Motorola KVL 4000 - 7 Using KVL 4000 in OTAR Systems; 7.1 Setting Up the KVL for KMF Operations

7UsingKVL4000inOTARSystems
ThischapterisapplicableifyourKVLisconguredtosupportKMFoperation.
TheMotorolaOver-the-AirRekeying(OTAR)systemisasecurecommunicationssysteminwhichencryptionkeys
canbesenttosubscriberunitsviaradiotransmissioninadditiontodirectlyconnectingaKVLtoaradiotoload
keys.OTARprovidesexibilityandconvenienceinmanagingandadministeringencryptionkeys.
OneoftheinfrastructurecomponentsinanOTARsystemistheKeyManagementFacility(KMF).TheKMFisa
WindowsNT-basedcomputerthatisresponsiblefor:
•StoringandmanagingtheencryptionkeysforanOTARsystem
•Initiatingkeytransmissionstoradios
BeforeusingtheKVLtoperformtasksinanOTARsystem,programseveralparameters,asdescribedin
7.1SettingUptheKVLforKMFOperations,page7-1.
TheKVLcaninterfacewiththeKMFtoprovidethefollowingfunctions:
•TransfertheencryptionkeysrequiredbytheOTARsystemfromtheKVLtotheKMF–Youloadthe
requiredkeysintotheKVL,connecttheKVLtotheKMFviaastandardkeyloadcable,andtransferthe
keys(oneatatime)totheKMFforstorageandmanagement(see4.1LoadingaSelectedKey,page4-1).
TheKMFthentransfersencryptionkeystotargetdevicesviaOTAR.
•DownloadencryptionkeysfromtheKMFintotheKVL–Twomethodsareavailablefortransferring
encryptionkeyswhenOTARcannotbeperformed,suchasforradiosthatdonotsupportOTAR,radiosthat
areoutofrange,orradiosthathavenotyetbeeninitialized.ThedownloadfromtheKMFtotheKVL
maybeperformedeitherbydirectcableconnectionorthroughamodemconnection.Thetwomethodsof
downloadingkeysare:
–IndividualkeysaredownloadedtotheKVLkeydatabasewhicharethenloadeddirectlyintotarget
devices(seeChapter4KVL4000–LoadingEncryptionKeysintoTargetDevices).Thismethodrequires
thatyouknowtheCKRsofthekeysintheKVLkeydatabase.
–WiththeuseoftheStoreandForwardASTRO
®
25feature,KeyManagementMessages(KMMs)–
usuallycontainingencryptionkeys–aredownloadedtotheKVLthatisinturnusedtoupdatetarget
devices.ThisoperationdoesnotrequirethatyouknowtheCKRsofthekeysintheKVLdatabase.This
simpliesthekeyloadingprocedure.(See7.2.4UpdatingaTargetDevice,page7-15.)
7.1SettingUptheKVLforKMFOperations
BeforeusingyourKVLtoworkwithaKMF,programseveralKMF-relatedparameters.
Prerequisites:
YourKVLsupportsKMFoperation.
6871018P37-F-January2013
7-1