Hardware Key Storage (CRYPTR micro)-Based Encryption
In this mode of operation, the encryption keys are stored on a SDIO-based secure device CRYPTR
micro. The CRYPTR micro is inserted into the SD slot of an MCC 7100 IP Dispatch Console, and can
be left there throughout laptop reboots and MCC 7100 IP Dispatch Console software installations.
NOTICE:
Windows 8 64-bit operating system that you can install on dispatch consoles outside the
ASTRO
®
25 Radio Network Infrastructure (RNI) does not support hardware-based encryption
which is the CRYPTR micro device.
On certain laptops, the CRYPTR micro must be removed after a reboot and then reinserted.
This behavior is dependent on specific peripheral hardware installed in the laptop. See
Detection of CRYPTR micro Device Troubleshooting on page 80 for details.
The device has a form factor of a microSD card and uses a microSD to SD adapter to fit into the SD
slot of a computer.
Figure 2: microSD to SD Adapter
Encryption keys stored on the CRYPTR micro have the following information:
• Common Key Reference (CKR)
• Keyset
• Key ID
• Algorithm ID
• Key Material
Keyset information is also stored on the CRYPTR micro. The MCC 7100 IP Dispatch Console reads
this information from the CRYPTR micro when the dispatch application starts up. It then associates
each key with a talkgroup or a call type (MSEL, Patch) by matching the CKRs. If a match is found for a
talkgroup or a call type, the MCC 7100 IP Dispatch Console is able to make secure calls on that
talkgroup and able to decrypt incoming audio. If a match is not found, the Dispatch Console reports key
failure during an attempt to use that talkgroup in secure mode.
NOTICE: Before ejecting the CRYPTR micro, close all applications that use the CRYPTR
micro. Eject it using the Windows Safely Remove Hardware feature in the desktop tray. The
name for the CRYPTR micro device is generic SDIO device.
A CRYPTR micro does not have any keys following an initial installation or an upgrade. The two
methods of loading keys onto the CRYPTR micro are:
1 For keyloading using a Key Variable Loader (KVL 4000), eject the CRYPTR micro from the MCC
7100 IP Dispatch Console and insert it into the KVL 4000 using a keyloading cable for CRYPTR
micro.
2 Use the KVL 4000 user interface to program the needed keys into the CRYPTR micro. Then,
reinsert the CRYPTR micro into the MCC 7100 IP Dispatch Console and restart the MCC 7100 IP
Dispatch Console Dispatch.
MN000672A01-E
Chapter 2: MCC 7100 IP Dispatch Console Setup and Installation
56 Send Feedback
To Next Page
Loading...
Need help?
General