Comtech EF Data SLM-5650A Installation And Operation Manual page 258

SLM-5650A Satellite Modem
TRANSEC Module HTTPS Interface
Item
Future Passphrase
(write-only)
Encryption Parameters
Item
Encryption Mode
Encryption
Encryption Frame
Length
Reset all keys
Run self tests
Description
Accepts a 10- to 32-character Passphrase that is combined with the previously
entered Seed Key to generate TEKs.
Once the Passphrase is entered, click [Update Passphrase] to finalize this change.
Description
Set encryption in the TRANSEC Module as Primary or Secondary.
Note the following:
If Primary is selected, the TRANSEC Module will allow the user to advance the
•
TEK and activate the future key independently of any other modems.
If Secondary is selected, the TRANSEC Module's TEK automatically mirrors the
•
TEK of the primary modem and the module will activate the future key when the
primary modem activates its future key.
Click [Update Mode] when done.
Click [Change Encryption State] to display the On and Off radio buttons. The
"layered" appearance of this control is intended to prevent the user from accidentally
toggling the Encryption State.
By selecting the Encryption State as 'On', this causes the data traffic to be encrypted by
the TRANSEC Module using the current TEK. This encrypted data is then delivered to
the base modem for transmission, regardless of the state of the receiving modem.
Three user-defined parameters must match in order for encrypted communication to
commence between two TRANSEC Module-equipped modems:
1. Seed Key.
2. Passphrase.
3. Encryption Frame Length.
Select the desired operational state, then click [Update Encryption] to save the
selected state and then return this selection to its "protected" mode; the On/Off radio
buttons will be hidden once again and the operational state message will update
accordingly (i.e., "Encryption is On" or "Encryption is Off").
Use this text box to specify the length of the Advanced Encryption Standard (AES)
256 encryption frame. Acceptable range is from 1 (fast acquisition, high overhead ) to
255 (slower acquisition, low overhead).
Once the desired Encryption Frame Length has been entered, click [Update Frame
Length] to implement this change.
Click [Zeroize] to reset all encryption keys in the module's memory and flash to
default values.
Click [Test] to run the module's cryptographic self tests.
Note the following:
If the tests succeed, the module will resume operation.
•
If the tests fail, the module will report an error to the event log.
•
If encryption is enabled and the tests fail, the module will stop transmitting data
•
to protect its integrity.
10–8
Revision 8
MN-SLM5650A