Motorola KVL 4000, User Manual

Page: 205 / 236

11
KVL 4000 – Converting Encryption
Keys
This chapter is applicable only if your KVL is configured to work in both ASN and ASTRO ® 25 modes of
operation.
If your KVL is configured to work in both ASN and ASTRO ® 25 modes of operation, you can convert encryption
keys between these two modes. Converting keys allows you to copy an ASN Traffic or Shadow key from its ASN
memory location (stored to a PID and containing a LID) and load it into an empty ASTRO
® 25 TEK or KEK
memory location (stored to a CKR and containing a KID), and the other way around.
11.1 When to Convert Keys
Converting keys is used most commonly for copying keys between ASN and ASTRO ® 25 in the KVL memory.
There may be occasions when you have an existing key in an ASN memory location and wish to duplicate it for use
on an ASTRO
® 25 target. By converting the key from the ASN memory to ASTRO ® 25 memory within the KVL,
you save the effort of recreating the key in the ASTRO ® 25 memory and reentering the encryption key data. You
may also convert keys from the ASTRO ® 25 memory and load them into the ASN memory.
11.2 Key Converting Restrictions and Guidelines
Observe the following restrictions and guidelines when converting keys:
• Only keys with AES-256, DES-OFB, DES-XL, DVP-XL, and DVI-XL algorithms can be converted.
• TEKs of the same algorithm type stored in ASTRO
®
25 memory cannot have duplicate KIDs (including
0000).
• Traffic Keys (ASN) can be converted only to Traffic Encryption Keys (TEK) locations in ASTRO ® 25
memory (and the other way around); Shadow Keys (ASN) can be converted only to Key Encryption Keys
(KEK) locations in ASTRO
® 25 memory (and the other way around).
• Keys can be converted only to an empty memory location; overwriting is not allowed.
• Keys must be converted one at a time.
11.3 Converting a Key from ASN to ASTRO 25
Prerequisites:
Only an Administrator can convert keys.
Procedure Steps
6871018P37-F - January 2013
11-1