
6: ENCRYPTION OPTION
This chapter assumes knowledge of the standard operations of the Guardian II portable radios
detailed in the preceding chapters of this manual.
Introduction
When operating in the digital mode the radio is capable of secure communications by means of
software-based encryption and is fully compatible with any radio using P25 digital encryption
standards AES or DES-OFB. When the radio is operating in the secure mode, the transmission of
all tone squelch signals is disabled. The radio displays a key icon indicating that encryption is
active. Encryption keys are assigned on a channel by channel basis via the PC Programmer or the
radio’s keypad.
The PC Programmer has an Encryption Lock option on a channel-by-channel basis that provides
the opportunity to ensure that selected channels always transmit an encrypted signal.
Encryption is not available when the radio is operating in the analog mode.
Programming/Activation
•
Assign Encryption keys to channels using the PC Programmer or the main menu (
refer to
“Encryption Menu”).
•
Use the preprogrammed auxiliary button (toggles encrypted channels on and off).
•
Use the preprogrammed two position collar switch (turns encryption on and off).
•
Use the KVL device (to add keys to radio).
Zeroizing Keys
The radio can be programmed to immediately zeroize all encryption keys by pressing and
holding the Emergency button for 1 second (if assigned). The radio can also zeroize all
encryption keys, or can selectively zeroize individual keys using the radio’s keypad from the
Zeroize (
ZEROIZE
) submenu of the Encryption (
KMGR
) menu.
Encryption Keyfill
The radio can store up to 32 encryption keys and retains them until they are zeroized. Keyfill is
accomplished through the radio’s side connector using the PC Programmer or a key variable
loader (KVL CX or DX) device. The PC Programming cable or DES encryption cable is used to
load keys.
To perform keyfill using a KVL device:
1.
Turn off the target radio.
2.
Connect the KVL to the target radio.
3.
Turn on the radio. The radio automatically detects the KVL and
KVL
KEYFILL
displays. If not,
check the connections, and repeat the steps.
4.
Scroll to highlight the desired key slot and press
<ENT>
to set the key slot selection.
5.
To verify the key identification, press
ID
for the key ID display.
6.
Press
TAG
to return to the key display.
7.
Press
<ENT>
to access the key transfer display.