Encryption; Zeroize Keys From Radio; Protected Keys; Global Encryption - L3Harris XL Extreme Series Operator's Manual

14221-1800-2050, Rev. G

6.20 ENCRYPTION

6.20.1 Zeroize Keys from Radio

It may be necessary to remove keys because of compromise or expiration.
To zeroize keys from the radio:
1. Press the Menu/Select button to access the main menu.
2. Press the left or right navigation buttons to display the SECURITY menu.
3. Press the up or down navigation buttons highlight ZEROIZE KEYS and press the Menu/Select
button.
4. Press the YES softkey to remove the keys. This will also remove the keysets.

6.20.2 Protected Keys

The Protected Keys feature transfers P25 Voice Keys from L3Harris Key Loader to the radio that
have been wrapped (AES) or encrypted (DES) with Key Protection Keys (KPKs). KPKs are
nothing more than unprotected Key Encryption Keys (KEKs). The KPKs need to be loaded into
the radio before the Protected Keys are loaded. Once loaded into the radio, the KPKs are used
to unwrap (AES) or decrypt (DES) the Protected Keys.

6.20.3 Global Encryption

Global Encryption can be enabled when encryption keys are loaded on the radio and the selected
Zone/System is encrypted. When Global Encryption is enabled on the radio, a Global Key is used
for all encrypted transmissions until:
Global Encryption is disabled.
•
• A new personality is activated.
• The active keyset is changed.
The system is changed.
•
Global Encryption behavior is available on all channels that support encrypted communications.
To enable Global Encryption and/or change Global Encryption Key:
1. Press the Menu/Select button to access the main menu.
2. Press the left or right navigation buttons to display the SECURITY menu.
96