Wireless sensors and Yggio, the open operational layer for cities, property owners and transport operators. Your data, your operations, your sovereignty.

LoRaWAN User and installation manual

Square Sound for LoRaWAN

Sound level, temperature and humidity in a 58 mm square, with a sound alarm when you need one. This manual takes you from the opened box to a sensor in service, and keeps the technical reference at the end.

Revision A · October 2026 · Sensative AB

1Introduction

Square Sound measures the sound level in a room, together with temperature and relative humidity, and reports them over LoRaWAN. It measures levels only and does not record audio. It is 58 × 58 × 15 mm and IP63, with a plain front; the sound and air openings are in the rear cover. It suits classrooms, open-plan offices, hotel rooms and short-term lets, where both noise and indoor climate matter.

Wi-Fi positioning can tell you where each sensor is. The battery is built in (4,000 mAh) and lasts well over ten years.

It works with any LoRaWAN network server (LoRaWAN 1.0.4, class A, OTAA) and reaches up to 10 km in line of sight. What it measures, when it reports and what it sends is decided by an application running inside the sensor, on Sensative’s Virtual Sensing Machine (VSM). This manual describes the application Square-comfort-sound R31–R33, which can be configured, and replaced by a newer version, over the air or with NFC. Sensative can also offer alternative VSM applications for the same sensor, which give it a different task; see Which application is in the sensor.

What’s in the box

  • Square Sound, with the adhesive already on the back

The keys (DevEUI and AppKey) come with the delivery information. The Square screw mounting kit is sold separately.

Parts of the sensor

Square Sound, 15 mm deep, with a plain front
The front is plain. The sound and air openings are in the back plastic, the rear cover: keep them free. The NFC field is at the lower left of the front: that is where you hold the phone. The back carries the adhesive and the label with the model, region and serial number.

2Before you start

A LoRaWAN sensor needs a little more preparation than a sensor that pairs with a hub. Have this ready first:

The sensor sends by radio to a gateway, the gateway to the network server, the network server to your application; settings go back as a downlink

You need

  • A LoRaWAN gateway within range, powered on and online
  • An account on a LoRaWAN network server (for example The Things Network, ChirpStack, Loriot or Actility), with the gateway added to it
  • The keys for the sensor: its DevEUI and AppKey, from the delivery information. The JoinEUI is the same for all Square sensors: 70B3D52C0001D4C3.
  • A phone with NFC, to start the sensor. Most smartphones have it; an iPhone needs an NFC reading app (see Finding the NFC antennas).
  • A payload decoder for Sensative VSM sensors in your network server or application (see Decoding the messages)

Choosing the place

Square Sound measures both sound and room climate, so the place has to suit both.

For the sound: place it where it measures the sound correctly, so that sound sources unrelated to what you want to measure do not disturb it.

  • Where the sound happens: in the room, or the area people use, whose sound you want to measure.
  • Away from unrelated sound sources that would skew the reading, for example a fan, a ventilation unit or outlet, a loudspeaker, a machine or a door that bangs.

For temperature and humidity, as for Square Comfort:

  • For room climate: an inside wall at eye height, where the air moves freely past the sensor
  • Away from direct sun, radiators, other heat sources and draughts

Also:

  • Openings free: keep the openings in the rear cover free.
  • Indoors or sheltered outdoors: the sensor is IP63
  • Range: up to 10 km in open line of sight, much less through walls and floors
  • Metal is fine: unlike Strips, a Square sensor can be mounted on metal without much effect on the radio. Avoid only closed metal enclosures, such as a shut steel cabinet.
Square on an inside wall at eye height, away from a sunny window and a radiator

Finding the NFC antennas

NFC only reaches a couple of centimetres, so lay the phone flat against the sensor, antenna over antenna. You need to know where both antennas are, and the easiest way to find the spot is to move the phone slowly over the right area until the phone signals contact:

The NFC antenna is at the lower left of the sensor front; in the phone it is often near the top of the back
  • On the sensor: at the lower left of the front, with the logo along the bottom edge.
  • On an Android phone (recommended): switch NFC on, and turn on vibration or a sound for NFC in the phone’s settings, so that the phone tells you as soon as it has found the sensor. The antenna is usually on the back, near the top, often close to the camera, but it varies between models: the phone’s manual or the maker’s website shows where it is. If you cannot find it, move the back of the phone slowly over the sensor’s lower left corner until the phone vibrates.
  • Take off the phone case: a protective case, especially a thick one or one with metal or a magnet, can make it hard to get NFC contact. Remove it while you work with the sensor.
  • Then hold it still: to start a join, keep the phone still over the sensor for about 5 seconds. The vibration only means the phone has found the sensor. Keep the phone where it is until the sensor and the app have finished talking. With the Hugin app this takes a few seconds, because the app first unlocks the sensor through Sensative’s server. If you move away too early, the connection breaks and you have to start again.
  • On an iPhone: use an NFC reading app, such as NFC Reader & Scanner from the App Store. Open it and tap its NFC button, so that it shows Ready to Scan, before you touch the sensor. The iPhone’s antenna is at the top edge of the back. Hold that edge against the sensor’s lower left corner and keep it still; when the read succeeds, a web link with the sensor’s serial number opens. The iPhone NFC join guide (PDF) shows each step with pictures.

3Step by step: from box to ready

8 steps. Register the sensor in the network server before you hold the phone to it. Then join it, check the settings, and mount it last.

1

Unpack

Check the sensor and find its keys. The sensor sleeps until it meets an NFC field.

2

Register the sensor in the network server

  1. Add a new end device in your network server, with activation OTAA.
  2. Use these LoRaWAN settings: MAC version 1.0.4, regional parameters RP002-1.0.3, max EIRP 14 dBm, and the frequency plan for your region.
  3. Enter the DevEUI and the AppKey from the delivery information, and the JoinEUI 70B3D52C0001D4C3. Check them carefully: one wrong character and the join fails.
  4. Set up decoding of the messages (see Decoding the messages).
Done when: the device is listed in the network server, waiting for its first join.
3

Join the network with NFC

Hold the phone over the lower left corner of the front of Square Sound and keep it still for about 5 seconds: that starts the join (see Finding the NFC antennas, also for iPhone). The phone may show a web link with the sensor’s serial number; you do not need to open it.

Register the sensor, hold a phone with NFC over the lower left corner, and it joins within about two minutes
Done when: the network server shows the join, usually within two minutes.
If the network is not yet reachable, the sensor tries again once a day, so the join can take up to 24 hours once the network is there. A new NFC touch starts an attempt at once.
4

Check the signal where it will sit

Put the sensor at the place where it will be mounted, and look at its messages in the network server: the join, and the first reports.

Good: the link must carry at least SF9. As a rule of thumb, look for an SNR above −5 dB and an RSSI above −115 dBm. That leaves a margin to the SF9 limit (about −12.5 dB SNR).
A weaker link forces the network server’s adaptive data rate (ADR) onto SF10–SF12. Each message then takes much longer to send, which costs battery and capacity. If the sensor is still on SF10–SF12 a day after installation, improve the link: move the gateway or the sensor, or add a gateway.
5

Configure (optional)

Square Sound comes with the Square-comfort-sound application. With the default settings it sends the average sound level, and the peak within it, every 15 minutes. It reports temperature when it changes by 0.5 °C, the average temperature every 60 minutes, humidity when it changes by 2 %, and temperature alarms below 2 °C and above 60 °C. The sound alarm is off: it works in wake-on-sound mode, which you switch on with the Sound Threshold (see Sound alarm).

How to change them: see Changing the settings, the settings table and the worked examples.

6

Install

Choose one of two ways:

  1. Adhesive: the surface must be clean and dry. Peel the film off the adhesive on the back and press the sensor firmly in place.
  2. Screws, with the Square screw mounting kit (sold separately): two 2 mm adhesive plates on a marking foil. Use the foil to mark the drill holes, either beside the sensor or hidden behind it (then use ultra-low-profile flat-head screws). Screw the plates on with the thick adhesive side towards you, peel the films off the plates and the sensor, check the alignment, and press the sensor firmly onto the plates.
Keep the openings in the rear cover free: do not cover them with tape, putty or labels when you mount the sensor.
7

Test

Breathe on the sensor, or hold it in your hand for a minute, and talk or play some sound near it.

Done when: new temperature and humidity readings arrive in your application, and the average sound level arrives after the Sound Average Time (15 minutes by default).
8

Ready

  • Registered in the network server, with the JoinEUI and the right region
  • Joined with NFC, and the messages are decoded
  • Signal checked at the final spot: SF9 or better
  • Settings checked, or changed as needed
  • Mounted on an inside wall where it measures the sound you want, away from unrelated sound sources, sun, heat and draughts, with the openings in the rear cover free
  • Sound level, temperature and humidity arriving

4Using the sensor

The application measures the sound level, temperature and humidity at regular intervals, and sends the sound level as an average with its peak. The settings named in bold are listed in the settings table.

Sound level

Square Sound measures the sound pressure level with a digital microphone, from 45 to 92 dB. It measures levels only and does not record audio: only the levels leave the sensor.

  • Average and peak: by default the sensor works out the average sound level over the Sound Average Time, 15 minutes by default, and sends it together with the peak level within that time, both in dB with 0.1 dB resolution.
  • Only while joined: the sensor measures and sends sound levels only while it is joined to the network.

Sound alarm (wake-on-sound)

Instead of averages, the sensor can wake on sound and raise an alarm. Set the Sound Threshold to a value from 6 to 18 dB to switch this mode on:

  • The sensor wakes up when the sound level changes by more than the Sound Threshold and is above the Minimum Sound Level (45 to 92 dB, 45 by default).
  • When the level exceeds the Minimum Sound Level, the sound alarm is set and sent confirmed. It stays on for about the Sound Alarm Timeout (5 minutes by default, give or take a minute) and does not retrigger or reset during that time. Then it is set back to off.
  • In this mode the average and peak levels are not sent.
  • Wake-on-sound catches sudden sounds, but uses more battery. For most uses the default, Sound Threshold 0 with averages, is recommended.

Temperature

  • The sensor reads the temperature every minute.
  • When it has changed by more than the Temperature Threshold since the last value sent, the sensor sends the new reading.
  • Every Average Temperature Interval, it sends the average temperature, whether it has changed or not.
  • Above the Temperature High Alarm Level the alarm state becomes “high”, and below the Temperature Low Alarm Level it becomes “low”. The alarm is sent confirmed. If the low level is not below the high level, the alarm is off.

Humidity

  • The sensor takes a humidity sample every minute.
  • When the humidity has changed by more than the Humidity Threshold, it sends the new reading.
  • Every Humidity Interval, it works out the average humidity, and sends it confirmed if it has changed by more than the same threshold.
If the humidity goes above 100 % (dew, for example), the following readings can be clearly off until the sensor has dried.

Battery and position

Once a week the sensor estimates its remaining battery and sends it as a percentage. The estimate is based on the measured running time and the power used by the processor, radio, sensors and position scans. Square Sound positions itself by Wi-Fi only. Once a day, while joined, it scans for Wi-Fi access points and sends the result. A cloud geo-solving service, such as the one in Yggio or Munin, turns the scan into a position.

How Wi-Fi positioning works

  • 2.4 GHz only: the radio scans only the 2.4 GHz band (2412–2484 MHz). Networks that broadcast only on 5 GHz are not seen.
  • Passive: the sensor listens for nearby Wi-Fi access points (802.11 b/g/n) and records their MAC addresses and signal strength (RSSI). It does not connect to any network, needs no password and sends nothing over Wi-Fi. The addresses travel in the LoRaWAN uplink.
  • How many: at least 2 access points are needed for a position, and more give a better one.
  • The position: a cloud service that supports Wi-Fi positioning is needed for a position, for example Yggio (Munin and LoRa Cloud can also do this). It looks the addresses up in a database of mapped access points and returns the position.
  • Accuracy: depends on how many known access points are around: typically 5–20 m indoors. With only one or two, expect the area rather than the room. Adding low-cost 2.4 GHz access points improves it.
  • Wi-Fi only: Square Sound has no satellite positioning.

Network and roaming

  • Confirmed messages: alarms and average humidity are acknowledged by the network server, and the sensor sends them again if no acknowledgement arrives.
  • Rejoining: if the sensor is not joined, it tries to join once every 24 hours. An NFC touch, as in step 3, starts a join attempt at once.
  • Losing the network: the sensor gives the network up if it hears nothing from it for the Downlink Timeout (24 hours by default; see Device registers).
  • Roaming: the sensor can be registered in up to 15 LoRaWAN networks, in priority order. Register it in each with the same DevEUI and JoinEUI, and with the last digit of the AppKey counting up: …00 for the first network, …01 for the second, and so on. Then set the Roaming Network Count. If the sensor loses its network, it tries the next one in turn. Every 24 hours it goes back to trying the first. More than one network makes each join take longer and use more power.
  • Adaptive data rate: the sensor sets its own data rate and transmit power (sensor ADR, not the network server’s ADR), and the application damps and limits those adjustments. This suits a sensor mounted in one place, where the radio conditions change slowly.

Decoding the messages

The messages are compact binary records, and their meaning depends on the application version. Decode them with a VSM-aware decoder:

  • Yggio decodes them with its built-in VSM translator, and keeps track of each sensor’s application version.
  • Other platforms: use Munin, Sensative’s open-source MQTT client. It decodes the messages for any network server, keeps the device state the decoder needs and the device time up to date, and solves Wi-Fi positions.
  • Your own integration: the open-source VSM translator is the decoder that Munin uses, available as a Node package. It needs two things from you: it must be able to store at least the rulesCrc32 for each sensor between messages, and it must be kept up to date, since new application versions are released without notice.

Changing the settings

There are two ways: over the air, with downlinks from your network server, or on site with the Hugin NFC app. Both usually start in the VSM Configuration Tool, which makes the downlinks for you.

  1. Pick the application: by name and version, or by the rulesCrc32 from the sensor’s port 15 message (see Which application is in the sensor).
  2. Choose a configuration: a released profile from the Profile Library (none are released for this application, see Released profiles), or Custom to set your own values. Each setting shows its description, unit and range.
  3. Take the result: one or more downlinks for port 2, or a single payload for port 7, in hex or base64, to send from your network server. Or a QR code to scan with the Hugin NFC app, which then writes the configuration to the sensor on site.
The sensor is a class A device: it picks up a downlink right after its next uplink. A new setting takes effect after the sensor’s next message at the earliest, and on a busy network it can take longer before the downlink gets through. Every setting that makes the sensor send more often costs battery.

5The Hugin NFC app

Hugin is an optional Android app for working with the sensor on site, over NFC. It needs an Android phone with NFC and GPS, and an Yggio user account. The sensor must also be registered in Yggio with your organisation as its owner: Hugin checks this with Yggio before it lets you work with the sensor. Hold the phone to the sensor as in Finding the NFC antennas. The app then shows the serial number, the application and its version, the state (for example joined), battery, link and region information, and the DevEUI. Depending on your rights in Yggio, it can read and apply configuration profiles, including one scanned as a QR code from the VSM Configuration Tool, and update the device time and position.

Installation, sign-in, flashing and troubleshooting are in the Hugin NFC app manual.

6Maintenance and removal

Battery

The battery is built in (4,000 mAh) and lasts well over ten years with the default settings in a good network (SF7–SF9). Frequent reporting and a weak link shorten it.

Removing Square Sound

Slide dental floss behind the sensor and saw gently through the adhesive.

Moving to another network server

Delete the device from the old network server and add it to the new one. The sensor’s link check then fails, it leaves the old network and joins the new one. This usually takes one to two days. With the Hugin app you can restart it at once instead (Toggle On/Off), but that also resets any custom settings.

Storage and disposal

  • Store unused sensors at +10 to +30 °C.
  • The sensor contains a non-replaceable lithium manganese dioxide (LiMnO₂) battery, one of the most stable lithium chemistries. Do not open the sensor, and do not puncture it or heat it above +80 °C.
  • When the battery is empty, dispose of the whole sensor as a battery, for recycling. Near the end of its life the battery normally swells a little; this is expected.

7Troubleshooting

ProblemWhat to do
No sound levels arriveThe sensor sends sound levels only while it is joined, every Sound Average Time (15 minutes by default). In wake-on-sound mode (Sound Threshold above 0) it sends the sound alarm instead of levels.
Sound levels higher than expectedA sound source unrelated to what you want to measure, such as a fan, ventilation or a loudspeaker, is skewing the reading. Move the sensor to where it measures the sound you want.
The sound alarm never comesThe alarm works only in wake-on-sound mode: set the Sound Threshold to 6–18 dB and the Minimum Sound Level to the level that should raise the alarm.
Humidity reads too high after condensationWater on the sensor (dew) affects the readings until it has dried.
Temperature reads too high or too lowCheck the place: direct sun, a radiator or a draught nearby gives misleading readings.
No position, or a poor oneA position needs a cloud service that supports Wi-Fi positioning, for example Yggio, and enough 2.4 GHz access points that the service knows; networks on 5 GHz only are not seen. See How Wi-Fi positioning works.
Nothing happens when I hold the phone to itCheck that NFC is on and the phone case is off. Lay the phone flat against the lower left corner and move it slowly until it signals contact, then hold it still (see Finding the NFC antennas).
Join Request in the network server, but no Join AcceptCheck the keys, the JoinEUI 70B3D52C0001D4C3, the LoRaWAN version (1.0.4), the regional parameters (RP002-1.0.3) and the frequency plan. In US915 and AU915, the sub-band must match the gateway.
Nothing at all in the network serverCheck that the gateway is on and online, and that the sensor is in range and not inside a closed metal enclosure. Then start a new join with NFC, as in step 3.
“MIC mismatch”The keys are wrong. Check that they belong to this sensor and are typed correctly.
Messages arrive, but the decoder shows no readingsThe decoder has usually missed the application identity: send 00 on port 15, and check that the decoder is up to date (see Which application is in the sensor).
The Hugin app loses the connectionHold the phone still until the app has finished (see Finding the NFC antennas).
A new setting has no effectA downlink arrives only after the sensor’s next message, and later on a busy network (see Changing the settings). Check that it is still queued, and that it was made for the rulesCrc32 your sensor reports.
Messages missing or irregularCheck RSSI and SNR. The sensor may be too far from the gateway, or shut inside metal. Some channels can also be disturbed by interference on the same frequency band, for example from a nearby cellular transmitter or an RFID reader.

8Technical reference

For integrators. The values below are for the application Square-comfort-sound R31–R33. Other versions can differ: check the VSM application documentation or the VSM Configuration Tool for yours.

Which application is in the sensor

Right after it has joined, the sensor sends its application identity, the rulesCrc32, on port 15. The decoder uses it to pick the right translation, and you need it to make the right downlinks. For this application it is:

ApplicationSquare-comfort-sound
VersionR31–R33
rulesCrc322292020255 (hex 889D741F)

If you missed the message, send 00 on port 15 and the sensor sends its identity again. The Hugin NFC app also shows the application and its version on site.

Settings, ids and defaults belong to one application version. If your sensor reports another rulesCrc32, look that number up in the VSM application documentation or the VSM Configuration Tool instead of using the tables here.

Alternative applications: besides Square-comfort-sound, Sensative can offer other VSM applications for the same hardware. They are available in the Hugin NFC app (Android) and can also be loaded into the sensor over LoRaWAN. Ask Sensative which applications fit your use. After a change, ask for the identity with 00 on port 15 and use the documentation for that application.

LoRaWAN and ports

LoRaWANMAC 1.0.4, regional parameters RP002-1.0.3, class A, OTAA, max EIRP 14 dBm
JoinEUI70B3D52C0001D4C3 (all Square and Puck sensors)
PortDirectionWhat it carries
1UplinkReadings and alarms (see Messages)
11UplinkThe same outputs in compressed form
15UplinkApplication identity (rulesCrc32), first thing after a join
15Downlink00 asks the sensor to send its application identity again
23UplinkWi-Fi scan, for positioning
2DownlinkSettings and read requests (see Settings on port 2)
2UplinkThe sensor’s answer: the values it now has
7DownlinkA whole configuration in one payload (see A whole configuration on port 7)
7UplinkThe status of that configuration: None, Applied, Error or Dirty

Messages

Each output has an id and a scale. “Confirmed” outputs are acknowledged by the network server.

OutputIdSize and scaleUnitConfirmedSent
soundLevelB52 bytes, × 0.1dB (RMS)NoEvery Sound Average Time: the average sound level (not in wake-on-sound mode)
soundAvgMaxB84 bytes, × 0.1dB (RMS)NoWith soundLevel: the peak level within the average (not in wake-on-sound mode)
soundAlarm811 byte0 = off, 1 = onYesWake-on-sound mode only: when the level exceeds the Minimum Sound Level, and off again after the Sound Alarm Timeout
tempB02 bytes, × 0.01°CNoOn a change larger than the Temperature Threshold
averageTempB12 bytes, × 0.01°CNoEvery Average Temperature Interval
tempAlarm801 byte0 = no alarm, 1 = high, −1 = lowYesWhen the alarm state changes
humidityB32 bytes, × 0.01% RHNoOn a change larger than the Humidity Threshold
averageHumidity902 bytes, × 0.01% RHYesEvery Humidity Interval, if changed by more than the Humidity Threshold
batteryPercentA01 byte% (estimated)NoOnce a week

Settings

The defaults are the values the sensor starts with. The id is what a port 2 downlink uses. Values are sent in the steps shown: a setting in steps of 0.01 is sent as a hundred times its value.

SettingName in the applicationIdWhat it doesUnitRangeDefault
Temperature ThresholdtempHysteresisB2Change in temperature needed before a new reading is sent. Smaller changes are not reported, which saves battery and air time.°C, steps of 0.010.1–1270.5
Average Temperature IntervalaverageTempIntervalMinutesA2How often the average temperature is sent. It is sent every interval, whether it has changed or not.minutes2–12760
Temperature Low Alarm LeveltempAlarmLowLevelA3Low alarm level. Must be below the high level, or the alarm is off.°C−50 to +702
Temperature High Alarm LeveltempAlarmHighLevelA4High alarm level, near the product’s highest ambient temperature by default. Must be above the low level, or the alarm is off.°C−50 to +8060
Humidity ThresholdhumidityTresholdB4Change in humidity needed before humidity or average humidity is sent. Above 100 it is in effect off.% RH, steps of 0.010.1–1002
Humidity IntervalaverageHumidityIntervalMinutesA5How often the average humidity is worked out.minutes1–12760
Roaming Network CountroamNetworkCountA1Number of LoRaWAN network identities to try in turn (see Network and roaming).number1–151
Max Power IndexmaxPowerIndexA8Highest LoRaWAN power index the sensor may use, join included. The default leaves out DR0.index0–1616
LoRaWAN power filter factor uppowerIndexFilterFactorUpA6How slowly the sensor follows its own adaptive data rate towards a slower setting. 1 = no filter, 10 = very slow.number1–503
LoRaWAN power filter factor downpowerIndexFilterFactorDownA7The same, towards a faster setting.number1–503
Sound ThresholdsoundThresholdA90: the sensor measures the sound level itself and sends average and peak. 6–18: wake-on-sound with the sound alarm, where the sensor wakes when the level changes by more than this and is above the Minimum Sound Level. Uses more battery; 0 is recommended for most uses.dB0–18 (in use 6–18)0
Minimum Sound LevelsoundMinLevelAAIn wake-on-sound mode: the level the sound must exceed to wake the sensor and set the sound alarm.dB45–9245
Sound Average TimesoundAvgMinutesABHow often the average sound level is worked out and sent, with the peak.minutes1–12715
Sound Alarm TimeoutsoundAlarmTimeoutMinutesACHow long the sound alarm stays on, give or take a minute. It does not retrigger or reset during that time.minutes2–1275

Device registers

These belong to the sensor’s firmware rather than to the application, but the application uses them and they can be changed the same way. Leave them as they are unless you have a reason.

RegisterNameIdWhat it doesUnitRangeDefault
Downlink TimeoutLINKCHECK_TIMED0How long the sensor goes without hearing from the network before it gives the network up and becomes unjoined. Any downlink, an acknowledgement included, starts the time again. From half the time on, every uplink is sent confirmed; from 80 % on, the sensor also sends link checks of its own. 0 turns the check off. The sensor sets it back to 24 hours each time it starts.seconds300–2,592,00086,400
TX Power RangeTX_POWER_RANGED8The power index range for fast adaptive data rate: lowest in the low byte, highest in the high byte, each 0 (the region’s best) to 16 (DR0, maximum power). Raising it costs a lot of battery.2 bytes0–65,535

Released profiles

No ready-made profiles are released for this application. The sensor starts with the defaults in the settings table; to change them, use Custom in the VSM Configuration Tool.

Settings on port 2

A port 2 downlink is a list of records of 5 bytes each: one byte for the setting’s id, then the value as a signed 32-bit integer, most significant byte first. The value is in the setting’s own steps: a temperature threshold of 0.2 °C in steps of 0.01 is sent as 20. Negative values are written in two’s complement, so −10 becomes FF FF FF F6. The sensor applies the values and answers on port 2 with the values it now has.

The ids belong to one application version. Another version can use the same id for a different setting, so a downlink made for one version can change the wrong setting in another. Always make the downlink for the rulesCrc32 the sensor itself reports.

Reading values

A port 2 downlink of one to four bytes is a read request: the sensor sends back the current value of each id in it.

Port 2 downlinkThe sensor answers with
04Current air temperature, in hundredths of a degree
05Current air humidity, in hundredths of a percent
B2The Temperature Threshold now set (any setting id works the same way)
15The current sound sensor reading

A whole configuration on port 7

The VSM Configuration Tool can also pack a configuration into a single port 7 payload. It starts with the application’s CRC and ends with a checksum of the configuration (configCrc32). The sensor reports the result on port 7: None, Applied, Error or Dirty.

Worked example 1: A finer sound record

Send the average sound level, with its peak, every 5 minutes instead of every 15. Both examples were made in the VSM Configuration Tool for rulesCrc32 2292020255. Send one of the payloads, port 2 or port 7, not both.

SettingValueSent asRecord
Sound Average Time5 min5AB 00 00 00 05
Port 2 (hex)AB 00 00 00 05
Port 2 (base64)qwAAAAU=
Or port 7 (hex)88 9D 74 1F 02 05 AB 00 00 00 05 00 2A EB 0D A3

Worked example 2: A noise alarm for a hotel room

Switch to wake-on-sound and raise the alarm when the level goes above 70 dB, holding it for 10 minutes. In this mode the average and peak levels are no longer sent.

SettingValueSent asRecord
Sound Threshold6 dB6A9 00 00 00 06
Minimum Sound Level70 dB70AA 00 00 00 46
Sound Alarm Timeout10 min10AC 00 00 00 0A
Port 2 (hex)AC 00 00 00 0A AA 00 00 00 46 A9 00 00 00 06
Port 2 (base64)rAAAAAqqAAAARqkAAAAG
Or port 7 (hex)88 9D 74 1F 02 0F AC 00 00 00 0A AA 00 00 00 46 A9 00 00 00 06 00 EA B8 0B 5D

9Specifications

SensorsSound level (digital microphone), temperature, humidity
Sound range45–92 dB (RMS), average and peak, or a wake-on-sound alarm
Temperature accuracy±0.2 °C
Humidity accuracy±1.8 % RH
RadioLoRaWAN 1.0.4, class A, OTAA; JoinEUI 70B3D52C0001D4C3
Frequency plansEU868 · US915 · AU915 · AS923-1 · AS923-2 · KR920 · IN865
RangeUp to 10 km in line of sight
ConfigurationNFC (Android) and over the air
ApplicationVSM application Square-comfort-sound (R31–R33)
PositioningWi-Fi geopositioning via a cloud service
BatteryBuilt-in LiMnO2, 4,000 mAh, well over ten years
IP ratingIP63
Operating temperature−20 to +60 °C
Dimensions58 × 58 × 15 mm
Weight55 g
MountingAdhesive, or the optional Square screw mounting kit

10Support

Sources: Sensative Docs, Square Sound, FAQ Square & Puck and Hugin NFC application (read 24 October 2026); VSM Configuration Tool, application data for Square-comfort-sound (read 26 October 2026); VSM application documentation on GitHub (2292020255-Square-comfort-sound); VSM translator (open source); specifications from the sensative.com product data; Wi-Fi positioning: Semtech, Wi-Fi geolocation with LoRa Edge.