T3011DX KVL Does Not Support DES-OFB on UCM
Moderator: Queue Moderator
-
- Posts: 1825
- Joined: Tue Nov 05, 2002 12:32 am
T3011DX KVL Does Not Support DES-OFB on UCM
Found out today that one really does need the KVL 3000 Plus!
Since the UCM now replaces virtually all previous encryption boards, it is interesting (and sad) to note that the T3011DX will not talk to a UCM, even in the case where you are simply replacing a bad DES-OFB board with its replacement---the UCM. Turns out that any flavor of UCM needs the KVL 3000 Plus. Even the older KVL 3000 will not work, let alone the T3011DX, fort DES-OFB on the UCM (even if you never use AES).
I was under the impression that the KVL 3000 Plus was only necessary to support the AES mode on the UCM. I found out from Motorola today that any flavor of encryption on the UCM board (including DES-OFB) must have the KVL 3000 Plus for code key insertion (and you must have the Plus series with the 3Q02 latest firmware) to work. So, even if you just are doing a Mtce swap out, if you use the UCM 9and you have to unless yoiu can find an old DES-OFB board), you must buy a KVL 3000 Plus, and they ain't cheap. I suppose the eBay price for a T3011DX now goes to almost zero. Now, how can we hire that Mktg GENIUS from the Big M?! Oh well, it's just money...
Larry
Since the UCM now replaces virtually all previous encryption boards, it is interesting (and sad) to note that the T3011DX will not talk to a UCM, even in the case where you are simply replacing a bad DES-OFB board with its replacement---the UCM. Turns out that any flavor of UCM needs the KVL 3000 Plus. Even the older KVL 3000 will not work, let alone the T3011DX, fort DES-OFB on the UCM (even if you never use AES).
I was under the impression that the KVL 3000 Plus was only necessary to support the AES mode on the UCM. I found out from Motorola today that any flavor of encryption on the UCM board (including DES-OFB) must have the KVL 3000 Plus for code key insertion (and you must have the Plus series with the 3Q02 latest firmware) to work. So, even if you just are doing a Mtce swap out, if you use the UCM 9and you have to unless yoiu can find an old DES-OFB board), you must buy a KVL 3000 Plus, and they ain't cheap. I suppose the eBay price for a T3011DX now goes to almost zero. Now, how can we hire that Mktg GENIUS from the Big M?! Oh well, it's just money...
Larry
KVL3K+
Whats the actual part # for this?
EDACS - Every Day Another Customer Screams...So a few al-Qaeda tourists got locked without a trial in Camp X-ray? Pass the
Kleenex...BOO, HOO, HOO.....AMERICA Should have turned a large chunk of the world into a parking lot.
Kleenex...BOO, HOO, HOO.....AMERICA Should have turned a large chunk of the world into a parking lot.
- XDCLabs.COM
- Posts: 122
- Joined: Fri May 31, 2002 6:50 pm
Did they mention which version? I know for a fact that certain versions of UCM will support DX KVLs. The UCMs can keyload in 2 modes. The old mode is called ASN mode. The new mode is APCO mode and the keys can only be used when CKR key management is turned on in RSS. You need fairly new firmware for this. Did I loose anyone...? 

-
- Posts: 1825
- Joined: Tue Nov 05, 2002 12:32 am
- XDCLabs.COM
- Posts: 122
- Joined: Fri May 31, 2002 6:50 pm
- XDCLabs.COM
- Posts: 122
- Joined: Fri May 31, 2002 6:50 pm
If the EMC version is 3.x or greater, then it's a UCM. To the best of my knowledge, these are compatible with DX KVLs and don't force you to use CKR key management. M is usually pretty good about backwards compatibility. They take great pains to make sure older equipment and features still work. But they may have made an internal decision to discontinue PID based ASN key management and steer customers towards the newer CKR based key management in order to keep dev and maintenance costs down.
See whether they accept keys and actually rx/tx in secure mode with a DX KVL.
See whether they accept keys and actually rx/tx in secure mode with a DX KVL.
-
- Posts: 433
- Joined: Sun Sep 09, 2001 4:00 pm
XDCLabs.COM wrote:If the EMC version is 3.x or greater, then it's a UCM. To the best of my knowledge, these are compatible with DX KVLs and don't force you to use CKR key management.
See whether they accept keys and actually rx/tx in secure mode with a DX KVL.
My Agency has the Astro Saber and Astro Spectra with a ECM version of "R03.43" and I can tell you that the T3011DX will load code with out any problems.
Dan...
-
- Posts: 1825
- Joined: Tue Nov 05, 2002 12:32 am
The context of my discussions involved the most current Host/DSP in the XTS 3000 and ASTRO Spectra mobiles (I'm going to have them upgraded---Ouch!) and then the current UCM running AES and DES-OFB (replacing our existing DES-CFB in these radios). They told me I will need the KVL 3000 Plus, although we have many KVL T3011DX new in the box and several that we've hardly used, so it was not great news. I asked about the case where for a short time we may need just DES-OFB and would we need the 3000 Plus for that and we werer told Yes.
Larry
Larry
-
- Posts: 1825
- Joined: Tue Nov 05, 2002 12:32 am
Not an option. In competing for copter air support contracts, it is becoming increasingly necessary to be AES capable, or you are not even allowed to submit the bid (it gets rejected outright as Non Qualifierd). I didn't make the rules, it's just reality. I wasn't kidding when I mentioned how fast this thing is moving.
larry
larry
-
- Posts: 1825
- Joined: Tue Nov 05, 2002 12:32 am
- XDCLabs.COM
- Posts: 122
- Joined: Fri May 31, 2002 6:50 pm