Medias Mediatrix 1204, Reference Manual

Page: 184 / 390

Chapter 12 - Configuration File Download Configuration File Download Server
158 Mediatrix 1204
Configuration Files Encryption
You can secure the exchange of configuration files between the server and the Mediatrix 1204. A privacy key
allows the unit to decrypt a previously encrypted configuration file. This applies to files downloaded via TFTPor
HTTP.
To encrypt a configuration file (generic or specific), you must use the MxCryptFile application. MxCryptFile is
a command line tool that encrypts files before sending them to the Mediatrix 1204 unit. Contact your sales
representative for more details.
Configuration File Decryption on the Mediatrix 1204
The following describes how to decrypt a previously encrypted generic or specific configuration file. You must
have one key for the generic configuration file and another key for the specific configuration file.
X
To decrypt a configuration file:
1. In the configFileFetchingMIB, set the proper decryption variable with the secret key used to decrypt
the configuration file.
The key is encoded in hexadecimal notation. You can thus use characters in the range 0-9, A-F. All
other characters are not supported.
Each character encodes 4 bits of the key. For instance, a 32-bit key requires 8 characters.
• If you enter too many bits, the key is truncated to the first 448 bits.
• If you do not enter enough bits, the key is padded with zeros.
For instance, a 32-bit key could look like the following: A36CB299.
This key must match the key used for the encryption of the relevant configuration file.
If the variable is empty, the configuration file is not decrypted.
2. Set the configFilePrivacyEnable variable to enable .
The Mediatrix 1204 will be able to decrypt the next encrypted generic or specific configuration file.
If this variable is set to
disable , the configuration file is not decrypted by the unit and the
configuration update fails.
Table 99: Decryption Variables
Configuration File Variable
Generic configFilePrivacyGenericSecret
Specific configFilePrivacySpecificSecret