Chapter 18: Baseline Privacy Interface (BPI)
STANDARD Revision 1.0
C4® CMTS Release 8.3 User Guide
© 2016 ARRIS Enterprises LLC. All Rights Reserved.
595
Parameter Name
BPI Mode
Valid Range in
Seconds
Recommended Default
Value in Seconds
Authorization Reject Wait Timeout
BPI and BPI+
10-600
60
SA Map Wait Timeout
BPI+ only
1-10
1
SA Map Max Retries
BPI+ only
0-10
4
BPI Initialized State Configuration Settings
In normal operation the procedures given above are used before modems register. There are a limited number of BPI
configuration values that may be changed after the modem has passed BPI initialization. You can use CLI commands or a
MIB browser to modify these values. The Authorization and TEK valid lifetimes can be changed, and Authorization and TEK
keys can be reset.
Modifying certificates is covered in
Provisioning X.509 Certificates
docsBpi2CmtsAuthCmLifetime
The value of this object is the lifetime in seconds that the C4/c CMTS assigns to an authorization key for this CM. The no
value of this command sets the value to default: 604800.
(UCAM) Use the following command to set the authorization key lifetime:
configure interface cable-mac <mac> cable privacy kek-cm <cm-mac> life-time <seconds> [no]
Example:
configure interface cable-mac 1 cable privacy kek-cm 1122.3344.5566 life-time 604800
Where: 122.3344.5566 = the CM MAC address
604,800
= the time in seconds (seven days) of the authorization key lifetime.
docsBpi2CmtsAuthCmReset
(UCAM) The setting of this object causes the C4/c CMTS to invalidate the authorization key for this CM:
configure interface cable-mac <mac> cable privacy kek-cm-reset <cm-mac> send-auth-invalid <value>