Client username and password are transmitted via an OpenSSL Secure TLS 1.2 tunnel. On successful authentication, an encrypted reply token is generated and transmitted via the OpenSSL Secure TLS 1.2 tunnel back to the device.