1. 1Crypto AG / CN_M_HC-2650-Operation-e_0830_rd.PPT Training and Education HC-2650 Operation - Course Notes

2. 2Crypto AG / CN_M_HC-2650-Operation-e_0830_rd.PPT Operating Elements1 Operating Principles2 Operator’s Functions3 Security Data Carrier (SDC-1050) Operation4 Agenda

3. 3Crypto AG / CN_M_HC-2650-Operation-e_0830_rd.PPT Unit Front Operating Elements The AUDIO-SDC Interface is:- connector for the optional handset for voice communication - connector for SDC-1050 Smart Plugs The rotary selector is used to: - adjust the volume for voice communication - select a preset - scroll horizontally backwards and forwards through the menus. The Enter key is used to: - activate preset selection (press briefly) - enter the menu (press and hold down) - select a menu or function and select displayed/entered data The Escape key is used to move upwards in the menu hierarchy. The Plain/Cipher key (P/C) is used to switch between Plain mode and Cipher mode.

4. 4Crypto AG / CN_M_HC-2650-Operation-e_0830_rd.PPT Unit Front Indicators The alphanumeric liquid crystal display (LCD) shows information and data. The STATUS LED shows the operational status of the unit. The Plain LED (P) indicates when the unit is switched to Plain mode. The Cipher LED (C) indicates when the unit is switched to Cipher mode.

5. 5Crypto AG / CN_M_HC-2650-Operation-e_0830_rd.PPT Unit User Interface The Unit user interface is the front panel display, keys, status, plain/cipher LEDs, and rotary selector. It is used to: 1. Increase or decrease the volume 2. Select a Preset 3. Enter, display and change configuration data 4. Enter secret data 5. Start a PC UI session Log in and entering keys and passwords can only be done using the display, the keys, and rotary selector. This ensures the highest level of security.

6. 6Crypto AG / CN_M_HC-2650-Operation-e_0830_rd.PPT LED Indicators Status LED PLAIN (P) and CIPHER (C) LEDs

7. 7Crypto AG / CN_M_HC-2650-Operation-e_0830_rd.PPT Display during Transmission/Reception Status LED lits green, PLAIN (P, red) or CIPHER (C, green) LED lit At the end of the lower line there is the indicator for the active algorithm H for the Home Algorithm or A for the additional. During transmission the display shows the active preset in £ the upper line and in the lower line Tx, the service used. During reception the display shows the active preset in the upper line and in the lower line Rx and the speed of transmission and on the right side The S/N ratio in db. Pre: Presetlabel Tx: Voice SRC H Pre: Presetlabel Rx: SRC 12

8. 8Crypto AG / CN_M_HC-2650-Operation-e_0830_rd.PPT Display of the Idling Unit When idling the display shows the welcome text in the upper line. At the end of the lower line there is the indicator for the active algorithm H for the Home algorithm or A for the Additional algorithm. welcome text H

9. 9Crypto AG / CN_M_HC-2650-Operation-e_0830_rd.PPT Operating Elements1 Operating Principles2 Operator’s Functions3 Security Data Carrier (SDC-1050) Operation4 Agenda

10. 10Crypto AG / CN_M_HC-2650-Operation-e_0830_rd.PPT Start the Unit User Interface (UI) The Unit UI can be used as soon as power is applied to the unit. The display shows the active preset or welcome text, current status and active algorithm. Change volume: Turn the rotary selector; volume level (1 to 10) is shown in the display. Display active Preset:Press the Enter key briefly and the active preset is displayed. Change Preset: When the active preset is displayed, press the Enter key briefly. The current active Preset flashes on the display.Turn the rotary selector to select required Preset and then press the Enter key to confirm. The new active preset is displayed. Plain / Cipher: Switch between Plain and Cipher mode by pressing the key P/C. The active mode is indicated by the ‘P’ and the ‘C’ LEDs. Enter into the menu: Press the Enter key for 2 seconds. MultiCom Idle H

11. 11Crypto AG / CN_M_HC-2650-Operation-e_0830_rd.PPT Navigation through the menus By pressing the “ENTER” key for two seconds one can access the main menu. By turning the Rotary selector one selects a menu. Passwords and other values are entered with the rotary selector. The rotary selector replaces a keyboard. This feature is the key to construct such a small, compact unit. By pressing the “ESCAPE” key one can step backwards. MultiCom Idle H

12. 12Crypto AG / CN_M_HC-2650-Operation-e_0830_rd.PPT Configuration of the HC-2650 The HC-2650 is set up and configured using one or all four interfaces: 1. Unit user interface (UI) 2. PC user interface (UI), connected to the Remote interface 3. Command Line Interface (CLI), connected to the Remote interface 4. Security Data Carrier (SDC-1050), connected to the Audio interface

13. 13Crypto AG / CN_M_HC-2650-Operation-e_0830_rd.PPT Menu Access The menus and submenus are accessed using the rotary selector The end of a menu has been reached when >>> <<< is displayed. Further turning takes you back to the first item in the menu. Turning the rotary selector clockwise will move you forward in the list. Turning the rotary selector anticlockwise moves you backward in the list. Pressing the Enter button means select/accept/confirm a menu, value or entry.

14. 14Crypto AG / CN_M_HC-2650-Operation-e_0830_rd.PPT Menu Access Control Control and configuration functions are protected by access control. There are different levels of access control: Operator: Access to changing volume, select presets, plain / cipher selection => no password required Application Manager: Access to a subset of the menu => Application Manager Password required => no password required, if Appl Mgr PW Protection is set to “Off” Security Manager: Access to the entire menu => Security Manager Password required SDC Import PW:For reading SDCs containing CMP or MMK this password can be used in place of the security manager password.

15. 15Crypto AG / CN_M_HC-2650-Operation-e_0830_rd.PPT Operating Elements1 Operating Principles2 Operator’s Functions3 Security Data Carrier (SDC-1050) Operation4 Agenda

16. 16Crypto AG / CN_M_HC-2650-Operation-e_0830_rd.PPT Volume, P/C Selection

17. 17Crypto AG / CN_M_HC-2650-Operation-e_0830_rd.PPT Preset Selection QRK-3 Preset selection rules: If the radio conditions are good choosea preset with standard rate coder(QRK-5) With average conditions choose a preset with low rate coder(QRK-3) In bad radio conditions and with HC-265 choose a preset using WF-265(QRK-1) For data transmission or reception choose a preset with data service(DATA)

18. 18Crypto AG / CN_M_HC-2650-Operation-e_0830_rd.PPT Preset Selection Criteria Preset

19. 19Crypto AG / CN_M_HC-2650-Operation-e_0830_rd.PPT Emergency Clear (Delete all CKs) Press the Escape and Enter keys at the same time for 2-3 seconds to clear all CKs in the unit. This can also be done when the unit is not connected to power. If power is on or at the next power on: All CKs are deleted Transmission is interrupted The unit re-boots (power cycle) immediately. MultiCom Idle H

20. 20Crypto AG / CN_M_HC-2650-Operation-e_0830_rd.PPT Select Algorithm 1.To change between Home and Add1 algorithm press Enter for two seconds. 2.Go to Select Algorithm, press enter. The current algorithm is blinking. 3.Find the wanted algorithm with the rotary selector and press enter. The display shows: Changing algo! awaiting boot…

21. 21Crypto AG / CN_M_HC-2650-Operation-e_0830_rd.PPT Factory Reset A factory reset sets the configuration of the unit back to the factory configuration. All user-entered data is lost. The following is done: 1. All Domains, including All CKs are deleted 2. CMP is reset to the customer-specific default value 3. Parameters are reset to default values or settings 4. All log entries are cleared. An entry is made to show that a factory reset occurred. 5. All passwords (except the Factory Reset password) are cleared or reset to their defaults. The following data is kept: The date and time of the real time clock are unchanged. When you have made a factory reset, always wait for: before doing anything else. The default factory reset password is: 23719485. It can not be changed. Factory Reset

22. 22Crypto AG / CN_M_HC-2650-Operation-e_0830_rd.PPT Unblock Unit The security manager can block a unit. Blocked means, that the unit does not communicate in cipher nor plain mode and that the application managers access is not possible. In this case the unit will display ‘Unit blocked’ in the second line. To make it operational another person can unblock it using the unblock password given by the security manager. Security manager menu access will also unblock a blocked unit. Units may be blocked e.g. for transportation, during short storage before use or other reasons. Unblock Unit

23. 23Crypto AG / CN_M_HC-2650-Operation-e_0830_rd.PPT Unlock Passwords Users enter a password to log in to the menu. The unit counts how many times the password is entered incorrectly. If a password is entered incorrectly five times, that user level is locked. The Unlock PWDs function is also located under special functions. Here you can unlock any user level or reset the counter. For the operation the Unlock PWDs password is needed. The Unlock PWDs password is defined by the security manager. It must be exactly 15 digits/characters long Unlock PWDs

24. 24Crypto AG / CN_M_HC-2650-Operation-e_0830_rd.PPT Operating Elements1 Operating Principles2 Operator’s Functions3 Security Data Carrier (SDC-1050) Operation 4 Agenda

25. 25Crypto AG / CN_M_HC-2650-Operation-e_0830_rd.PPT The SDC-1050 Smart Plug (1/2) The SDC-1050 is a small portable device which is used to distribute: Security and configuration parameters to other HC-2650 units. Keys and passwords as well as installation and configuration settings can be read from the SDC into the unit. The SDC is also used to back up all the data programmed into the unit. It enables you to completely restore the unit setup at any time.

26. 26Crypto AG / CN_M_HC-2650-Operation-e_0830_rd.PPT SDC-1050 (2/2) The SDC-1050 is therefore integrated in a strong metal housing with a connector. The well protected smart card is also called smart plug or key gun. In an army vehicle e.g. one needs a strong waterproof tool. The SDC-1050. It can be programmed with the SMC-1100 as well as with a HC-2650.

27. 27Crypto AG / CN_M_HC-2650-Operation-e_0830_rd.PPT Clear Data from SDC 1. Connect the SDC to the Audio-SDC connector. For that you align the flat face of the connector on SDC with the marking on the Audio-SDC connector. Push the SDC towards the unit and turn it clockwise.

28. 28Crypto AG / CN_M_HC-2650-Operation-e_0830_rd.PPT Read Data from an SDC (1/4) 1. Select the required algorithm. The data on the SDC is algorithm specific. 2. Connect the SDC to the AUDIO-SDC connector on the front of the unit 3. Align the flat face of the connector on the SDC with the marking on the AUDIO-SDC connector. 4.Push the SDC towards the unit and turn it clockwise. SDC is emptyIf the display shows: then the SDC is empty. Disconnect the SDC

29. 29Crypto AG / CN_M_HC-2650-Operation-e_0830_rd.PPT Read Data from an SDC (2/4) If the display shows: Then the SDC is for an algorithm that is not selected. Select the correct algorithm and wait until the unit reboots. SDC is not emptyIf the display shows Then the SDC is not empty. The Label should tell you what the SDC is for. Check the label to make sure this is the SDC you want to read.

30. 30Crypto AG / CN_M_HC-2650-Operation-e_0830_rd.PPT Read Data from an SDC (3/4) 5. Do the following to read the data from the SDC. Depending on what data is stored on the SDC, you might have to enter a password. This can either be the SDC Import password or the Security Manager password. If a password is requested and you do not know either password, you will not be able to read the data from the card. 6. The data has been read from the SDC. It can be disconnected now. Enter the SDC Import password or turn the selector to enter the Security Manager password.

31. 31Crypto AG / CN_M_HC-2650-Operation-e_0830_rd.PPT Read Data from an SDC (4/4) MMK / CMP not correct If the display shows: The MMK or CMP used to protect the data on the card does not match the one in this unit. IMPORTANT If a Backup SDC is read into a new unit, the Unit ID of the backup unit is read into the new unit. That results in two or more units having the same Unit ID. Enter the correct Unit ID: Log in as Security Manager Security General Data Unit ID: Enter the corrrect Unit ID

32. 32Crypto AG / CN_M_HC-2650-Operation-e_0830_rd.PPT To Remain Sovereign

33. 33Crypto AG / CN_M_HC-2650-Operation-e_0830_rd.PPT www.crypto.ch Thank you for your attention.