KVL Fail on DIU3000

[Matt]

All, I've been charged with converting my department's radios to use encryption by the higher-ups. (Tell them you know a little about radios and they are on that so fast).

I have learned how to use the KVL3000 to keyload our radios, but whenattempting to program the DIU3000 UCM with a key, the DIU displays "KVL FAIL" and the KVL will not load a key.

I do not have access to the DIU programming as of yet, but suspect that has a major part in not letting me load a key.

I am using CKR, and in the DIU manual, it says that PID is the default mode for key storage. I am guessing that I need to change that to CKR in order to load this sucker up. Also, the UCM is loaded with DES-OFB / AES-256.

Any hints on DIU / KVL communications?

[N4DES]

First question I have is if there is a need for these encrypted talk-groups to reside on a console? If that answer is No, then there is no need to load the DIU with anything and you are spinning your wheels.
As to the communication issues, have you used the hirose cable to program anything else? Are you sure that the cable is good?

I have never had an issue with loading my DIU's and I have about a 1/2 dozen keys loaded in them on a SZ 3.0 system. They are a little tricky in the mapping because only 1 key, that resides in slot 3, can be patched. There is a spreadsheet that you have to work with to make sure that you don't overright other keys, identify the primary patchable key, etc.

[Matt]

Ahh, sorry! Failed to mention that this DIU is connected to our dispatch console, and without it, the dispatcher is unable to hear us when we go encrypted (unless they have a portable radio loaded with encryption in dispatch as well).

We are passing encryption through our repeater fine, just want to get encryption coming from dispatch.

Cable / KVL / Everything is good. I have been loading up radios for the past 2 weeks with a combination of cables / keys.

[d119]

Are you certain that the UCM has the correct algorithms in it? What happens if you put the KVL in ASN mode and try to load a key?

[Bigfella237]

Why don't you just switch the KVL back to ASN mode and load the keys to the DIU that way?

A key is a key so long as it has the same algo, KID & variable as the other keys, the CKR / PID only defines how the keys are referenced within the target, they're not used over-the-air at all.

Andrew

[Bigfella237]

Any update on this Matt?

Did you get it to work?

Andrew

[Matt]

I tried ASN mode, and was able to load an AES key, but no DES.

I suspect that even though my UCM order from says it has DES / AES, it only has AES.

Any way to get it to work in Astro Mode?

[Matt]

Ok, so after a few weeks of being out sick, and swapping UCM's (had a spare on hand, that I was able to verify had both DES / AES in it), I have the DIU transmitting and receiving encrypted.

The problem: The console connected to the DIU located on the other side of a wall will not transmit encrypted, even though the mode on the DIU is set to encrypted. It is receiving the encrypted voice from the DIU.

Is there something I'm missing here to get the console transmitting encrypted?