This denotes whether the device's outgoing frame counter is allowed to be reset during forming or joining. If the flag is set, the outgoing frame counter is not allowed to be reset. If the flag is not set, the frame counter is allowed to be reset.
This denotes whether a joiner node (router or end-device) uses a Global Link Key or a Unique Link Key.
This denotes whether a router node should discard or accept network Leave Commands.
This denotes whether a device should discard or accept network leave without rejoin commands.
If this bit is set, the 'key token data' field is set in the Initial Security Bitmask to 0 (No Preconfig Key token). Otherwise, the field is left as is.
This denotes whether a node is running the latest stack specification or is emulating R18 specs behavior. If this flag is enabled, a router node should only send encrypted Update Device messages while the TC should only accept encrypted Updated Device messages.
This denotes that the network key update can only happen if the network key update request is unicast and encrypted i.e. broadcast network key update requests will not be processed if bit 1 is set
This is the Extended Security Bitmask that controls the use of various extended security features.