Hardware Key Storage (CRYPTR micro)-Based Encryption
In this mode of operation, the encryption keys are stored on a SDIO-based secure device CRYPTR
micro. The CRYPTR micro is inserted into the SD slot of an MCC 7100 IP Dispatch Console, and can
be left there throughout laptop reboots and MCC 7100 IP Dispatch Console software installations.
NOTICE:
Windows 8 64-bit operating system that you can install on dispatch consoles outside the
ASTRO
®
25 Radio Network Infrastructure (RNI) does not support hardware-based encryption
which is the CRYPTR micro device.
On certain laptops, the CRYPTR micro must be removed after a reboot and then reinserted.
This behavior is dependent on specific peripheral hardware installed in the laptop. See
Detection of CRYPTR micro Device Troubleshooting on page 80
The device has a form factor of a microSD card and uses a microSD to SD adapter to fit into the SD
slot of a computer.
Figure 2: microSD to SD Adapter
Encryption keys stored on the CRYPTR micro have the following information:
• Common Key Reference (CKR)
• Keyset
• Key ID
• Algorithm ID
• Key Material
Keyset information is also stored on the CRYPTR micro. The MCC 7100 IP Dispatch Console reads
this information from the CRYPTR micro when the dispatch application starts up. It then associates
each key with a talkgroup or a call type (MSEL, Patch) by matching the CKRs. If a match is found for a
talkgroup or a call type, the MCC 7100 IP Dispatch Console is able to make secure calls on that
talkgroup and able to decrypt incoming audio. If a match is not found, the Dispatch Console reports key
failure during an attempt to use that talkgroup in secure mode.
NOTICE:
Before ejecting the CRYPTR micro, close all applications that use the CRYPTR
micro. Eject it using the Windows Safely Remove Hardware feature in the desktop tray. The
name for the CRYPTR micro device is
generic SDIO device
.
A CRYPTR micro does not have any keys following an initial installation or an upgrade. The two
methods of loading keys onto the CRYPTR micro are:
1
For keyloading using a Key Variable Loader (KVL 4000), eject the CRYPTR micro from the MCC
7100 IP Dispatch Console and insert it into the KVL 4000 using a keyloading cable for CRYPTR
micro.
2
Use the KVL 4000 user interface to program the needed keys into the CRYPTR micro. Then,
reinsert the CRYPTR micro into the MCC 7100 IP Dispatch Console and restart the MCC 7100 IP
Dispatch Console Dispatch.
MN000672A01-E
Chapter 2: MCC 7100 IP Dispatch Console Setup and Installation
56
Содержание MCC 7100 IP
Страница 2: ......
Страница 4: ...This page intentionally left blank...
Страница 6: ...This page intentionally left blank...
Страница 8: ...This page intentionally left blank...
Страница 16: ...Other System Updates and Considerations 168 MN000672A01 E Contents 16 Send Feedback...
Страница 18: ...This page intentionally left blank...
Страница 20: ...This page intentionally left blank...
Страница 22: ...This page intentionally left blank...
Страница 26: ...This page intentionally left blank...
Страница 150: ...This page intentionally left blank...
Страница 158: ...This page intentionally left blank...
Страница 164: ...This page intentionally left blank...
Страница 170: ...This page intentionally left blank...