements)
• Information from the node when it wasn't able to decrypt a command (unlike S0)

Also, with SmartStart, including devices becomes effortless.

The reason we decided to make S2 the default (probably like the Alliance intended) is that you get a bunch of upsides for nearly no downside: A couple of bytes extra on the ether and sometimes re-synchronization of the node with the controller is necessary.

[GrizzlyAK]

Did you also re-interview after adding the keys?
Yes
Here are some things S2 supports out of the box:
Wow. That's pretty significant. Beyond the limited NW impact, how much will the en(de)cryption hammer my RPi 4? I idle at about 3% CPU, and the highest I've seen it ever is about 8% when flipping switches on that new S2 device.

For the logs, would it help if I re-interviewed a couple of the (grey ?) devices before dumping the logs and provide the node IDs?

[AlCalzone]

how much will the en(de)cryption hammer my RPi 4

Can't say for sure, but 128 bit AES in C (OpenSSL) is pretty performant.

For the logs, would it help if I re-interviewed a couple of the (grey ?) devices before dumping the logs and provide the node IDs?

Sure

[GrizzlyAK]

Hey, is there any data in either zwave-js or z2m logs that when posted here might reveal security information? I know people sometimes remove their HomeID, for example, but I don't know how that information (or other) could be used by an attacker. I have some logs ready to send/post following a reinterview of a few nodes.

[AlCalzone]

IMO the only sensitive information would be user codes for door locks and maybe the security keys if you logged an inclusion. The HomeID is a random number that's transmitted unencrypted anyways.

[GrizzlyAK]

@robertsLando Just a suggestion, but on the CP, the Advanced box at the top, I assumed that if I had three nodes selected, and did a Re-Interview, that it would only do those three selected nodes, especially since I had it filterd and ONLY those three nodes were showing. My reinterview was taking an especially LONG time, so I removed the filter to find that the command had actually reinterviewed my entire network, all 77 nodes, not just the three selected. You might consider putting a popup warning for that option, or change the behavior.

[AlCalzone]

If you have specific ideas on what could be improved, opening issues for each idea would be preferred. I don't use it often, but I agree that the control panel is a bit rough around some edges.

[robertsLando]

OK, like I said, it was just a suggestion. You DID ask me for suggestions on how the CP could be clearer, so there it is

Yeah and I'm very open to suggestion @GrizzlyAK , sorry If Iooked rude on my answers I was just tring to explain my point of view :) I agree that lot could be improved on CP, I'm not an UI designer and I prefer to focus on functionalities

[GrizzlyAK]

No worries guys. I appreciate all you do to make all of this possible. I recognize how much effort is involved. I get frustrated because I don't have the knowledge currently to do much to help. I did create a new config file today during which in learned a lot. The style guide docs were incredibly helpful. Given the choice I'd vote for functionality too. I mentioned this here instead of as an issue because there are more important things that need your attention.

[AlCalzone]

I mentioned this here instead of as an issue because there are more important things that need your attention.

I'm not sure how familiar you are with Github, but issues can be tracked, organized, labeled and prioritized. So even having low-priority things as issues helps us organize. From my experience, discussions (which I find somewhat chaotic) can easily be forgotten.

[GrizzlyAK]

Good to know. Just didn't want to add noise to the stack. Will follow that advice going forward.

I have little experience with GitHub because I've not done any team development in a LONG while. but we used version control systems back in the day when programming C/C++ on Sun Sparcs (i.e., RCS/SCCS), so I know how it works, just not the details of this particular implementation. But I'm reading up on it and will figure it out.

[GrizzlyAK]

@AlCalzone I assume this guide is tailored to Linux environments? If I want to run VSCode on Win 10, are there extensions that provide the lint / yarn capabilities? Any other recommendations before I install VSCode? I have 3 Linux VMs set up (Ubuntu, Debian, and Mint), but don't use them much. I can still get around Linux, would that be easier/preferred? Any advice would be appreciated.

And have you used Ultraedit Studio with Git integration?

[robertsLando]

@GrizzlyAK AFAIK Alcazone uses Windows as development OS, I prefer linux but it's a matter of choice here

[AlCalzone]

Like he said, I'm working on Windows 10 myself.

Just install VSCode, Node.js and git for windows. I prefer setting the VSCode terminal to be Git Bash, which behaves just like Bash. Then you can use the same commands as on Linux. Afterwards, you can install yarn with npm i -g yarn.
Also make sure to install the recommended extensions in VSCode when it asks you.

[GrizzlyAK]

Thanks, @AlCalzone for the details and the links. Do I need to install the Additional Tools included with Node.js, like Chocolatey ? I assume they are safe? I have Python 3.9 installed as part of VSCode install, but not sure about the Visual Studio Build Tools (I do have Visual Studio Community 2022 installed). May or may not keep it with VSCode installed.

[AlCalzone]

Honestly I've never used Chocolatey, so it's not necessary. The build tools are needed for compiling native packages like serialport. With VS there are tons of different compiler versions so I'd install the included ones to be sure.

[GrizzlyAK]

Going back to the security issue, did something change? All of my grey ? are now gone, except for the Aeotec controller. They are now either a red do not enter icon or a green check, where a hover tells you what level of security. I have a question from Zooz about a device of mine, and would like to clarify the following: a red do not enter icon means no security at all (i.e., no S0), and a green check mark can mean S0, S1, and S2, right? Although I never used encryption with OZW, I don't really know how things were added by default (which appears to choose highest available) when I migrated, since I didn't add them one at a time. I assume they are all still unencrypted (not S0), but want to be sure.

[AlCalzone]

@robertsLando ?

[robertsLando]

Screenshot? BTW about the meaning of icons you should be able to see a tooltop when you hover them with the mouse cursor

[GrizzlyAK]

I was hovering over the grey ?. The red says No Security.

[AlCalzone]

You can ignore most of the icons for the controller. => #1886

[robertsLando]

I see no error in that, I just have to implement #1886 for controller the rest looks good. Try to hover on the green one you should se the security