Operating Manual

10-12 5100 ES Models II/III Portable Radio Operating Manual March 2008
Secure Communication (Encryption)
Traffic Encryption Key (TEK) - A key used to encrypt voice or data. The other type of
key is the Key Encryption Key (KEK) which is used to encrypt keys contained in Key
Management Messages. TEKs can be either the AES or DES type.
Unique Key Encryption Key (UKEK) - A KEK unique to a particular subscriber unit.
Refer to “KEK” for more information. These keys can be either the AES or DES type.
Zeroize - The process of deleting all keys from a compromised subscriber unit to disable
it. To make the unit encryptionally functional again, the keys must be reloaded by a
keyloader.
10.4.6 Motorola Third-Party RNC Registration
The 51xx ES portable supports Motorola dynamic data registration. However, if desired,
the radio can be programmed to perform MOT 3rd Party data registration instead of
dynamic registration on the OTAR and Data parameters page. If MOT 3rd Party
registration is selected, the radio must be manually registered on the Motorola RNC
Console by entering the following command:
LCRD 03 06 00 1234 7F xx xx xx 0A 0A 00 07 00 yy
Where, “xx xx xx” is the hex value of the Digital Unit ID entered by the PC Configure
software. Refer to the console documentation for the value of “yy” or use “00”. This
registration needs to be done only once.
10.4.7 Programming By Keyloader
The following are the minimum parameters that need to be programmed in the radio to
perform OTAR. It is not necessary to program a TEK to perform OTAR. If the radio does
not contain a TEK, the KMF initiates a warm start sequence in which a temporary TEK is
transferred to the radio to perform the key transfer.
UKEK - This key normally has SLN (CKR) 61440 and Key ID 62880 (F5A0 hex).
Create a key (either AES or DES type as required) and download it to the radio. AES
UKEKs typically use an SLN of 61442 and a Key ID of 62880 (0xF5A0).
Unit RSI - This is normally initially the same as the P25 Unit ID. Therefore, the RSI
should not need to be loaded if it is the first time the radio is being set up for OTAR or
if the radio dumps keys due to long-term battery disconnect. However, it may need to
be loaded if the radio is manually deleted from the KMF and then recreated since the
message number must be reset to 0 (the Load Target RSI command resets the message
number to 0).
KMF RSI - This RSI is normally 9,999,999 and should not need to be loaded since it
defaults to this number.