Chapter 18: Baseline Privacy Interface (BPI)
STANDARD Revision 1.0
C4® CMTS Release 8.3 User Guide
© 2016 ARRIS Enterprises LLC. All Rights Reserved.
596
Example:
configure interface cable-mac 1 cable privacy kek-cm-reset 1122.3344.5566 send-auth-invalid
docsBpi2CmtsTEKLifetime
(UCAM) The value of this object is the lifetime, in seconds, the C4/c CMTS assigns to keys for the respective TEK. The no
value of this command defaults to 43200.
configure interface cable-mac <mac> cable privacy tek-said-reset life-time <seconds> [no]
Example:
configure interface cable-mac 1 cable privacy tek-said 1234 life-time 43000
docsBpi2CmtsTEKReset
(UCAM) The setting of this object causes the C4/c CMTS to invalidate the TEK for this SAId:
configure interface cable-mac <mac> cable privacy tek-said-reset <SAId>
Example:
configure interface cable-mac 1 cable privacy tek-said-reset 1234
Digital Certificates (BPI+ Only)
In normal operation, configuration of certificates is not required. In cases requiring removal of certificates, change of trust
status, addition of new certificates, etc., the respective Baseline Privacy certificate MIB table entries must be added,
deleted, or modified.
For BPI+ to authenticate cable modems, the DOCSIS® (or EuroDOCSIS) Root Certificate must already be provisioned in the
in the docsBpi2CmtsCACertTable. TheC4/c CMTS loads these certificates at power-up.
If a CA certificate is not present or there is a new DOCSIS Root Certificate to add, then it must be manually added. This
certificate may be added through a MIB browser, BPI-related CLI commands, or through BPI import and export commands.
The BPI CLI commands allow certificates to be added individually from the C4/c CMTS command line. The import and
export commands allow one or many certificates to be added. Both the CM and CA certificate database can be provisioned
through the BPI CLI and through import and export commands.