Chapter 18: Baseline Privacy Interface (BPI)
STANDARD Revision 1.0
C4® CMTS Release 8.3 User Guide
© 2016 ARRIS Enterprises LLC. All Rights Reserved.
590
The default value is acceptable for normal operation. Using less than the minimum recommended value can degrade
system performance.
Caution: The TEK lifetime must be more than twice as large as the largest TEK CM grace time to prevent denied CM
registration.
(UCAM) Use the following command to configure the default TEK lifetime:
configure interface cable-mac <cm-id> cable privacy tek life-time <seconds> [no]
Example:
configure interface cable-mac 1 cable privacy tek life-time 43000
Default SelfSigned ManufCertTrust (BPI+Certificates)
This object determines the default trust of self-signed manufacturer certificate entries, contained in
docsBpi2CmtsCACertTable, created after setting the object:
Valid values: trusted|untrusted
Default:
untrusted
Caution: Self-signed certificates are a security risk. As a general rule, do not trust them.
Note: Valid self-signed certificates are marked trusted or untrusted depending on this MIB variable. If the default trust
value is set to untrusted and CA Certificates are learned, then these CA Certificates are considered untrusted and stored.
This is a one-time determination which is never re-evaluated unless the certificate is deleted and relearned.
Setting the trust value for default self-signed back to trusted does not automatically change the trust of previously learned
self-signed CA Certificates. To change the trust of previously learned self-signed CA Certificates, you must manually edit
the current certificate’s trust state or delete the certificate entry so that the certificate will be relearned.
(UCAM) Use the following command to configure the DefaultSelfSignedManufCertTrust:
configure interface cable-mac <mac> cable privacy default-cert-trust <value> [no]
Example:
configure interface cable-mac 1 cable privacy default-cert-trust untrusted