Comtech EF Data SLM-5650A Installation And Operation Manual page 257

SLM-5650A Satellite Modem
TRANSEC Module HTTPS Interface
Active Key
Item
Key Signature
(read-only)
Current TEK
(read-only)
Seed Key
(write-only)
Confirm Seed Key
(write-only)
Enter Passphrase
(write-only)
Future Key
Item
[Activate Future Key]
Future Seed Key
(write-only)
Confirm Future Seed Key
(write-only)
Description
This is a signature, or fingerprint, of the Transmission Encryption Keys (TEKs)
generated by the Seed Key and Passphrase. The user can compare signatures on
different modems to ensure that each has the same Seed Key and Passphrase.
NOTE: The TEKs are updated only when a Passphrase is submitted.
The user may generate 26 TEKs from the Seed Key and Passphrase (described
below). The active TEK (1 through 26) is displayed here. When it is desired to change
the encryption key being used to encrypt traffic, click [Next TEK] to select the next
key in the set of 26 TEKs.
Note the following:
The [Next TEK] button is disabled when the module is in secondary mode, and
•
the current TEK mirrors the TEK the connected primary modem uses.
The TEK only increments and never decrements; the user cannot re-use a
•
previous key. The only way to reset the TEK to 1 is by clicking [Activate Future
Key] (described below).
Enter a 32-character Seed Key in this text box to generate TEKs when the TRANSEC
Module is given a Passphrase (described below).
Re-enter the newly created Seed Key in this text box to ensure its accuracy.
Once the Seed Key is entered and confirmed, click [Update Seed Key] to finalize this
change.
Accepts a 10- to 32-character Passphrase that is combined with the previously
entered Seed Key to generate TEKs.
Once the Passphrase is entered, click [Update Passphrase] to finalize this change.
Description
The user can program a second seed key and passphrase to generate a second set
of TEKs. These keys will lie dormant until the user activates them by clicking
[Activate Future Key]. At that time, the following happens:
1. The active TEKs are replaced by the ones generated with the Future Seed
Key and Future Passphrase.
The Current TEK gets reset to 1.
2.
3. Secondary modems connected to this one will also activate their Future Keys.
NOTE: The [Activate Future Key] button is active only when the following conditions
are met:
1. The modem is in Primary mode (see Encryption Mode, explained below).
2. The Current TEK is greater than 1.
Enter a 32-character Future Seed Key in this text box to generate a TEK when the
TRANSEC Module is given a Future Passphrase (described below).
Re-enter the newly created Future Seed Key in this text box to ensure its accuracy.
Once the Future Seed Key is entered and confirmed, click [Update Seed Key] to
finalize this change.
10–7
Revision 8
MN-SLM5650A