For test or certification, you may be requested to set the device in public key.
The transceiver must integrate the “emulation mode” command, to switch from private key to public key.
This mode enables the authentication by the emulator of the messages emitted by the transceiver and, conversely, the authentication by the transceiver of the messages transmitted by the emulator during downlink transactions.
The emulator can run in a mode where the authentication is disabled, however, as the device under test uses its private key, it will not be able to authenticate the downlink messages sent by the emulator during bi-directional transactions.
A list of transceivers is available here.