User Guide DDOC0099-000-AH
DTS1 CSfC 12 - 5 Command Line Interface
© 2020 Curtiss-Wright Defense Solutions Revision 5.0
12.3.3 cmkey
NOTE
The DTS1 has only 1 RMC slot. As a result, the -s option is always -s 0.
Description
The cmkey command allows for management of keys on the crypto module. For status
information, issue cmkey without options.
Syntax
cmkey [-h | --help | --version]
cmkey -e KEY -m MAC [-s SLOT] [--save LOC] [-F]
cmkey -p PSK -d DEK [-s SLOT] [--save LOC] [-F]
cmkey -s SLOT [--load LOC | --auto | --unload] [-F]
cmkey --del LOC
cmkey --kek
cmkey --zero [--nowait]
Options
-h, --help............................Print help message
--version............................Print program version
--auto ..................................Auto-load the saved key for RMC selected by -s.
--save <loc> ........................Save key to non-volatile memory location (0-31).
--del <loc>..........................Delete/zeroize a saved key.
--load <loc> ........................Load a saved key for RMC selected by -s.
--unload..............................Unload/zeroize key from RMC selected by -s.
-s, --slot <num>................RMC slot number (0, all) for which to load/install a key.
-e, --ekey <hex>.................Encrypted DEK (data encryption key) 40 byte value represented by
80 hex characters.
-m, --mac <hex> ...................MAC (message authentication code) 48 byte value represented by
96 hex characters.
-p, --psk ..............................Plain Text PSK (pre-shared key) 32 byte value represented by 64
hex characters.
-d, --dek ..............................Plain Text DEK (data encryption key) 32 byte value represented by
64 hex characters.
-k, --kek ............Generates KEK (key encryption key).
-r, --resetkek ................Reset the key used to encrypt the KEK to the PSK.
NOTE
Must provide existing PSK (-p option) when using this option.
-u, --userpsk .....................User defined plain text PSK (pre-shared key) 32 byte value
represented by 64 hex characters.
NOTE
The --zpsk option will restore the unit back to a state prior to assignment of the PSK making the
unit inoperable. Will prompt user prior to performing the erase.
--zpsk ..................................Zeroize the crypto unit PSK.
-Z, --zero............................Zeroize crypto module. Clears all saved/loaded keys.
--nowait..............................Do not wait until zeroization is complete before returning.
-F, --force..........................Force key load to RMC if key mismatch is detected.
NOTE
Options --save, --del, and --load operate on 32 non-volatile memory locations for key
storage. These locations are within the crypto module. For security, the saved keys cannot be
retrieved or viewed. Use of these memory locations is not required, and must be explicitly
requested with option --save when entering a key. By default, keys are directly loaded/installed
for the RMC selected with option -s.
Example: Get status regarding keys
cw_dts> cmkey
[cmkey]
CMKEY: id=<int> init=<b> login=<b> s0=<b> s1=<b> s2=<b> deks=<mask> status=<sts>
[!cmkey] <summary>
To Next Page
Loading...
Need help?
General
