SCIP End Crypto Unit (ECU) Rekey Handbook

SCIP ECU Rekey Handbook
UNCLASSIFIED
1.0 Rekey General Instructions
The following general rules and procedures pertaining to SCIP End Crypto Unit (ECU) rekey must be complied with to ensure
successful rekey.
1. If an ECU contains seed key, always rekey the Canadian seed key before any foreign seed key (CCEB, NATO or Coalition).
2. It is important that the rekey instructions described below be followed closely to ensure a successful rekey. In particular, the
telephone handset, if lifted from the receiver, is not to be “hung up” until rekey is complete. The premature hanging up of a
handset may result in failed rekey.
3. The Canadian National rekey system can handle up to four rekey calls simultaneously. If the rekey system is processing four
calls simultaneously other calls to the system during this period will receive a busy signal. If a busy signal is received by a
caller they must hang up and try again.
4. It takes approximately 1 to 2 minutes to rekey an ECU.
5. Should the Canadian National rekey system be taken off line for an extended period, callers will be switched to a voice
message that will indicate the duration of the service interruption.
6. For the SGSM and SWT. If the ECU has multiple keysets loaded and a rekey request has failed, the ECU will remember a
prior rekey request failure and will automatically rekey this specific keyset on the next rekey call.
7. For all ECUs, if a US rekey attempt fails, the caller must wait 20 minutes before attempting another rekey of the same key. If
this 20 minute period is ignored the keyset may become corrupted.
8. All keys should be rekeyed quarterly.
9. If an OMNI contains Canadian and foreign (CCEB, NATO or Coalition) key, ensure that the Canadian key is rekeyed first. If
foreign key is rekeyed before the Canadian, the OMNI will display a "REKEY DUE" message. The foreign key will then
have to be rekeyed a second time (after the Canadian key).
Version: 01/08 UNCLASSIFIED 1