Page 3
CAUTION limiting software encryption configuration to using SSH only. DDOC0199-000 03/21/24 Revised as shown via change bars. 0324-0005 The Curtiss-Wright DTS1+ CSfC User Guide (DDOC0199-000) is made up of the following individual chapters and appendices. Chapter / Appendix Topic Content Revision...
Page 4
Solutions. Proprietary This document includes proprietary data of Curtiss-Wright Defense Solutions that shall only be duplicated, used, and disclosed, in whole or in part, with Curtiss-Wright Defense Solutions approval. The user agrees to treat this document in strict accordance with the terms and conditions of the agreement under which it was provided to them.
Page 12
RMC Module LED Fault Indications ....................10-2 Table 10.3 Encryptor Error Codes......................... 10-2 Table A.1 DTS1+ CSfC / RMC module Calculated Mean Time Between Failures..........A-5 Table B.1 Power Connector J1 Signals ......................... B-1 Table B.2 Power Lab Cable (VS-DTS1PWRCAB-0) ..................... B-1 Table B.3...
Page 13
The unit requires the use of a Removable Memory Cartridge (RMC) module. From this point forward, the product will be referred to as the DTS1+ CSfC and the associated cartridge will be referred to as the RMC module.
Page 14
User Guide DDOC0199-000-A9 CE Conformity 1.4.1 DTS1+ CSfC Curtiss-Wright has plans in place to certify, in accordance with directives 0214/30/EU, 2011/65/EU, and 2006/1907/EC, the following units: • VS-DTS1+SL-F • VS-DTS1+SL-FD conform to the applicable requirements of EN 55022, EN 55024, EN 50581, and EN 62368-1.
Page 15
DTN_support@curtisswright.com • Fax: (937) 252-1465 • World Wide Web address: www.cwcdefense.com Ordering Process To learn more about Curtiss-Wright Defense Solutions' products or to place an order, please use the following contact information. • E-mail: DTN_info@curtisswright.com • World Wide Web address: http://www.cwcdefense.com/...
Page 16
NOTE The Pre-Shared Key (PSK) is no longer maintained by Curtiss-Wright, instead, the user must assign their own PSK in a secure environment upon receipt. To ensure the PSK is protected, the user will have to perform a seal operation (via the CLI command cmpsk) to mask the PSK.
Page 17
HWFDE will need to be decrypted using the existing / current PSK before it can be migrated for use with a DTS1+ unit. Additional Information For additional information, contact Curtiss-Wright. Refer to paragraph 1.6 Technical Support for contact information. 1-Slot Data Transport System (CSfC)
The Curtiss-Wright DTS1+ CSfC (Figure 3.1) is a rugged Network Attached Storage (NAS) device with solid state storage capacities from 256 GB up to 8 TB. The DTS1+ CSfC provides data storage to assorted network clients via two IEEE 802.3 / 802.3u / 802.3ab Ethernet ports. The DTS1+ CSfC is a ruggedized unit designed to operate on vehicles, in field stations, or in laboratories.
RS-232 communication protocol (primarily used for configuring the DTS1+ CSfC) as well as a discrete zeroize and reset function. Connector J1 is used to connect the DTS1+ CSfC to 28 VDC (operating voltage). In addition, the DTS1+ CSfC has a removable panel located on the underside of the unit.
3.1.2 RMC Module One RMC module (Figure 3.5) is housed in the DTS1+ CSfC. The RMC module is accessed via a sealed door with a quarter-turn latch located on the front panel of the unit. The RMC module within the DTS1+ CSfC is also a rugged compact unit that can be personally transported with minimal precautions to a secure location or deployment.
Page 21
The second security layer is software data encryption. Both encryption processes are performed in the DTS1+ CSfC, one in the HW crypto module, the other by the Processor. The hardware encryption key is retained in the DTS1+ CSfC crypto module memory, the software encryption key is stored on the RMC module.
Page 25
• ACTIVITY (green): on when disk is accessed (not supported on some RMC module configurations) • FAULT (red): DTS1+ CSfC system monitor has detected a fault with the RMC module 1-Slot Data Transport System (CSfC) 3 - 8 Overview Revision 2.0...
Page 26
User Guide DDOC0199-000-A9 Controls and Indicators Chassis Indicators The DTS1+ CSfC has four LED status indicators (Figure 4.1) on the bottom of the front panel: • POWER • FAULT • KEY LOADED • DRIVE CAPACITY The brightness of the chassis LEDs can be independently set from 0 to 100% brightness. This accomplished by changing the duty cycle of the power applied to the individual LEDs.
Page 27
When this button is pushed and held for a minimum of 5 seconds, all encryption related material within the DTS1+ CSfC will be erased. This includes loaded keys, stored keys, and all previously loaded login/authentication credentials (user names and passwords). After zeroization, the yellow KEY LOADED LED will turn off.
Page 28
User Guide DDOC0199-000-A9 RMC Module Controls / Indications The RMC module (located behind the DTS1+ CSfC storage bay door) has its own controls / indicators as shown in Figure 4.4. The function of these controls and indicators is as follows. 4.3.1 STATUS LED (Green / Left) When this green (left) LED is illuminated it indicates that the RMC module is functioning properly.
Ethernet Lab Cable Inspection The DTS1+ CSfC is a two-part data storage system that consists of a DTS1+ CSfC chassis and a RMC module. Additional accessories may be included (if ordered). All received items should be inspected for damage. Inspect all units as follows: •...
Dzus mount. If installation and removal of the RMC module is desired while the DTS1+ CSfC remains mounted, be sure to allow clearance (Figure 5.4) for the door to open and the RMC module to be positioned in front of the DTS1+ CSfC.
Page 32
DDOC0199-0006 To Install / Remove RMC. Figure 5.4 DTS1+ CSfC Required Door Clearance Cables All connections to the DTS1+ CSfC are on the rear panel (Figure 5.5). Be sure the power supply is off when making connections. RS-232 Ethernet Ethernet...
Page 33
Utility Lab Cable 5.4.3 Ethernet Cable The Ethernet Lab Cable (VS-DTS1ETHCAB-J3) (Figure 5.8) is used to make network connections to the DTS1+ CSfC. Refer to paragraph B.3 Ethernet Connector J3 / Ethernet Lab Cable for connector pin signal information. Connections •...
Page 34
Ground Cable A ground cable is required, but not provided. The ground cable (DTS1+ CSfC Ground Connection) terminal is installed on the DTS1+ CSfC ground stud E1. The provided nut should be torqued to 18 in. lb. to ensure proper connection.
Page 35
The software layer password / passphrase can be incorrectly entered four times without issue. On the fifth try if an incorrect password / passphrase is entered, the software layer will no longer accept a password / passphrase. Once this occurs, the DTS1+ CSfC will need to be either rebooted or power-cycled.
Page 36
User Guide DDOC0199-000-A9 Check Hardware Layer Status NOTE All values listed below should equal na or 0 for a new DTS1+ CSfC / RMC module. 1. Check login status Command: cmlogin • init =0 not initialized / =1 initialized •...
Page 37
(via the CLI command cmpsk) to mask the PSK. Prior to use, the DTS1+ CSfC must be sealed to secure the PSK. During this process, the operator is also recommended to change the PSK. This can be accomplished by one of two methods: cmkey command •...
Page 38
--seal [cmpsk] CMPSK: status=OK [!cmpsk] OK 3. Remove and reapply DTS1+ CSfC input power. NOTE When properly sealed, the PSK will be displayed as all f’s 4. Type cmpsk and press E key to verify PSK is sealed.
Page 41
6.3.5.3 Status Report NOTE The DTS1+ CSfC has only one RMC module available (s0), s1 and s2 will always be unavailable (=0). The cmkey command without options reports key status. To obtain the key status type cmkey and press E key.
Page 42
The cmkey load / unload commands are typically not required. The RMC module stores a key checksum in its memory. When the RMC module is inserted into the DTS1+ CSfC, all stored keys are queried and the matching key is automatically loaded. If the key associated with the RMC module is not stored in the crypto module, an error is reported.
Page 43
CSfC to RMC module key association after zeroization or installation of RMC modules from the field into a lab DTS1+ CSfC. In both cases the keys must be stored or restored in the DTS1+ CSfC crypto module. To autoload a key type cmkey --auto –s 0 and press E key.
Page 44
Open the SWE container on an RMC module as follows: NOTE After five failed attempts to open the SWE container, the DTS1+ CSfC will reboot and another five attempts be granted. 1. Type rmcctl -E password / passphrase and press E key.
Page 53
Zeroization affects only the crypto module HWE key. It does not affect the RMC module. The data on the RMC module is still accessible: • If the RMC module can be placed in another DTS1+ CSfC with the same DEK / EDEK loaded in its crypto module. •...
Page 54
Make sure no power is applied to DTS1+ CSfC when inserting / removing RMC module. NOTE At a minimum, the DTS1+ CSfC must have an RMC module installed and be connected to both a computer and 28 VDC power source.
Page 55
5 seconds. NOTE Due to code-sharing between DTS1+ CSfC and DTS3 units, many CLI commands can include -s 0 (slot 0) in the command line. 2. Stop services. Type serv -s 0 --all 0 and press E NTER 3.
Page 57
XX GB rmc0p1 [!rmcctl] OK NOTE DTS1+ CSfC units require use of SWFDE in addition to HWFDE. NOTE Disks cannot be partitioned after SWFDE has been performed. 12. Initialize SWFDE. Type rmcctl -s 0 -p 1 -C and press E NTER ...
Page 58
Refer to Figure 7.2 for a login overview flowchart. The numbers listed in the flowchart relate to the step numbers in the procedure. 1. Connect the user computer to the DTS1+ CSfC and log in. Refer to paragraph 7.1 Connections / Preparation for detailed instructions.
Page 59
NTER NOTE Refer to paragraph 13.3.24 rmcctl for information regarding rmcctl command results. 11. View RMC module status. Type rmcctl and press E NTER DTS1+ CSfC is ready to use with CSfC encryption. cw_dts> rmcctl [rmcctl] RMC_S#: hcryp osdr...
Setup / Connections NOTE The DTS1+ CSfC is powered by a user-supplied 28 VDC power supply and does not have a power switch of its own. The DTS1+ CSfC is powered up by turning on the 28 VDC supply. 1. If not previously accomplished, connect cables to DTS1+ CSfC connectors (Figure 8.1).
Page 61
Serial port access is recommended for initial configuration of the DTS1+ CSfC. This topic describes how to use the DTS1+ CSfC Command Line Interface (CLI) to configure the DTS1+ CSfC. Refer to Command Line Interface section for more information on the commands used in this topic.
Page 63
-e eth0 -i new IP address -n new netmask -F NOTE The DTS1+ CSfC can be configured as a DHCP client if desired. When configured in this manner, the IP address is set remotely by a DHCP server.
Page 64
Example cw_dts> sysdate -d yyyy/mm/dd -t hh:mm:ss Login Logging into the DTS1+ CSfC is a three-part process. Before the RMC module can be accessed or configured, the user must (in the following order): 1. Log into DTS1+ CSfC. 2. Initialize HWE layer.
Page 65
Storage Media NOTE The DTS1+ CSfC must have the hardware encryption layer initialized and open before the RMC module (storage media) can be accessed. If desired, the RMC module disk can be used without partitioning. The unpartitioned disk must have services started and assigned before formatting and mounting.
Page 73
Hardware and software encryption must both be active before initiating iSCSI operation. The DTS1+ CSfC supports use of Internet Small Computer System Interface (iSCSI). It is configured to use either Ethernet port 0 or port 1. The desired Ethernet port must have an active link before running istarget.
Page 74
Hardware and software encryption must both be active before initiating PCAP operation. The DTS1+ CSfC supports use of the PCAP command to capture packets traveling over a network. Two data streams may be captured at any one time (Ethernet ports 0 and 1). A unique file name must be used with each recording in order to retain all recordings.
Page 75
[!pcap] OK Health The DTS1+ CSfC has internal sensors that monitor critical environmental and operational parameters. The software provides this information to the user via the CLI when commanded. A FAIL status will be posted for any values that are out of tolerance.
Page 76
8.8.1 IBIT (Initiated BIT) NOTE Results will be provided as 1 (Pass), 0 (Fail), and NA (function not active) The ibit command provides a snap-shot of the DTS1+ CSfC status. To view status, type ibit and press E key. NTER •...
Page 77
DTS1+ CSfC flash memory. The fupdate command boots the DTS1+ CSfC system into a RAM disk image where the user can install a new disk image onto the system. Upon logging into the new RAM disk image, a menu of operations to restore and verify the restoration of a new disk image activates.
Page 78
NTER The DTS1+ CSfC examines the digital signature to determine if the tarball has been compromised. If tarball is uncompromised the update process will begin. If the tarball has been changed for any reason, the update process aborts.
Page 79
Access from Windows as NAS Device NOTE When the partitions are formatted and mounted, they can be accessed from a PC running Windows. 1. Log into the DTS1+ CSfC via SSH. Refer to paragraph 8.2.1.2 Ethernet. 2. Type rmcctl and press E key. NTER ...
Page 80
NOTE When the partitions are formatted and mounted, they can be accessed from a PC running Linux. NOTE This procedure is performed via Ethernet connected to DTS1+ CSfC port 0. 1. Open a terminal window 2. Type ssh admin@192.168.1.1. 3. Press E key.
User Guide DDOC0199-000-A9 System Configuration The commands below are used to configure the crypto module, DTS1+ CSfC, and associated RMC module. Crypto Module The cmlogin command allows for initialization of / logging into the Hardware Encryption (HWE) crypto module. For status information, issue cmlogin without options. Refer to paragraph 13.3.5 cmlogin for detailed information about initializing /logging into the HWE crypto module.
Page 82
RMC Module NOTE The DTS1+ CSfC has only 1 RMC module slot. As a result, the -s option is always -s 0. Refer to paragraph 13.3.24 rmcctl and paragraph 13.3.30 serv for detailed information about configuring the RMC module.
Page 84
The chart below provides a basic failure analysis by observing status indicators. If any one of the LEDs exhibits the failure status, the DTS1+ CSfC may not function properly. The investigative/ remedial actions offered should only be tried one or two times. Refer to paragraph 4.1 Chassis Indicators for information regarding front panel LEDs.
Page 85
RMC module may be full. 10.3 Encryptor Error Codes NOTE If problems persist, contact Curtiss-Wright Defense Solutions Customer Support. Refer to paragraph 1.6 Technical Support for contact information. Refer to Table 10.3 for fault information.RMC module Table 10.3 Encryptor Error Codes...
Page 87
If no problem is found with the connectors, reinstall the RMC module and try latching the door again. c. If the problem persists, contact Curtiss-Wright Defense Solutions. 7. Open the DTS1+ CSfC door and observe the RMC module STATUS LED. When green LED turns ON, RMC module is ready. Slide...
Page 89
12.1 SNMP MIB The DTS1+ CSfC supports Simple Network Management Protocol (SNMP). The user may configure SNMP for a Windows workstation via the Windows Control Panel. The user should consult with their network administrator for details on configuration and utilization of the SNMP traps and other data capture programs.
Page 92
Command Line Interface NOTE The CLI is used across various product lines, including the DTS1+ CSfC, DTS1+, DTS3+, DTS3, and the XDS1+. As a result, the CLI uses DTS in place of the various unit nomenclaures in most cases. Where the actual nomenclature is used, it refers to a command option that is only applica- ble to that particular unit.
Page 95
NOTE Place the provided files in the root of the NAS folder (/rmc_shares/rmc0p1). NOTE Curtiss-Wright will be the only entity who provides a firmware update Syntax: cmfwupdate [-h | --help | -v | --version] cmfwupdate [-f <str>] [-s <str>]...
Page 144
This document in its entirety is subject to export control restrictions on the title page of this document. User Guide DDOC0199-000-A9 2.10 5.00 9.91 4.95 2.41 6.25 15.88 7.02 4.48 24.79 30.48 20.93 76.20 139.01 1.20 3.00 5.47 81.79 3.22 DDOC0199-0025 Figure A.3 RMC Module...
These Mean Time Between Failure (MTBF) values (provided in hours) are calculated using Windchill Quality Solutions Relex 2011 software with MIL-HDBK- 217 FN2 with parts screening / de-rating based on ANSI/VITA 51.1-2008 specifications. Table A.1 DTS1+ CSfC / RMC module Calculated Mean Time Between Failures Order Number MTBF VS-DTS1+SL-F (L-Bracket Mounting) VS-DTS1+SL-FD (DZUS Panel Mounting) Ground Benign / Controlled @ 30°C...
Page 146
196,851 Airborne Rotary Wing @ 30°C 127,777 Environmental, EMI, Electrical Specifications The DTS1+ CSfC has been tested to the following environmental conditions using the standards, test procedures, and methods indicated below (test reports are available from Curtiss-Wright on request): •...
Page 152
Ethernet Lab Cable Wiring Diagram Ground Lug A ground cable is required, but not provided. The ground cable is installed on the DTS1+ CSfC ground lug E1. The provided nut should be torqued to 18 in. lb. to ensure proper connection.
DTS1+ CSfC / RMC Module / Lab Cables This appendix contains the ordering numbers for the DTS1+ CSfC chassis (Table C.1), RMC module (Table C.2), and lab cables (Table C.3). For an up to date list, or for inquiries about these products, contact Curtiss-Wright Defense Solutions Sales at http:/www.cwcdefensesolutions.com/...
Need help?
Do you have a question about the DTS1+ CSfC and is the answer not in the manual?
Questions and answers