I have a VHF MCS2000 Model 1 which came with an XL Chip installed for analog Securenet (I think) operation.
I have successfully programmed the MCS2000 with standard DOS RSS in conventional mode although I switched off the Secure Feature...just a "Secure Yes/No" field in the RSS... and excuded all the trunking channels from the Zone allocation.
I am reading up on Secure operation starting with Batdude's excellent paper..but I just have a few brief questions:
- Does an XTS5000 have analog Securenet capability? (so I can talk to the MCS2000 in secure mode)
- Does Securenet work in conventional mode or is it only a trunking feature?
- Do I need a special Keyloader to operate Securenet on the MCS2000 or can I just use standard RSS with a standard RIB?
- If I had kept the RSS Secure field as "Yes" (I've saved the original codeplug) would I have been able to write back the amended codeplug to the radio with standard RSS or would it have been rejected?
Thanks
MCS2000 Model 1 - XL Chip - Secure Equiped??
Moderator: Queue Moderator
Re: MCS2000 Model 1 - XL Chip - Secure Equiped??
- Yes
- It works in conventional and trunking modes, but only on 25KHz channels. Securenet will not work on narrowband channels.
- You need a KVL, but what type you need depends on the algorithm installed on the crypto module. What part number is on the secure module?
- Yes, the radio doesn't care at that point. If the module isn't present when the radio powers on but you have secure hardware equipped enabled, the radio will throw an error when it boots and whenever you select secure mode or try to transmit with secure selected.
If you selected no but the radio does have a secure module, nothing happens; the radio simply doesn't bother talking to the secure module and acts as though it isn't there.
- It works in conventional and trunking modes, but only on 25KHz channels. Securenet will not work on narrowband channels.
- You need a KVL, but what type you need depends on the algorithm installed on the crypto module. What part number is on the secure module?
- Yes, the radio doesn't care at that point. If the module isn't present when the radio powers on but you have secure hardware equipped enabled, the radio will throw an error when it boots and whenever you select secure mode or try to transmit with secure selected.
If you selected no but the radio does have a secure module, nothing happens; the radio simply doesn't bother talking to the secure module and acts as though it isn't there.
Re: MCS2000 Model 1 - XL Chip - Secure Equiped??
Thanks mr.syntrx
Do I have to open the MCS2000 to establish the cryto module part number or can you use RSS info screen?
If I program new frequencies and then enable Secure mode, will the original encryption key still be remembered..or do you need to use a KVL when you change frequencies? ..although I suppose I will need to be using 2 radios from the original system as there will be no way of programming another radio without a KVL?
Thanks
Do I have to open the MCS2000 to establish the cryto module part number or can you use RSS info screen?
If I program new frequencies and then enable Secure mode, will the original encryption key still be remembered..or do you need to use a KVL when you change frequencies? ..although I suppose I will need to be using 2 radios from the original system as there will be no way of programming another radio without a KVL?
Thanks
Re: MCS2000 Model 1 - XL Chip - Secure Equiped??
You'll need to look inside the radio.
The radio will have lost its keys long ago when it was powered off, there will be nothing in it now. You can normally program the radio as much as you like without losing the keys, but pulling the power will cause it to lose them.
The radio will have lost its keys long ago when it was powered off, there will be nothing in it now. You can normally program the radio as much as you like without losing the keys, but pulling the power will cause it to lose them.
Re: MCS2000 Model 1 - XL Chip - Secure Equiped??
I presume "powering off" means removing the vehicle battery or switching off the PSU?...not just switching off the radio using the front panel switch.
What about encrypted XTS5000's - do you loose the key if you remove the battery or the battery goes flat?
What about encrypted XTS5000's - do you loose the key if you remove the battery or the battery goes flat?
Re: MCS2000 Model 1 - XL Chip - Secure Equiped??
It means disconnecting power from the main power cable, yes.
On ASTRO radios you can enable infinite key retention, which causes the keys to be stored permanently unless you deliberately zeroize the radio, upgrade the UCM firmware, or mess with CKR or PID mode options in the secure hardware screen. No such option exists on earlier equipment though.
On ASTRO radios you can enable infinite key retention, which causes the keys to be stored permanently unless you deliberately zeroize the radio, upgrade the UCM firmware, or mess with CKR or PID mode options in the secure hardware screen. No such option exists on earlier equipment though.
Re: MCS2000 Model 1 - XL Chip - Secure Equiped??
If 2 identical MCS2000's were set up using an encrypted conventional channel..and then the power was pulled...would both radios still be able to communicate with no key. Does the channel default to clear mode?
Re: MCS2000 Model 1 - XL Chip - Secure Equiped??
No, you have to press the secure button to select clear mode, unless the radios were secure strapped. If so, the radio will prevent you from transmitting on that channel at all until you load a key.
Re: MCS2000 Model 1 - XL Chip - Secure Equiped??
Is there any way you can use secure mode without a KVL?
Maybe there is a secure Test mode or something which uses a lower level of encryption...probably wishful thinking!!!!
Can you homebrew a KVL?
Maybe there is a secure Test mode or something which uses a lower level of encryption...probably wishful thinking!!!!
Can you homebrew a KVL?
Re: MCS2000 Model 1 - XL Chip - Secure Equiped??
No, it won't function without a key loaded, and the only way to load a key is using a KVL.
You *could* build a KVL, but you'd require a real one in the first place to reverse engineer the protocol to be able to reimplement the protocol it uses to talk to the radio. So realistically, no.
You *could* build a KVL, but you'd require a real one in the first place to reverse engineer the protocol to be able to reimplement the protocol it uses to talk to the radio. So realistically, no.