User Guide
DDOC0099-000-AH
DTS1 CSfC
5 - 7
Encryption
© 2020 Curtiss-Wright Defense Solutions
Revision 6.0
5.3.4.4
Load / Unload Stored Hardware Encryption Key to RMC Module
NOTE
The cmkey load / unload commands are typically not required. The RMC module stores a key
checksum in its memory. When the RMC module is inserted into the DTS1, all stored keys are
queried and the matching key is automatically loaded. If the key associated with the RMC module
is not stored in the crypto module, an error is reported.
When a stored key is loaded into the crypto module, it must specify the installed RMC module
using the
cmkey --load
option. The
--load
option must be followed by the memory location
number that was used to save the desired key. The RMC module is specified with the -
s 0
option.
To load a key to the RMC module type
cmkey --load [0 thru 31] –s 0
and press E
NTER
key.
Example
If an error message is returned, use the
cmkey
command (without options) to examine the
location.
Once the above command is executed, the selected RMC module will be associated with the
loaded DEK for its data encryption. To disassociate a key with the RMC module, the unload option
is used with the cmkey command, as shown below. This command requires that the RMC module
be identified by slot number (-s 0). To unload a key from the RMC module type
cmkey --unload
[0 thru 31] –s 0
and press E
NTER
key.
Example
5.3.4.5
Autoload Key
NOTE
The auto-load command is not required when reinstalling or swapping a RMC module whose key
is saved in the crypto module nor is it required between power cycles, provided the login creden
-
tials are saved.
This command automatically matches the correct key in the encryptor memory to the RMC module
in the specified slot (e,g. -s 0). This feature works for any RMC module that has its key stored in
the DTS1 crypto module. This command is especially useful in reestablishing the DTS1 to RMC
module key association after zeroization or installation of RMC modules from the field into a lab
DTS1. In both cases the keys must be stored or restored in the DTS1 crypto module. To autoload
a key type
cmkey --auto –s 0
and press E
NTER
key.
Example
5.3.4.6
Delete Key
This command removes the specified key from crypto module storage only and has no effect on
the RMC module. The value following the --del parameter is the position number used in the Save
command. To delete a key from the crypto module type
cmkey --del [0 thru 31]
and press
E
NTER
key.
cw_dts>
cmkey --load [0 thru 31] –s 0
[cmkey]
CMKEY: action=load slot=0 status=OK
[!cmkey] OK
cw_dts>
cmkey --unload [0 thru 31] –s 0
[cmkey]
CMKEY: action=unloaded slot=0 status=OK
[!cmkey] OK
cw_dts>
cmkey --auto –s 0
[cmkey]
CMKEY: action=auto slot=0 status=OK
[!cmkey] OK
