SCIP End Crypto Unit (ECU) Rekey Handbook

ANNEX A to ITSB-46 

SCIP 

End Crypto Unit (ECU) 

Rekey Handbook 

Date: 24 January 2008 

Version: 01/08

SCIP ECU Rekey Handbook 

UNCLASSIFIED 

Table of Contents 

1.0 Rekey General Instructions ......................................................................................................................................................... 1 

2.0 Sectera Wireline Terminal (SWT) – Rekey Instructions .......................................................................................................... 3 

2.1 SWT - National Key Rekey .......................................................................................................................................................................... 3 

2.2 SWT – CCEB, NATO or Coalition Key Rekey............................................................................................................................................ 5 

3.0 SGSM – Rekey Instructions......................................................................................................................................................... 7 

3.1 SGSM - Login............................................................................................................................................................................................... 7 

3.2 SGSM - National Key Rekey........................................................................................................................................................................ 8 

3.3 SGSM - CCEB, NATO or Coalition Key Rekey.......................................................................................................................................... 9 

4.0 OMNI – Rekey Instructions....................................................................................................................................................... 10 

4.1 OMNI - National Key Rekey...................................................................................................................................................................... 10 

4.2 OMNI – National and CCEB Key Rekey ................................................................................................................................................... 11 

4.3 OMNI - CCEB, NATO or Coalition Key Rekey ........................................................................................................................................ 12 

5.0 STE / KOV14C Rekey Instructions .......................................................................................................................................... 13 

5.1 STE/KOV14C - National Key Rekey ......................................................................................................................................................... 13 

5.2 STE/KOV14C – National and CCEB Key Rekey ........................................................................................................................................ 2 

5.3 STE / KOV14C – CCEB, NATO or Coalition Key Rekey........................................................................................................................... 4 

Version: 01/08 UNCLASSIFIED 

i


UNCLASSIFIED 

1.0 Rekey General Instructions 

The following general rules and procedures pertaining to SCIP End Crypto Unit (ECU) rekey must be complied with to ensure 

successful rekey. 

1. If an ECU contains seed key, always rekey the Canadian seed key before any foreign seed key (CCEB, NATO or Coalition). 

2. It is important that the rekey instructions described below be followed closely to ensure a successful rekey. In particular, the 

telephone handset, if lifted from the receiver, is not to be “hung up” until rekey is complete. The premature hanging up of a 

handset may result in failed rekey. 

3. The Canadian National rekey system can handle up to four rekey calls simultaneously. If the rekey system is processing four 

calls simultaneously other calls to the system during this period will receive a busy signal. If a busy signal is received by a 

caller they must hang up and try again. 

4. It takes approximately 1 to 2 minutes to rekey an ECU. 

5. Should the Canadian National rekey system be taken off line for an extended period, callers will be switched to a voice 

message that will indicate the duration of the service interruption. 

6. For the SGSM and SWT. If the ECU has multiple keysets loaded and a rekey request has failed, the ECU will remember a 

prior rekey request failure and will automatically rekey this specific keyset on the next rekey call. 

7. For all ECUs, if a US rekey attempt fails, the caller must wait 20 minutes before attempting another rekey of the same key. If 

this 20 minute period is ignored the keyset may become corrupted. 

8. All keys should be rekeyed quarterly. 

9. If an OMNI contains Canadian and foreign (CCEB, NATO or Coalition) key, ensure that the Canadian key is rekeyed first. If 

foreign key is rekeyed before the Canadian, the OMNI will display a "REKEY DUE" message. The foreign key will then 

have to be rekeyed a second time (after the Canadian key). 

Version: 01/08 UNCLASSIFIED 1


UNCLASSIFIED 

10. If a STE contains Canadian and foreign (CCEB, NATO or Coalition) key, ensure that the Canadian key is rekeyed first. If 

foreign key is rekeyed before the Canadian, the STE will display a "Err Code: 06" message. The foreign key will then have 

to be rekeyed a second time (after the Canadian key). 



UNCLASSIFIED 

2.0 Sectera Wireline Terminal (SWT) – Rekey Instructions 

2.1 SWT - National Key Rekey 

Note: The SWT requires the operator to select the key to be rekeyed. 

(SWT) Phone 

Keypad Display Keypad & Speaker Notes 

1. 

Scroll for Menus 

LOCKED 

2. 

PIN MENU 

Press SCROLL 

Select ? 

3. 

Enter USER # & PIN 

Press ENTER 

OK? 

4. 

Enter {user id}{pin} Enter USER # & PIN 

######## OK? 

# = PIN 

5. 

Press ENTER 

PIN Entered 

Key Exp: ##/## 

##/## = key expiry date 

6. 

Lock Terminal 

Select 

7. Press * twice Scroll for Menus 

V 

8. Lift handset receiver 

9. Dial {rekey phone number} 613-949-5400 

10. 

NON-SECURE 

OFF-HOOK 

11. 

Establishing 

Voice: “Connection in Progress” 

Connection 

{repeated} 

12. 

Select keyset (if 

Rekey : Select key 

Voice: “Secure Rekey” 

If you wait too long you will be 

prompted) 

National 

Voice: “Select Key to be Rekeyed” disconnected. 



UNCLASSIFIED 

13. 

14. 

15. 

16. 

Keypad 

Press ENTER 

(SWT) Phone 

Display Keypad & Speaker 

{classification} 

RekeyLIT 

{classification} R 


Secure Disconnected 

{alternating with} Hang Up 

17. Updating Key 

18. Updating CKL 

19. Update Complete 

20. 


V 

Voice: “Secure Call Setup in 

Progress… 

Please Stand by” 

Voice: “Line is Secure” 

Notes 

Secure connection established 

{beep}{ silence } 

Voice: “Secure Call Terminated” Secure connection disabled 

Voice: “Hang Up To Disconnect” 

Hang up receiver Wait for ECU to process rekey 

data before using phone 

Phone available for use 



UNCLASSIFIED 

2.2 SWT – CCEB, NATO or Coalition Key Rekey 

Note: The SWT requires the operator to select the key to be rekeyed. 

(SWT) Phone 


1. 


LOCKED 

2. 

PIN MENU 

Press SCROLL 

Select ? 

3. 

Enter USER # & PIN 

Press ENTER 

OK? 

4. 

Enter {user id}{pin} Enter USER # & PIN 

######## OK? 

# = PIN 

5. 

Press ENTER 

PIN Entered 

Key Exp: ##/## 

##/## = key expiry date 

6. 

Lock Terminal 

Select 

7. Press * twice Scroll for Menus 

V 

8. Lift handset receiver 

9. 

Dial {rekey phone number} 877-386-1820 (toll free) or 

410-517-3369 

10. 

NON-SECURE 

OFF-HOOK 

11. 

Establishing Connection Voice: “Connection in Progress” 

{repeated} 

Scroll to select 

keyset (if prompted – 

Rekey : Select key 

CCEB, NATO, COALITION 

Voice: “Secure Rekey” 

Voice: “Select Key to be Rekeyed” 

If the ECU contains only CCEB key 

it will rekey automatically, if the 

12. see note) 

 

ECU also contains NATO or 

Coalition the appropriate key must 

be selected 



UNCLASSIFIED 

13. 

14. 

15. 

16. 

Keypad 

Press ENTER 

(SWT) Phone 

Display Keypad & Speaker 

{classification} 

Rekey in Process 

{classification} R 


Secure Disconnected 

{alternating with} Hang Up 

17. Updating Key 

18. Updating CKL 

19. Update Complete 

20. 


V 

Voice: “Secure Call Setup in 

Progress… 

Please Stand by” 

Voice: “Line is Secure” 

Notes 

Secure connection established 

{beep}{ silence } 

Voice: “Secure Call Terminated” Secure connection disabled 

Voice: “Hang Up To Disconnect” 

Hang up receiver Wait for ECU to process rekey data 

before using phone 

Phone available for use 



UNCLASSIFIED 

3.0 SGSM – Rekey Instructions 

3.1 SGSM - Login 

SGSM Login 

Keypad Display Notes 

1. Press centre menu button Main Menu 

2. Scroll up to Encryption Mgmt 

Press Select 

3. 

SM Locked 

Encryption Mgmt Menu 

4. Select SM PIN SM PIN: 

5. Enter PIN 

6. Press OK SIM PIN menu 

7. Press BACK 3 times Main screen To go to main screen 

8. 

Press END key (red button 

with on-hook handset) 



UNCLASSIFIED 

3.2 SGSM - National Key Rekey 

Note: The SGSM requires the operator to select the key to be rekeyed. 

SGSM National key 


1. Login See section 3.1 above 

2. Return to main display 

3. 

Dial rekey number – 

{dialled number) 

(613-949-5400) 

4. Press MENU button (centre soft key) Dialling menu Select the key to be rekeyed – press OK 

5. Use joystick to scroll up to Secure Voice Secure Voice 

6. 

Press SELECT key (right soft key) 

Next call only Secure Voice 

{dialled number} 

7. 

Press SEND key (green button with off-hook Calling {dialled number} 

handset) 

8. 

Connected 

Rekey : Select Key . 

National 

Press OK key 

Connected 

9. 

{Classification} 

Rekeylit 

10. 

Secure Complete 

End Call 

Press OK key 

Updating Key 

11. 

Updating CKL Do not use phone until all messages are displayed 

Update Complete 



UNCLASSIFIED 

3.3 SGSM - CCEB, NATO or Coalition Key Rekey 

Note: The SGSM requires the operator to select the key to be rekeyed. 

SGSM CCEB, NATO or Coalition key 


1. Login See section 3.1 above 

2. Return to main display 

Dial rekey number – 

{dialled number) 

3. 1-877-386-1820 (toll free) 

or 1-410-517-3369 

4. Press MENU button (centre soft key) Dialling menu 

5. Use joystick to scroll up to Secure Voice Secure Voice 

6. 

Press SELECT key (right soft key) 

Next call only Secure Voice 

{dialled number} 

7. 

Press SEND key (button with off-hook 

Calling {dialled number} 

handset) (green button) 

8. 

Connected 

Going Secure 

. 

9. 

Connected 

Rekey : Select Key 

CCEB 

10. 

11. 

12. 

Use Joystick to scroll to desired keyset 

Press OK 

Press OK key 

Connected 

{Classification} 


Secure Complete 

End Call 

Updating Key 

Updating CKL 

Update Complete 

If there are more than CCEB keyset loaded you can 

scroll to select the key to be rekeyed 

Key set will be rekeyed 

Do not use phone until all messages are displayed 



UNCLASSIFIED 

4.0 OMNI – Rekey Instructions 

4.1 OMNI - National Key Rekey 

Note: Only National key loaded. 

OMNI Phone 


1. NONSECURE 

ENTER PIN: 

2. Enter {user id}{pin} 

Press ENTER button 

WAIT 

PROCESSING PIN 

3. LOGON SUCCESSFUL 

PRESS ENTER 

4. Press ENTER button NON-SECURE AU Lift handset receiver 


6. GOING SECURE 


RATE: #### 

# = transmission rate 

8. REKEY CALL 

1 OF 1 KEYSETS 

Only one national keyset 

REQUESTED 

9. REKEY CALL 


PROCESSING 

10. REKEY SUCCESSFUL or Hang up receiver 

REKEY TERMINATED 

TERMINATED = failed rekey 

PLEASE HANG UP 



UNCLASSIFIED 

4.2 OMNI – National and CCEB Key Rekey 

Note: National and CCEB keys loaded. 

OMNI Phone 



ENTER PIN: 

2 Enter {user id}{pin} 


WAIT 



PRESS ENTER 





RATE: #### 


8. REKEY CALL 


National and CCEB keysets 

REQUESTED 

9. REKEY CALL 


PROCESSING 






REKEY DUE 

See NOTE 10 



UNCLASSIFIED 

4.3 OMNI - CCEB, NATO or Coalition Key Rekey 

OMNI Phone 



ENTER PIN: 

2. Enter {user id}{pin} 


WAIT 



PRESS ENTER 


5. Dial: 1- 877-386-1820 (toll free) 

or 1-410-517-3369 



RATE: #### 

8. REKEY CALL 

# OF # KEYSETS 

REQUESTED 

9. REKEY CALL 

# OF # KEYSETS 

PROCESSING 





# = number of keyset (dependent 

on number of keys loaded) 

Repeated for each keyset 

# = number of keyset (dependent 

on number of keys loaded) 





UNCLASSIFIED 

5.0 STE / KOV14C Rekey Instructions 

5.1 STE/KOV14C - National Key Rekey 

Note: Canadian SDNS only. 

STE / KOV14C 


1. Press Menu button TERMINAL MANAGEMENT Screen displays options 

2. Press SCROLL CRYPTO CARD MANAGEMENT 

3. 

Press SELECT CARD MANAGEMENT PRIVILEGES 

Select Management Level 

4. Press USER REKEY FUNCTIONS 

5. 

Press SELECT UPDATE REKEY PHONE NUMBER 

PERFORM REKEY 

6. 

Press REKEY 

PERFORM REKEY 

Options = {None, Due or OK} 

STU-III: {option} SDNS:{option} 

7. 

Press SDNS 

SDNS REKEY MODE 

SELECT TYPE 

8. 

Press FNBDT 

SDNS REKEY MODE FNBDT Note: If the rekey phone number has been pre-programmed, 

DIAL: 613-949-5400 

press the GO option to start call to rekey centre 

9. 

GOING SECURE TO: LINE X REKEY X = line number 

{phone number} 

10. 

{CLASSIFICATION} LINE X REKEY X = line number 


11. 

SDNS REKEY IN PROGRESS 

0 of 1 KEYSETS Request 

12. 


0 of 1 KEYSETS Response 

13. SDNS REKEY COMPLETE 



UNCLASSIFIED 

STE / KOV14C 

Keypad 

Display 

14. Press Continue {blank screen} 

Notes 



UNCLASSIFIED 

5.2 STE/KOV14C – National and CCEB Key Rekey 

Note: Canadian SDNS and CCEB keys loaded. 

STE / KOV14C 


1. Press Menu button TERMINAL MANAGEMENT Screen displays options 


3. 




5. 


PERFORM REKEY 

6. 

Press REKEY 

PERFORM REKEY 

Options = {None, Due or OK} 

STU-III: {option} SDNS:{option} 

7 

Press SDNS 


SELECT TYPE 

8. 

Press FNBDT 

SDNS REKEY MODE FNBDT Note: If the rekey phone number has been pre-programmed, 

DIAL: 613-949-5400 


9 

GOING SECURE TO: LINE X REKEY X = line number 


10. 

{CLASSIFICATION} LINE X REKEY X = line number 


11. 



12. 


0 of 2 KEYSETS Response 

13. 

SDNS REKEY IN PROGRSS 

1 of 2 KEYSETS Complete 

14. 





UNCLASSIFIED 

STE / KOV14C 

Keypad 

Display 

15. 

SDNS REKEY FAILED ERR CODE: 06 

KEY ID: XXX XXX CONTACT TPA 


See NOTE 11 

Notes 



UNCLASSIFIED 

5.3 STE / KOV14C – CCEB, NATO or Coalition Key Rekey 

Note: No Canadian SDNS loaded. 

STE / KOV14C 


1. Press Menu button TERMINAL MANAGEMENT 


3. 




5. 


PERFORM REKEY 

6. 

Press REKEY 

PERFORM REKEY 

SDNS:Due {or OK} 

7. 

Press SDNS 


SELECT TYPE 

Press FNBDT 

SDNS REKEY MODE FNBDT 

8. 

DIAL: 1-877-386-1820 (Toll free) or 

1-410-517-3369 

9. 

GOING SECURE TO: LINE X REKEY 


10. 

{CLASSIFICATION} LINE X REKEY 

REKEY IN PROGRESS PLEASE STAND BY 

11. 


0 of # KEYSETS Request 

12. 


1 of # KEYSETS Response 

13. SDNS REKEY COMPLETE 


Note: If the rekey phone number has been pre-programmed, 


X = line number 

# = number of keyset (dependent on number of keys loaded) 


# = number of keyset (dependent on number of keys loaded)

SCIP End Crypto Unit (ECU) Rekey Handbook

Create successful ePaper yourself

Delete template?

Save as template?