Arris C4C - Baseline Privacy Cable Modem Configuration File Settings; Checkcertvalidityperiods (BPI+ Certificates); Enable;Disable BPI; Enable;Disable BPI+

Chapter 18: Baseline Privacy Interface (BPI)
STANDARD Revision 1.0 C4® CMTS Release 8.3 User Guide
© 2016 ARRIS Enterprises LLC. All Rights Reserved. 593
CheckCertValidityPeriods (BPI+ Certificates)
Setting this object to TRUE causes all chained and root certificates in the chain to have their validity periods checked
against the current time of day, when the C4/c CMTS receives an Authorization Request or authentication information
from the CM. A FALSE setting causes all certificates in the chain not to have their validity periods checked against the
current time of day:
Valid values: true|false
Default: false
Note: The respective period checking of certificates and their related chaining is not retroactive. The current checking state
is applied only to new incoming certificates and certificate chains.
(UCAM) To enable [disable] checking of certificate validity period:
configure interface cable-mac <mac> cable privacy chk-validity-period [no]
Example:
configure interface cable-mac 1 cable privacy chk-validity-period
Baseline Privacy Cable Modem Configuration File Settings
Enable/Disable BPI
For BPI operation the "COS Privacy Enable" setting (TLV type 4.7) must be set to "1". This activates data traffic encryption
on a per-flow basis. The setting is a sub tlv of the DOCSIS 1.0 Class of Service Configuration Setting. The default value of
"COS Privacy Enable" is "0".
1 = Enable; 0 = Disable. BPI default = 0.
A change to this setting takes effect when the modem re-registers.
Enable/Disable BPI+
For BPI+ operation the "Privacy Enable" setting (TLV type 29) must be set to "1". This activates data traffic encryption on a
per-CM basis. The default value of "Privacy Enable" is 1 or Enabled. The user must explicitly set the value to "0" to disable
the feature.