Table of Contents
Advertisement
15 AES Encryption Upgrade
The Motorola PTP 500 Series bridges support link encryption using the NIST approved Advanced
Encryption Standard, HFIPS-197 UTH. This standard specifies AES (Rijndael) as a FIPS-approved
symmetric encryption algorithm that may be used by U.S. Government organizations (and others)
to protect sensitive information.
Link Encryption is not available in the standard PTP 500 Series system. A license key to enable link
encryption can be purchased from your Motorola Point-to-Point Distributor or Solutions Provider.
AES can be activated on receipt of the activation on the Motorola Systems Support Page.
There are two levels of encryption that are available to purchase:
128-bit
128 and 256-bit
Option 1 allows the user to encrypt all traffic sent over the wireless link using 128-bit encryption.
Option 2 allows the user to encrypt traffic using either 128 or 256-bit encryption. The configuration
process for both encryption variants is identical except for the selection of algorithm. The following
configuration example is for a 256-bit encryption key.
15.1 Configuring Link Encryption
After purchasing AES encryption for the PTP 500 Series wireless link, two new license keys will
be issued, one for each end of the wireless link. The following configuration process gives a step
by step guide to enabling AES link encryption on a PTP 500 Series bridge.
15.1.1 License Keys
The first step when configuring link encryption is to enter the new license keys in both 500 Series
wireless units.
Figure 126
system administrator. If you do not have access to the PTP 500 Series system administration
pages then please contact your designated system administrator.
It must be noted that configuring link encryption will necessitate a 500 Series bridge service outage.
Therefore it is recommended that the configuration process be scheduled during an appropriate
period of low link utilization. Motorola recommends the following process for entering new license
keys and minimizing service outage.
1. Open two browsers, one for each end of the link
2. Navigate to the 'License Key' data entry page for each end of the link
3. Enter the license keys and click the 'Validate license key' button at each end of the link. This
will allow the software to validate the license key prior to the system reset. (DO NOT CLICK
ARE YOU SURE POPUP DIALOG)
shows the license key data entry screen. This screen can only be accessed by the
AES Encryption Upgrade
172
Advertisement
Table of Contents
