Encryption; Load An Encryption Key; Multikey Feature - Motorola APX 7000 Basic Service Manual

Chapter 7 Encryption
This chapter provides procedures for using the encryption capability of your radio. The following
procedures are outlined:
• Loading an encryption key
• Selecting an encryption key
• Selecting an Index (only applicable to Dual Display configured radios)
• Erasing an encryption key (only applicable to Dual Display configured radios)
7.1

Load an Encryption Key

Keys will be loaded from the KVL to the radio in either clear or encrypted form depending on the
configuration of the CPS parameter "KVL – FIPS Level 3 Approved Mode". If the parameter is
disabled, keys will be sent in clear form; if the parameter is enabled, keys will be sent to the radio in
encrypted form.
NOTE: A KVL3000 Plus with software version R03.52.45 or greater must be used to load keys to a
radio with "KVL – FIPS Level 3 Approved Mode" enabled.
To load an encryption key:
1. Refer to the key-variable loader (KVL) manual for equipment connections and setup.
2. Attach the KVL to the radio. The top display shows "KEYLOAD" whereas "KEYLOADING" is
shown on the front display of a Dual Display configured radio. All other radio functions, except
for power down, backlight, and volume, are locked out.
3. Refer to the KVL manual for how to load the encryption keys into the radio.
4. When the key is loaded successfully, you will hear:
• On single-key radios – a short tone.
• On multikey radios – an alternating tone.
7.2

Multikey Feature

This feature allows the radio to be equipped with multiple encryption keys. It can support two or more
encryption algorithms simultaneously (e.g., AES and DES-XL).
• Conventional Multikey – The encryption keys can be tied (strapped), on a one-per-channel
basis. In addition, the radio can have operator-selectable keys, operator-selectable indices, and
operator-selectable key erasure. If talkgroups are enabled in conventional, then the encryption
keys are strapped to the talkgroups.
• Trunked Multikey – If the radio is used for both conventional and trunked applications, strap
the encryption keys for trunking on a per- talkgroup or announcement group basis. In addition,
a different key can be strapped to other features; for example, dynamic regrouping, failsoft, or
emergency talkgroup. The radio can have operator-selectable key erasure.