Draft 02 - Sep 1 2015
7-10
Viking Mobile Radio Operating Manual
Secure Communication (Encryption)
7.6.1
Programming by Keyloader
The following are the minimum parameters that need to be programmed in the radio to
perform OTAR. It is not necessary to program a TEK but it is necessary that a UKEK be
manually programmed to perform OTAR. If the radio does not contain a TEK, the KMF
initiates a warm start-up sequence in which a temporary TEK is transferred to the radio to
perform the key transfer.
UKEK
- This key normally has SLN (CKR) 61440 for DES protocol, SLN (CKR)
61442 for AES protocol, and Key ID 62880 (F5A0 hex).
Unit RSI
- This is normally initially the same as the P25 Unit ID and is set by
programming.
KMF RSI
- This RSI is normally 9,999,999 and should not need to be loaded since it
defaults to this number.
Verify that the above information was properly stored in the radio by viewing it using the
keyloader.
7.6.2
Radio OTAR Capabilities
The Over-the-Air-Rekeying (OTAR) capabilities of the SEM-equipped Viking Series
mobile are as follows.
Keysets
• Up to three keysets are used and it is assumed all three are always present. Keyset IDs 1
and 2 are for TEKs and only one is active at a time. Keyset ID 255 is for KEKs and is
considered active all the time.
• Each keyset can have up to 126 keys. However, 16 or less are normally used.
7.6.3
OTAR Option Switches
The following additional option switches can be programmed with the Viking mobile to
control OTAR functions.
Change Keyset
- Toggles the active keyset between Keyset 1 and Keyset 2. The new
active keyset is briefly displayed and then normal operation resumes. To change to the
other keyset, highlight it and press the Select Knob.
Clear/Secure
- This enables and disables encryption regardless of whether OTAR is
used. Refer to Section 7.3 for more information.
Erase Keys
- Erases all TEK and KEK keys contained in the radio.