14221-1800-2050, Rev. G
96
6.20 ENCRYPTION
6.20.1 Zeroize Keys from Radio
It may be necessary to remove keys because of compromise or expiration.
To zeroize keys from the radio:
1. Press the Menu/Select button to access the main menu.
2. Press the left or right navigation buttons to display the
SECURITY
menu.
3. Press the up or down navigation buttons highlight
ZEROIZE KEYS
and press the Menu/Select
button.
4. Press the
YES
softkey to remove the keys. This will also remove the keysets.
6.20.2 Protected Keys
The Protected Keys feature transfers P25 Voice Keys from L3Harris Key Loader to the radio that
have been wrapped (AES) or encrypted (DES) with Key Protection Keys (KPKs). KPKs are
nothing more than unprotected Key Encryption Keys (KEKs). The KPKs need to be loaded into
the radio before the Protected Keys are loaded. Once loaded into the radio, the KPKs are used
to unwrap (AES) or decrypt (DES) the Protected Keys.
6.20.3 Global Encryption
Global Encryption can be enabled when encryption keys are loaded on the radio and the selected
Zone/System is encrypted. When Global Encryption is enabled on the radio, a Global Key is used
for all encrypted transmissions until:
•
Global Encryption is disabled.
•
A new personality is activated.
•
The active keyset is changed.
•
The system is changed.
Global Encryption behavior is available on all channels that support encrypted communications.
To enable Global Encryption and/or change Global Encryption Key:
1. Press the Menu/Select button to access the main menu.
2. Press the left or right navigation buttons to display the
SECURITY
menu.