Download MCC 7100 IP Dispatch Console Setup and User Guide
Transcript
54 | MCC 7100 IP Dispatch Console – Setup and Installation Open Software Keyfiles using Excel KeyfileGen.xlms can be opened using Microsoft Excel or OpenOffice. Macros need to be enabled. If KeyfileGen.xml is to be used on a computer other than the MCC 7100 IP Dispatch Console where it was installed, it may be copied to another computer. In this case, the schema file ikmf-app-file.xsd must be copied with it and placed in the same folder. The spreadsheet has a sheet for entering up to 500 keys and a sheet for entering two keysets. Enter the CKR, Keyset ID, KeyID, Algorithm and key data in clear (unencrypted). The spreadsheet enforces ranges of data as follows: • • • • • • • CKR from 0 to 4095 Keysets 1 and 2 Key ID from 0000 to FFFF (hex values, leading 0s required) Encryption Algorithms limited to AES256, DES, ADP Key Material length as appropriate for the algorithm Odd parity per byte for DES keys Total number of keys (500) Note: Keys generated by the KeyfileGen tool are not encrypted. Use the “Keysets” sheet to enter keyset names and select which keyset is active. Important: All the features of Microsoft Excel to copy data across keys and keysets are supported. However, do not delete rows as the number of keys is restricted to 500 and the number of keysets is exactly two. You can also save the spreadsheet for later use. If a row on the “Keys” sheet has a blank CKR field, this row is ignored and will not be exported to the XML file. If ADP keys are used, always set their keyset to “1”. ADP keys have no concept of keysets. You may keep default values in the “Keyset” sheet, unless there are DES and/or AES256 keys, which truly use keysets. Export the XML file by pressing the “Validate and Save” button on top of the “Keys” sheet. If the button cannot be pressed, you may need to enable macros in Excel. Note: If any of the keys or keysets cannot be validated, the XML file will not be generated and an error message will be displayed. You can then correct the problem and attempt to export the XML file again. Some of the errors detected during validation are: • • • • Invalid parity for DES keys Length of key material not matching what the algorithm requires Duplicate CKR/Keyset pairs Maximum number of ADP keys exceeded Note: From the Console Dispatch Status application, click KeyStore under the Encryption/Licensing tab to open the keystorage directory where the keyfiles are to be stored. XML files containing keys can also be imported into KeyfileGen.xlsm. To import, open KeyfileGen.xlsm, right-click on a cell and select XML → Import, then browse to the file. Changes can be made and export the updated file using the “Validate and Save” button. Third Party or Cohab Software Installation After you install the MCC 7100 IP Dispatch Console software and load secure keys and algorithms, you can install the certified third party or cohab software, for example, McAfee antivirus, Motorola’s Syslog, and Motorola’s MOSCAD FSA application. Because each system is different, the certified applications for the specific system may be unique and not all software is compatible. See the system planner for the specific applications and configuration of the third party and cohab software for the system. Send Feedback | November 2013 | 6871024P93-A