TOSIBOX
TOSIBOX

TOSIBOX was born from the idea that secure remote access doesn’t have to be complicated, expensive or time-consuming.
In the summer of 2010, Veikko Ylimartimo was one of many hard-working and ambitious IT professionals.
With a long career in challenging IT positions for an internet operator and an equipment manufacturer, Veikko turned his experience towards consulting for companies that needed safe and reliable remote connections.
He had a clear vision – he wanted to develop an easy way to work remotely and securely manage technical devices.
Having developed and patented the world’s first remote access device with Plug & Go™ technology, Tosibox sold its first device out of its Oulu Finland headquarters in 2012, quickly expanding abroad followed by the establishment of three subsidiaries in Germany, Scandinavia and the USA.
TOSIBOX® products are now sold across Europe, North America, Asia, the Middle East and Australia.
Website: www.tosibox.com
Solutions
Products

TOSIBOX® LOCK 610 New!
TOSIBOX® 610 is a perfect choice for professional applications when wireless networking is not required. Leading edge Cyber Security technology from TOSIBOX® enable diverse application scenarios. The durable aluminium alloy shell and small form factor is ideal for rugged mounting conditions. Tosibox 600 series contains devices for all connectivity scenarios and meets the most demanding operating conditions.
Bringing connectivity to those hard to reach locations has never been this easy. The node is compatible with all existing TOSIBOX® products.
Performance
·
High VPN throughput, end-to-end encryption between TOSIBOX®
devices, users and servers
Reliability
·
Four Gigabit Ethernet ports deliver speeds up to 1000 Mbps
·
Provided DIN rail clip ensures firm installation on any industrial
application
·
TosiOnline™ automatic
reconnection of dropped connections
Industrial design
·
Durable aluminum alloy shell, DIN rail attachment
·
Extended IP30 rating • Operating temperature -40 °C … +75 °C /
-40 °F … +167 °F

TOSIBOX® LOCK 670 New!
TOSIBOX® 670 is ideal as a main or backup internet source, where steady connection and high data throughput is necessary. The versatile connectivity options, utilized in conjunction with leading edge Cyber security technology from TOSIBOX® enable diverse application scenarios. The durable aluminum alloy shell and small form factor is ideal for rugged mounting conditions.
Tosibox 600 series contains devices for all connectivity scenarios and meets the most demanding operating conditions. Bringing connectivity to those hard-to-reach locations has never been this easy. The node is compatible with all existing TOSIBOX® products.
Performance
High VPN throughput, end-to-end encryption between TOSIBOX® devices, users and servers
Reliability
· Built-in global LTE modem – no external modem needed
· Cellular speeds up to 300Mbps
· Dual-SIM slots for operator redundancy allows for even more reliable connectivity
· TosiOnline™ automatic reconnection of dropped connections
Industrial design
· Durable aluminum alloy shell, DIN rail attachment
· Extended IP30 rating
· Operating temperature -40 °C … +75 °C / -40 °F … +167 °F

TOSIBOX® LOCK 675 New!
TOSIBOX® 675 is a powerful device for high demanding application in demanding industrial environments. With a wide range of connectivity interfaces the demand for always on connectivity is guaranteed. This device can be used in power-hungry industrial applications where speed and robustness are at the heart of the solution.
The versatile connectivity options, utilized in conjunction with leading edge Cyber security technology from TOSIBOX® enable diverse application scenarios. The durable aluminum alloy shell and small form factor is ideal for rugged mounting conditions. Extended IP30 Rating and operating temperature provides installation and use in demanding environmental conditions.
Tosibox 600 series contains devices for all connectivity scenarios and meets the most demanding operating conditions. The node is compatible with all existing TOSIBOX® products.
High performance
· Massive VPN throughput for data consuming applications, end-to-end encryption between TOSIBOX® devices, users and servers
Reliability
· Integrated WiFi as connectivity method or access point for wireless devices on site
· Built-in LTE modem with cellular speeds up to 300Mbps
· Dual-SIM slots for operator redundancy allows for even more reliable connectivity
· TosiOnline™ automatic reconnection of dropped connections
Industrial design
· Robust and fanless enclosure, DIN rail attachment
· Extended IP30 rating • Operating temperature -40 °C … +75 °C / -40 °F … +167 °F

TOSIBOX® Lock 500
TOSIBOX® Lock 500 is a high-end connectivity device bringing unprecedented possibilities for customers to manage their operations and to build new IoT solutions. The Lock 500 is ideal for demanding industrial environments and opens up new opportunities in security and office networking sectors.
The Lock 500 is compatible with all existing TOSIBOX® products. Modularity of the products enables easy and fast extension of networks
TOSIBOX® solution creates a direct point-to-point VPN tunnel between you and your device. The solution consists of modular components that offer unlimited expandability and flexibility. All components are compatible with each other as well as internet connection, operator, and device agnostic. The solution works both in internal and external networks, and you can connect both modern IoT devices and legacy systems.
High performance
· Massive VPN throughput for data consuming applications, end-to-end encryption from Key to Lock, Lock to Lock or Lock to (Virtual) Central Lock
· Up to 50 concurrent VPN connections
Reliability
· Integrated WiFi as connectivity method or access point for wireless devices on site.
· Built-in LTE modem (optional), with three modem variants covering the globe – no external modem needed
· Dual-SIM slots for operator redundancy allows for even more reliable connectivity
· TosiOnline™ functionality of automatic reconnection of dropped connections
Industrial form factor
· 2/2 x Digital I/O for controlling and monitoring of Lock status and sending SMS in I/O events
· Industrial design: robust and fanless enclosure, integrated DIN rail bracket and industrial screw-on DC power connector
Performing at the highest security levels in the industry
· See security questions answered in our Security Center
· Learn more details about the impressive security features of Lock 500

TOSIBOX® Lock 210
TOSIBOX® Lock 210 is an efficient and robust industrial router. It is serves as an endpoint for secure remote connections in operational (OT) networks. Devices connected to the Lock are securely accessed over the Internet and most LAN and WAN networks through an encrypted VPN connection.
NAT and firewall friendly, the Lock’s patented Plug & GOTM connection method takes you out of the box and into use in less than 5 minutes, without the need for software installations, network configurations or special IT skills.
TOSIBOX® solution creates a direct point-to-point VPN tunnel between you and your device. The solution consists of modular components that offer unlimited expandability and flexibility. All components are compatible with each other as well as internet connection, operator, and device agnostic. The solution works both in internal and external networks, and you can connect both modern IoT devices and legacy systems.
Efficient performance
- 30 Mbs VPN throughput and end-to-end encryption from Key to Lock, Lock to Lock or Lock to (Virtual) Central Lock
- Up to 20 concurrent VPN connections
- TosiOnline™ feature for automatically reconnecting dropped connections
Industrial form factor
- Industrial design: robust and fanless enclosure, integrated DIN rail bracket and industrial screw-on DC power connector
- 2/2 x Digital I/O for controlling and monitoring of Lock status
- Operating temperature -20 °C … +60 °C / -4 °F … +140 °F
Industry leading security
- Secure boot for operating system protection
- 4096 bit RSA cryptographic keys
- See security questions answered in our Security Center

TOSIBOX® Lock 175 New!
TOSIBOX® 175 is ideal for demanding industry sectors that require an all-in-one solution that is compact, able to handle all environments and
suited to global market usage. The 4G module and external 4G antenna provides stable Internet access, so the node can be easily configured
anywhere. The versatile connectivity options, utilized in conjunction with leading edge Cyber security technology from TOSIBOX® enable
diverse application scenarios. The durable aluminium alloy shell and small form factor allows for ideal mounting conditions.
Creating secure and sustainable infrastructure has never been this easy.
The node is compatible with all existing TOSIBOX® products.
TOSIBOX® solution creates a direct point-to-point VPN tunnel between you and your device. The solution consists of modular components that offer unlimited expandability and flexibility. All components are compatible with each other as well as internet connection, operator, and device agnostic. The solution works both in internal and external networks, and you can connect both modern IoT devices and legacy systems.
Product code TBL175
Ports
· 1 x RJ-45 WAN connection, 10/100 Mb/s, auto-negotiation (MDI / MDI-X)
· 1 x RJ-45 LAN connection, 10/100 Mb/s, auto-negotiation (MDI / MDI-X)
· LAN can be assi gned as Service connection, 10/100 Mb/s, auto-negotiation (MDI / MDI-X)
· RS485 port is not supported in the software. Port provides power output
Connections
· 9-35V DC
· 1 x WiFi antenna connector, RP-SMA Male
· 1 x LTE antenna connector, SMA Female
· DIN rail attachment (back)
· Maximum power consumption 10W
Connection features
· Independent of operating systems
· Works in all Internet connections (operator independent)
· Firewall friendly
· Works with dynamic, static and private IP addresses
· Built-in firewall, NAT
· Up to 10 concurrent VPN connections
· VPN throughput up to 10 Mbit/s
· TosiOnline™ Automatic network recovery that recovers from most mobile operator and modem problems
4G Module
· region: GLOBAL
· LTE Cat-4
· Up to 150 Mbps DL, 50 Mbps UL
Frequency Bands
· LTE FDD: B1/B2/B3/B4/B5/B7/B8/B12/B13/B18/B19/B20/B25/B26/ B28
· LTE TDD: B38/B39/B40/B41
· WCDMA: B1/B2/B4/B5/B6/B8/B19
· LTE module is technically capable and certified for following standards and operators:
· CE, FCC
· PTCRB, RCM, GCF, ICASA, TELEC, JATE, KC, IFETEL, ANATEL, VERIZON (America), AT&T (America), TELUS (Canada)
WLAN
· IEEE 802.11 b/g/n, max. 150 Mbps
· WEP, WPA-PSK, WPA2-PSK, WPA-PSK/WPA2-PSK Mixed, TKIP/AES encryption
· Output power 20 dBm maxDoes not interfere with the use of other network-enabled applications

TOSIBOX® LOCK 150
TOSIBOX® Lock 150 is an industrial router with firewall and easy Plug & Go™ connectivity. It serves as an endpoint for secure remote connections. IoT devices connected to the Lock can be securely accessed over the Internet and most LAN and WAN networks through an encrypted VPN connection.
MAIN FEATURES
- Patented TOSIBOX® Plug & Go™connection method takes you out of the box and into use in less than 5 minutes, without the need for software installations, network configurations or special IT skills.
- NAT and firewall friendly
- VPN throughput up to 10 Mbit/s, end-to-end encryption between TOSIBOX® devices
- Performing at the highest security levels in the industry – See security questions answered in our Security Center
- Up to 10 concurrent VPN connections
- Audited and patented security
- Reliability with TosiOnline™automatic reconnection of dropped connections
- Compact physical size for space conscious environments
Ports
- 1 x USB 2.0, type A
- 1 x RJ-45 WAN connection, 10/100 Mbit/s, auto-negotiation (MDI / MDI-X)
- 3 x RJ-45 LAN connection, 10/100 Mbit/s, auto-negotiation (MDI / MDI-X)
- 1 x RJ-45 Service connection, 10/100 Mbit/s, auto-negotiation (MDI / MDI-X)
Connections
- 10-30V DC +-10% (reverse polarity protected)
- 2 x Wireless network antenna connector, RP-SMA
- DIN rail attachment (bottom), angle bracket available as an accessory (TBMBD1)
WAN connection features
- Independent of operating systems
- Works in all Internet connections (operator independent)
- Supports HTTP proxy servers with and without authentication
- Firewall friendly
- Works with dynamic, static and private IP addresses
- Built-in firewall, NAT
- Up to 10concurrent VPN connections
- VPN throughput up to 10 Mbit/s
Mobile connection features
- Supported 4G USB modem: TOSIBOX® 4G modem, TB4GM (Huawei E3372), TB3GM2M (Huawei MS2131), TB4GM2M (Huawei MS2372)
- TosiOnline™ Automatic network recovery that recovers from most mobile operator and modem problems
WLAN
- IEEE 802.11 b/g/n, max. 150 Mbps
- WEP, WPA-PSK, WPA2-PSK, WPA-PSK/WPA2-PSK Mixed, WPA-EAP, WPA2-EAP TKIP/AES encryption
- Frequency 2.412 – 2.462 GHz, 11 channels
- Output power 20 dBm max
Included accessories
- RJ-45 Cat6 Ethernet cable, USB extension cable
- 2 x WLAN antennas, 2 dBi
- AC Adapter: Input 100 – 240V AC, frequency 47 – 63 Hz / Output 24.0 V, 0.8 A, max 7.2 W / EU, UK, AU or US power socket
- DC input plug
- DIN rail mounting bracket
Physical properties
- 132 mm x 99 mm x 35.5 mm / 5.2″ x 3.9″ x 1.4″ (L x W x H)
- Weight 593 g / 1.31 lbs (net weight article)
- Cast aluminium casing
- Operating temperature: -20 °C … +55 °C / -4 °F … 131 °F
- Operating humidity: 20 – 80% RH, non-condensing
- Storage temperature -40 °C … +70 °C / -40 °F … 158 °F
- Protection class IP20
Certifications
- CE, UL, FCC, ISED
Product codes
- TBL15

TOSIBOX® KEY
TOSIBOX® Key is an intelligent cryptoprocessing device that enables a secure connection between your computer and one or more TOSIBOX® Locks, giving you full visibility and control over the network devices connected to the Lock.
Connections are established through a secure, encrypted VPN tunnel over the Internet or other common WANs and LANs, and permissions can be easily granted, revoked and configured in an unlimited number of ways. See security questions answered in our Security Center.
The Key comes with durable light metal alloy casing and is fully compatible with all existing TOSIBOX® products.
- 2048 bit RSA key in the cryptographic module
- 4 GB or larger flash memory storage for TOSIBOX® Key software and settings
- USB 2.0 interface, type A
- Standard CSP/PKCS#11
- One Mobile Client included (Android, iOS)
Supported operating systems
- Windows 10, Windows 8/8.1 (32/64 bit), Windows 7 (32/64 bit), Windows Vista (32/64 bit), Windows XP (SP3), Windows Server 2003, Windows Server 2008
- Mac OS X 10.9 Mavericks or more recent (Intel 64-bit)
Physical properties
- 83 mm x 22 mm x 10 mm / 3.27″ x 0.87 x 0.39″ (L x W x H)
- Weight 27 g / 0.06 lbs
- Casing aluminium and plastic
- Operating temperature 0 °C … +70 °C / +32 °F … +158 °F
- Storage temperature -20 °C … +80 °C / -4 °F … +176 °F
Product code
- TBK2

TOSIBOX® SoftKey
TOSIBOX® SoftKey is a software that enables a secure connection between your computer and the one or more TOSIBOX® Lockes, giving you full visibility and control over the network devices connected to the lock. TOSIBOX® SoftKey complies with high security standards intelligent cryptoprocessing device that enables a secure connection between your computer and one or more TOSIBOX® Locks, giving you full visibility and control over the network devices connected to the Lock.
TOSIBOX® SoftKey is a software that enables a secure connection
between your computer and the one or more TOSIBOX® Locks, giving you full visibility and control over the
network devices connected to the lock. TOSIBOX® SoftKey
complies with high security standards intelligent cryptoprocessing device that enables a secure
connection between your computer and one or more TOSIBOX® Locks, giving you
full visibility and control over the network devices connected to the Lock.
connection between your computer and one or more TOSIBOX® Locks, giving you
full visibility and control over the network devices connected to the Lock.
TOSIBOX® SoftKey complies with the high security standards set for all TOSIBOX® products.
The SoftKey is created according to the same safe procedures as for hardware Keys. The SoftKey is also computer- and user-specific i.e. it cannot be copied over or moved to another device.
-
· TOSIBOX® SoftKey can also be installed into cloud services and virtual environments.
· TOSIBOX® SoftKey can be created and access rights can be granted immediately even from the other side of the world. The SoftKey works without a physical TOSIBOX® Key device. The SoftKey corresponds to a Sub Key that is controlled via a physical Master Key, and therefore it cannot be used to create more keys or Mobile Clients.
· TOSIBOX® SoftKey can be used also in computers that do not have an USB port or where the use of USB devices is tricky.
· Each TOSIBOX® system must have at least one physical TOSIBOX® Key (Master Key) that is used to take TOSIBOX® Locks into use. In addition, creating a back-up key is recommended. Apart from these, all other keys can be SoftKeys. A Master Key user can always revoke access rights from a SoftKey – just like with all other Sub Keys and Mobile Clients.
· Both TOSIBOX® SoftKey software and physical TOSIBOX® Key devices can be used on the same computer.
· Two-factor authentication is fulfilled also with SoftKey: device-specific (something in your possession) and password-protected (something only you know).
· TOSIBOX® SoftKey is supported on any operating system that the TOSIBOX® Key is supported on.
· To activate SoftKey on a PC or Mac, you will need SoftKey license for the master Key – please contact our sales to purchase one

TOSIBOX® KEY Mobile Client
TOSIBOX® Mobile client extends the current TOSIBOX® solution , giving you secureand easy remote access on the go/ the application in available for iPhones, iPads and android devices
· Android version 4.0 or greater / iOS version 8.0 or greater
· Authentication based on PKI standards, 2048 bit RSA keys
· Data encryption: TLS, Blowfish-128-CBC, AES-128-CBC, AES-256-CBC
· Layer 3 VPN connection (OpenVPN on Android, IPsec/IKEv2 on iOS)
· Encrypted tunnel, end-to-end authenticated
· Multi-factor authentication
· Does not interfere with the use of other network-enabled applications
TOSIBOX® LOCK FOR CONTAINER
The new TOSIBOX® Lock for Container helps bring secure connectivity inside your industrial IoT devices. It is a software-only way of connecting your IPCs, HMIs, PLCs, controllers and other devices to your TOSIBOX® network, serving as the endpoint for secure remote connections.
With TOSIBOX® Lock for Container, services running on the connected device can be securely accessed over the Internet and most LAN and WAN networks through highly encrypted VPN connection.
TOSIBOX® Lock for Container is suitable for demanding and hazardous applications such as medical, marine, transport and oil industries. In these scenarios TOSIBOX® Lock for Container brings secure connectivity to hardware devices designed to meet demanding requirements.
TOSIBOX® Lock for Container is also perfect for developers, device manufacturers, and integrators who are innovating new ecosystem technology.
MAIN FEATURES
Secure connectivity to nearly any device
- The patented TOSIBOX® connection method is now available virtually to any device. You can integrate and manage all your devices with your TOSIBOX® products.
- TOSIBOX® Lock for Container supports Layer 3 VPN tunnels.
- TOSIBOX® Lock for Container does not limit the number of services or devices you need to manage. You can connect any service over any protocol between any devices.
Install without activation, or activate for immediate access
- You can create a device that you can sell for other users to activate with TOSIBOX® technology.
- If you are looking to create a device for yourself to be used within your own IoT ecosystem, you can easily activate TOSIBOX® Lock for Container immediately to get secure remote access to that device or the network of devices behind it.
Runs silently in the system background
- TOSIBOX® Lock for Container does not interfere with the operating system level processes or middleware. It does not need access to system files and doesn’t change any system level settings.
Room for innovating
- Developers can innovate with TOSIBOX® technology and create a more flexible infrastructure to enable their ecosystems.
- TOSIBOX® Lock for Container can run behind NAT and in firewalled networks.
- VPN throughput is limited only by your network connection.
- Works with any combination of TOSIBOX® Locks and Keys as well as with any industry 4.0 or IIoT initiative.
Product code
- TBLFC1
Recommended software requirements
- Any 64-bit Linux OS supported by Docker software (such as CentOS, Fedora, Ubuntu or Debian)
- Docker Engine – Community v19 or later installed and running (www.docker.com)
- Installation requires sudo or root level user rights
Recommended system requirements
- 50 MB RAM
- 50 MB hard disk space
- ARM 32-bit or 64-bit, Intel or AMD 64-bit dual core processor
- Internet connection
Security
- Patented TOSIBOX® connection method
- PKI with 4096-bit RSA key
- Compatible with all TOSIBOX® devices and products
- Uses remote matching for joining your TOSIBOX® secured network
- Uses device firewall for security
- TOSIBOX® software separated from system software
WAN connection features
- Serves as an endpoint for TOSIBOX® secure VPN tunnel
- VPN connections to/from TOSIBOX® Virtual Central Lock
- VPN connection from TOSIBOX® Key
- Works in all Internet connections (operator independent)
- Supports HTTP proxy servers with and without authentication
- Works with dynamic, static and private IP addresses
- Up to 2 concurrent VPN connections
- VPN throughput limited only by network connection
- Layer 3 connections
- LAN access if supported by the device
User Interface
- Packed with TOSIBOX® web UI for remote configuration
Required open firewall ports
- Outbound TCP: 80, 443, 8000, 57051
- Outbound UDP: random, 1-65535
- Inbound: none

TOSIBOX® VIRTUAL CENTRAL LOCK
TOSIBOX® Virtual Central Lock is an operative network for your devices and service personnel. The Virtual Central Lock turns your TOSIBOX® ecosystem into a controlled network of always-on VPN connections for remote maintenance, continuous monitoring, real-time data collection and data logging.
The Virtual Central Lock cuts centralized access management work time from days into minutes, enabling easy management of big networks without special IT skills.
Access groups
You can create access groups and add relevant members (Keys, Locks, IP addresses, network ranges or MAC addresses) by drag and drop. Members of the same access group can communicate freely, and members can belong to several access groups.
Network monitoring
You can see log data about the events of connected TOSIBOX® Locks, always tracking who were using the TOSIBOX® VPN at a certain time. The Virtual Central Lock can also be set to send email alerts for connections for any or all serialized TOSIBOX® Locks being established and closed.
Virtual LAN
Virtual Central Lock supports Virtual LANs enabling adding workstations or servers from one or more networks connected to the VCL LAN into an access group. You may have different networks defined per customer, or you may want to separate your office network from production network, and arrange remote access to these networks differently.
Unlimited expandability
TOSIBOX® Virtual Central Lock is infinitely scalable. The LITE version includes 5 VPN connections.
Product codes
TBVCL1
TBVCL1P100 License Package requiredProperties
• With Virtual Central Lock and always-on VPN connections you can easily enable applications like data logging, continuous monitoring or remote maintenance.
• Possibility to collect audit log data from connected TOSIBOX® Locks
• Monitoring service for VPN connections
• Improved and scalable access management that is enterprise-ready.
• With virtual platforms, it is possible to achieve a very high level of redundancy and fault-tolerance where failover time is measured in seconds.
• Because it’s virtual, it can be deployed in your office network, in leading cloud services AWS or Azure, or anywhere else where you prefer.
• Virtual Central Lock supports up to thousands concurrent VPN connections from Keys, Locks or Mobile Clients. The LITE version includes 5 VPN connections.
• A supported virtualization platform based on one of the following:
– VMWare ESXi
– Microsoft Hyper-V
– Linux KVM
• x86-64 processor architecture, two or more CPU cores
• Minimum of 2 GB of RAM
• Minimum of 5 GB of permanent storage (HDD or SSD)
• Two or more network interfaces for the virtual machine
• One non-firewalled public IP address
• At least 10/10 Mbit/s Internet connection
For cloud platforms
• Linux / MacOS workstation to run the installer
• Azure or AWS subscription and “az” or “aws” command line tools installed
• Installation package