Extended Key From KOI-18(Paper tape]

Menu: Fill devices> Security password> K0I-18>ExtendedPress Enter, wait for "reading... " to be shown inthe display, then pull the Paper tape.

Enter Remote black IP address, Key period andKey update period by following the instructionson the display.

Response on TCE 621: Completed. Errors: O/O

Basic Key From KOI-1 8[Paper tape)

Menu: Fill devices> Security password> KOI-1 8>Basic

Press Enter, wait for "reading... " to be shown inthe display, then pull the Paper tape.

Enter Key type, Remote black IP address, Keynumber, Key period and Key update period byfollowing the instructions on the display.Response on TCE 621: Completed. Errors: 0/0

NATO has selected Cryptel-IP asNATO IP Crypto Equipment, NICE

T H A L E S

T H A L E SOne of Norway's leading engineeringenvironments for developing secure androbust IT- and Communications systems.

The international high-tech group developingproducts and secure systems across IT &Services, Defence and Aerospace.

Exploiting technology and knowledge gainedthrough years of development with demandingmilitary users to produce new solutions forthe commercial market.

QUICK REFERENCE GUIDE3AQ 12845 ABAAEOEd.6

Applies for the following versions:• TCE 621

TCE 621/B• T C E 6 2 1 / C

T H A L E SThales Norway AS

RO. Box 744 Sentrum - 0106 Oslo, NorwayVisiting address: Nedre Vollgate 11, Oslo

Phone: +47 22 63 83 00 - Telefax: +47 22 63 83 01servicedesk.norway@thalesgroup.com - www.thalesgroup.com

www.thalesgroup.com

QUICK REFERENCE GUIDE3AQ 12845 ABAA EO Ed. 6

PARAMETERSParameters that have to be defined beforethe configuration can start:

The TCE 621 PZI Id.Red IP address and subnet maskBlack IP address and subnet maskIP address to Black Default RouterPZMC id. to preferred management centreUse IP version 4 or 6 for management communicationIP address to preferred management workstationIP address to preferred management front-end unit

INITIAL CONFIGURATIONInsert the Crypto Ignition Key (Smart-Card).Switch the EMERGENCY ERASE Switch to right (off).Switch Power ON, the Self Test will start. After the Self Testthe Display will show: SOFTWARE VERSON621NGENX-XX 08-JUL-05

The Software version will be displayed.Press "Enter" (on the keypad).

The Initial Configuration of the unit can start:

Enter the PZI Id.

Enter and verify the Operator password.Enter and verify the Security password.

Select Data Entry from Keypad, press down-arrow andEnter to confirm.

Select Location> User-Loo, press down-arrow.

Set Mode of operation to Auto (Automatic distribution ofkeys from the management centre), press down-arrow andEnter to select.

Set KVT distribution control to Conditional (Distribute new KVTonly if the old key has been used) or Unconditional [AlwaysDistribute new KVT). [Use the default value if nothing else hasbeen decided.) Press "Enter".

Enter Own red IP address: X.X.X.X (IPv4) or X:X::X (IPv6)Enter Own red subnet mask: Y.Y.Y.Y (IPv4) or Y (IPv6]

Enter Own black IP address: X.X.X.X (IPv4) or X:X::X (IPv6)Enter Own black subnet mask: Y.Y.Y.Y [IPv4] or Y (IPv6)

Enter IP address to Black Default Router.

Enter PZMC Id. to preferred management centre.Set IP version for management communication: IPv4 or IPv6,Press Enter.

Enter IP address to preferred management work station.Enter IP address to preferred management front end unit.

Select IP-Params: [i.e. handling of IP header information]

TOS+TrafficClass

Flow Label(Use default value (No-Transfer) if nothing else has beendecided.]

Set time: Year, Month, Day, Hour, Minute and Second

Initial configuration is now finished. Wait until the unit isupdated. The display shall show:

KEY LOADING

Clear-text keys from DTD:Menu on TCE 621: Fill devices> Security password>DTD> Red Key

On the DTD, select: Xmit> Fill.Select Keys in DTD.Connect the DTD to the TCE 621.

Press Enter on TCE 621 and start loading key fromthe DTD.

Response on TCE 621: Completed. Errors: O/O

Keys from Smart-Card:Menu on TCE 621: Fill devices> Securitypassword> Smart-Card

Follow the instruction on the displayRemove the CIK-card when requested to do so.Insert the smart-card containing keys and pressEnter

Response on TCE 621: Completed. Errors: 0/0

THALES TCE621/BOperator password:

Cryptel-IP T H A L E S