Operating Manual Part 15

October 2008 5300 ES Series Mobile Radio Operating Manual 10-13
Secure Communication (Encryption)
Program Channel/Group PIDs and Encryption Type - With conventional analog
calls, this information is programmed on the channel screen. With other types, it is
programmed in the talk group list selected on the system screen. In addition, with
conventional digital calls, the group programming can be overridden on the channel
screen (see Section 10.3.3). Additional PIDs for special calls can also be specified on
the system screen for digital and trunked calls.
Note The encryption type is not selectable on digital channels because the AES/DES mode is
determined by the key type loaded, not by PC Configure.
Note Key Loss Key (KLK), offered by Motorola, does not erase the UKEK which allows the
radio to be rekeyed by the KMF remotely. By not erasing the UKEK, the KLK does not
meet TIA standards and is no longer FIPS 140-2 certified.
The current EFJohnson Technologies 5300 ES mobile radios support OTAR. However, an
RSI, UKEK and other information must be programmed as described in the next section.
10.5.0.1 Motorola Third Party RNC Registration
The 5300 ES supports dynamic data registration. However, if desired, the radio can be
programmed to perform Third Party data registration instead of dynamic registration on
the OTAR and Data parameters page. If Third Party registration is selected, the radio may
must be manually registered on the Motorola RNC Console by entering the following
command:
LCRD 03 06 00 1234 7F xx xx xx 0A 0A 00 07 00 yy
Where, “xx xx xx” is the hex value of the Digital Unit ID entered by PC Configure. Refer
to the console documentation for the value of “yy” or use “00”. This registration needs to
be done only once.
10.5.0.2 Programming By Keyloader
The following are the minimum parameters that need to be programmed in the radio to
perform OTAR. It is not necessary to program a TEK but it is necessary that a UKEK be
manually programmed to perform OTAR. If the radio does not contain a TEK, the KMF
initiates a warm start-up sequence in which a temporary TEK is transferred to the radio to
perform the key transfer.
UKEK - This key normally has SLN (CKR) 61440 and Key ID 62880 (F5A0 hex).
Unit RSI - This is normally initially the same as the P25 Unit ID and is programmed by
PC Configure as described in Section 10.5. Therefore, the RSI should not need to be
loaded if it is the first time the radio is being set up for OTAR or if the radio dumps
keys due to long-term battery disconnect. However, it may need to be loaded if the
radio is manually deleted from the KMF and then recreated since the message number
must be reset to 0 (the Load Target RSI command resets the message number to 0).