1. Simple Key Loader (SKL)
AN/PYQ-10 (C)

2. AGENDA INTRODUCTION/CHARACTERISTICS PHYSICAL FEATURES AND CONTROLS
CALIBRATE/ SET DATE AND TIME
LOG IN PROCEDURES
USER APPLICATION SOFTWARE FAMILIARIZATION
BASIC KEY/LOADSET BREAKDOWN
ADD EQUIPMENT/ CREATE AND ADD PLATFORM
TRANSFER/RECIEVE DATABASE FROM SKL TO SKL
LOAD ASIP RADIO/ LOAD DAGR(SINGLE KEY)
AUDIT FUNCTION FAMILIARIZATION
PROPER SHUT DOWN PROCEDURE
EMERGANCY DISTRUCTION

3. Safety Considerations
THIS LESSON CONTAINS NO SAFETY CAUTIONS

4. References TM 11-5810-410-13&P, 1 July 2007
Operator’s and Field Maintenance Manual
Quick Reference Guide, 1 NOV 08
Simple Key Loader, AN/PYQ-10(C)
CSLA,
SKL Training Material and Practical Exercise
Communication Support Services, INC
SKL User Application Software v3.3 Training Material
SKL Practical Exercise
NSA Doctrine, Interim Operational Security Doctrine (IDOC) Jul 05

5. FOR OFFICIAL USE ONLY CLASSIFICATION THIS COURSE IS
ADDITIONALLY, THIS COURSE
IS NOT RELEASABLE TO
MILITARYSTUDENTS FROM
FOREIGN COUNTRIES
IAW DA PAM

6. Introduction Ruggedized Handheld Personal Digital Assistant (PDA)
The Simple Key Loader (SKL) is the replacement for the Data Transfer Device (DTD)
Interfaces to Local Management Device/Key Processor (LMD/KP), Automated Communications Engineering Software (ACES), DMD, CT3 DTDs
Handles, Views, Stores and Loads SOI, Key, Electronic Protection (EP) Data
The SKL is a Controlled Cryptographic Item (CCI) because of the KOV-21 Information Security (INFOSEC) card imbedded in it.
Authorized up to TS key and Secret Data (SOI)

7. (Data Transfer Device)
SKL vs. DTD
(Data Transfer Device)
AN/PYQ-10 (C) AN/CYZ-10
SKL Specification DTD
32 bit 400 MHz (300 MHz) Processor (4 KHz)
3.5” Color Display Display lines 24 characters
64 Mg Ram, 64 (32) Mg Flash Mem Storage Kb Ram, 256Kb Flash Mem
6 pin RS-232 & 2 Mini USB Interface Pin RS-232
Rechargeable Battery Packs Power volt or 3 ea 2/3A batteries
Key Storage
TEK,KEK 500, Traditional ,000 TEK/KEK
FFK 5,000-8, Modern FFK
(plus/minus10%)
SDS - 300MHz, 64M, 32M flash, passive styles or touch screen, battery built into SDS
Instructor: Under SKL the numbers in ( ) are the SDS numbers
The SKL has no hard drive:
Flash Memory, OS and application are stored on non-volatile
Storage Memory contains the encrypted database
SKL also has 64Mg of working memory that the SDS does not have.
(SDS information)

8. SKL Compatibility CT3, RDS, FILL and ANCD is software on a DTD
Transfer
CT3
RDS
FILL
ANCD
KOI-18
KYK-13
KYX-15
LCMS
ACES
Keys
Database/ Loadset
SOI
Audit Trail
Receive
Black Key Packet
The SKL has comprehensive User Application Software (UAS) that replaces CT3, RDS, FILL and ANCD software,
while backward compatibility to with CT3 software.
CT3, RDS, FILL and ANCD is software on a DTD

9. Army Key Management System (AKMS)
Electronic Key Management System (EKMS) National Program
Army Key Management System (AKMS) which is made up of:
Automated Communications Engineering System (ACES) Dell Latitude D810, windows based
ACES performs Network Planning, SOI’s, HOPSETS, etc
ACES software version 1.8 with accept Black Key Packages from the LCMS and transfer it to the SKL
2. Local Management Device/Key Processor (LMD/KP) Dell Power Edge Server 700, SCO Unix based
To account for COMSEC material, physical or electronic.
3. Fill Devices
Army Key Management System (AKMS)

10. Controls Fill Port KOV Light Zeroize Button Power Button
Inductive Stylus Holder
Inductive Stylus
ADT SCREEN
Fill port – standard RS232
KOV Light- When KSV-19 card inside the SKL is initiated the light will be luminesent
KSV-19 Housing If any of the protective screw coating is in anyway damaged it is a COMSEC incident and must me reported immediately.
Zeroize Button – Zeroizes the database and key not passwords and logins
Active Display technology, not a touch screen. Only works with inductive stylus.
Inductive touch-panel technology creates a magnetic field above the display's surface and can then detect changes in this field when a special pen with passive circuitry is in range. The pen's position can be detected even when it is above the surface of the panel so that hovering and variable pressure effects can be used as part of user interface.
4 General Purpose Buttons
CIK Access
5-Way Control Buttons
(Mouse Mode)
Brightness Controls

11. Controls Open and Close Start Menu Open Selected Application (UAS)
Night Vision Goggle Mode
Activates 5 Way Direction Buttons
Button 1, Open and Close Start Menu
Button 2, Opens selected application (Only works within UAS)
Button 3, Night Vision Goggle Mode
Button 4, Activates mouse mode/5-Way control buttons

12. Controls 2 - USB ports Mini- B (BOTTOM, disabled) Mini- A
(TOP, read only)
CIK (one per SKL)
Insert and remove CIK only while turned off
USB mini-A can be used for keyboard, mouse and mass storage (write disabled)
USB mini-B is disabled
Ensure SKL is powered down before installing or removing the CIK, can cause CIK or KOV-21 card failure
The CIK is reversible and can be inserted either way. Make sure the CIK is firmly seated in the CIK slot.
NOTE: Removal of the CIK with power applied will put the SKL in a ALARM Shutdown in Progress state.
A lost SKL is a COMSEC reportable incident, category of incident is based off the protection of the CIK. Read IDOC paragraphs 46-49
SKL 0N D
PAT.
NO. R D a T K e y

13. Battery

14. Battery Battery Indicator Green 100% - 41% Amber 40% - 11%
Red 10% - 0%
At 2% Pop up every 30 seconds
At 1% the SKL will automatically shutdown
High Capacity: 60 hrs Standard Capacity: 33hrs
AA Battery Pack: 20 hrs
Recharges <2 hrs
DO NOT push the power button when battery is removed (will be a label on newer SKL’s)
Battery indicator drops by 10 until at 10%, then drops by 1.
Green 100 down to 41, Yellow 40 and below, Red 10 and below
At 1% the SKL will automatically shutdown
Main batteries Very Low appears at 2% ( on slide ). will pop up every 30 seconds once you close the pop up.
When recharging the battery, if the led is not lit or flashing go to troubleshooting chart.
When the SKL is in off mode the high capacity battery life is 60 days and 45 days with the standard battery
Cautions from TM: Do not use or subject the battery pack to intense sunlight or hot temperature such as in a vehicle in hot weather.

15. Questions Q: At what percentage will the SKL automatically turn off?

16. 10 MINUTE BREAK

17. Power On - Initialization
Before beginning ensure that the battery is secured in place.
Press Power button and hold for 3 seconds or until SKL turns on.
Wait until SKL security check is complete before you can brighten the screen.
NOTE: You will only see the screen when the KOV-21 (INFOSEC Card) is in an uninitialized state.
Before you logon to the KOV-21, calibrate the stylus (done on initial setup and as needed)
You need to calibrate the stylus to make it easier to use the virtual keyboard

18. Initial SSO Login Active Program ICON At the Default SSO Login screen
Tap on OK
This pairs the KOV-21 card and the host
Active Program ICON

19. Initial SSO Login
Use External CIK associates the SKL to the CIK (Crypto Ignition Key)
Tap on OK
Old password DEFAULTPIN which is already there, so don’t erase otherwise you have to re-enter DEFAULTPIN
Password – case sensitive, 6-12 characters, letters, number and special charters, no spaces in password
After you tap OK a popup should display “password successfully updated”
NOTE: ten consecutive SSO logon failures will result in the KOV-21 card being re-intialized and return it to the uninitialized state.

20. Initial SSO Login Tap on OK
In version 4.0 User Application Software (UAS) is launched automatically.

21. Initial SSO Login On Information pop up – tap on OK
The first time you use the SKL from an uninitialized state there is no database and one is created.
Startup Information display SKL software version, SKL database version, classifications and size of audit trail.

22. Initial SSO Login
At this point you want to exit UAS to finish setting up the SKL for operation.
Calibrate
Set the date/time
SKL Setting
Create User
NOTE: For operational purposes, the SSO account should never be used to access and utilize the SKL UAS program. Rather, create another user account and use it to perform your necessary mission with the SKL UAS program.

23. Re-initialize
NSA Doctrine, Interim Operational Security Doctrine (IDOC) Jul 05
Upon CIK initialization
LKEK - Local Key Encryption Key
HDPK - Host Data Protection Key
CIK must be re-initialized annually
Upon initialization two split keys are created LKEK and HDPK.
The two keys have a cryptoperiod of one year and must be superseded at that time.
LKEK encrypts key
HDPK encrypts data
IDOC c. (U//FOUO) Cryptoperiod – The LKEK and HDPK have a cryptoperiod of one year and must be superseded at that time. This can be accomplished by re-initializing the SDS/SKL and its associated CIK yearly.

24. NSA Doctrine, Interim Operational Security Doctrine (IDOC) 007-04
14. (U//FOUO) Local Key Encryption Key (LKEK) and the Host Data Protection Key (HDPK) - The CIK contains two split keys created upon CIK initialization. These keys perform the encryption and decryption for the SDS/SKL. The split keys are the Local Key Encryption Key (LKEK) and the Host Data Protection Key (HDPK). The LKEK is used for the encryption/decryption of keying material, while the HDPK is used for the encryption/decryption of any information or data that a user may need protected by the SDS/SKL.
a. (U//FOUO) Self-initialization – The SDS/SKL generates a Unique LKEK and HDPK. During initialization, only the splits for the keys are stored on the CIK.
b. (U/FOUO) Re-Initializing – When re-initializing the CIK to create a new LKEK and HDPK, the keys previously protected by that CIK are unrecoverable unless they have first been moved to another device.
c. (U//FOUO) Cryptoperiod – The LKEK and HDPK have a cryptoperiod of one year and must be superseded at that time. This can be accomplished by re-initializing the SDS/SKL and its associated CIK yearly.
IDOC
1. (U) The attached Interim Operational Security Doctrine for the KIK-20 Secure Data Transfer Device 2000 System (SDS) and the AN/PYQ-10 Simple Key Loader (SKL) with embedded KOV-21 Cryptographic Card, dated July 2005, is effective upon receipt.

25. Calibrate Procedure Active Program ICON Program Switching ICON
According to the Quick Reference Guide; calibrate the stylus first. This makes it easier to use the virtual keyboard.
Tap on Active Program ICON – Calibrate (easiest) or
Tap on Program Switching ICON - Calibrate
Windows Start button – Programs – Calibrate
During the PE you will learn how to use the 5 Way Control Buttons,
Active Program ICON
Program Switching ICON

26. Calibrate Stylus
Stylus must be perpendicular when calibrating

27. Set Card Clock/Date Tools – SSO – Set Card Time/Date
Next step is to set the Date then the time
Use a good source for the time
It is very important that when loading an ECU radio net including time from multiple SKL’s,
that each SKL has the KOV-21 card time the same to within 4 seconds.
Only SSO can change Time and Date
Set date first then time
Per QRG and TM
Tools – SSO – Set Card Time/Date

28. Set Card Clock/Date Tap on month Tap on year
Tab on month to get the list of months. Tap on year and use up and down arrows to change year
This only sets the date and time on the KOV-21
Tap on month
Tap on year

29. Get Card Clock/Date Tools – User - Get Card Time/Date
Yes will set Host to match KOV-21 time
No will display KOV-21 time
When loading time comes from Host,
Audit trail uses KOV-21 time
1.28 HOST (SYSTEM) TIME/DATE VERSUS KOV-21 CARD TIME/DATE.
In the Simple Key Loader (SKL) the Host time is very important in that it is the time that is used when loading time to certain ECUs (i.e., SINCGARS, AN/PSC-5, ARC-201D, etc). When using the Date Load feature of the SKL to load keys, the Host date is used not the KOV-21 card date. The only procedure that uses the KOV-21 card time/date is the Audit Trail in Core Library.
The fielded SKL shows the date in the taskbar of the Windows CE.Net operating system (OS). The Host time is transparent to the user, meaning it cannot be seen.
Accordingly, software has been written that allows the Host time/date to sync up with the KOV-21 card time/date. There are two ways this is accomplished. Initially upon power-up the Host time/date is synced to the card time/date. Secondly, once the SSO has set the KOV-21 Card time/date using the procedures in Paragraph then a user can manually tell the system to have the Host time/date sync with the KOV-21 card time/date using the procedure in Paragraph
It is very important that when loading an ECU radio net including time from multiple SKLs, that each SKL has the KOV-21 card time the same to within 4 seconds. Since the Host time is supposed to be in sync with the KOV-21 card time, each radio that is loaded in the net when time is also loaded should be able to communicate. 1-

30. Questions Who can set the KOV-21 time and date? SSO
How often does the SKL need re-initialized?
Annually

31. 5 MINUTE BREAK

32. User Application Software
Logging into UAS
SOI Tab
Platform Tab
Equipment Tab
Key Tab

33. User Application Software (UAS)
You must be logged in to launch UAS
SKL Version 4 automatically launches UAS after login.

34. User Application Software (UAS)
Compatible with DTD, SDS, CT3, ACES, DMD Power workstation and End Cryptographic Units (ECU)
Next we will look at the Platforms tab, Equipment tab, and Keys tab
The RECV and LOAD ICONs: Receive Database, Load ECU from Platform and Equipment tab, will not load individual keys from Key tab

35. Platforms
Equipment
Example of tabs
Keys
SOI

36. Keys Tab KEY: Key Management Loading of single or multiple COMSEC keys
Defines the actual Short Title that is resident on the equipment
Key Management
View key attributes
Delete keys segments
Delete expired keys
Create key tags
Loading of single or multiple COMSEC keys
If using the key tag, it must match exactly what is in the LCMS or it will cause the KP to have an error.
Next we will discuss key fields

37. Equipment Tab Equipment: Equipment Management
Defines the actual hardware that is resident on the platform such as:
SINCGARS RADIO
PSC-5C
ARC-220
KY-68 phone
KG-175
Equipment Management
Add/Edit/Delete/Keys and EP Data
Loading of Single or Multiple Fill Locations

38. Platform Tab Platform: Platform Management
An assemblage with logical grouping of radios and/or COMSEC equipment such as:
HMMV
SHELTER
BDE TOC
APACHE Helicopter
Platform Management
Add/Edit/Delete
Sequential Loading of Multiple assigned equipment
Platform is can also be created in Automated Communication Engineering Software (ACES) and uploaded into the SKL
It is under the Platform tab that your traditional LOADSET will be created and stored.
Before doing a re-initialization of a SKL the database can be transferred to another SKL and transferred back
after re-initialization.

39. SOI Tab Signal Operating Instructions
Displays the selected SOI Edition along with Pyro and Smoke data. It will also display any Quick Reference entries.

40. Key Knowledge Basic Key Break down: USED ETD 01 5AT068
US: Release prefix “US” constitutes
Non releasable to foreign nationals.
ED: Functional Relationships “ED” indicates
Electronic Distribution.
ETD: Indicates if it is a training or operational
Key.
01 is the numerical sequence this key was
Generated.
5AT068: Indicates the COMSEC Account that
Generated The key.
Some common Release prefixes are USKAD, USEAD,USKAT.

41. Key Knowledge
Short Title
Edition
Key

42. Keys Tab KEY TAG - Key variable is needed
YELLOW KEY - Key variable stored
EXPIRED TAG - Segment date has expired
RED KEY - Key variable date has expired

43. View Key Information
View works on any key or key tag listed in the SKL.
From Key Tab
Select a key (highlight the key you want to view)
View (tool bar)
Current Selection
You can find out Key Use (TEK, KEK), where the key was received from, effective dates, classification

44. Delete Selected Segments
SKL Version 3.5 does not display Delete Key Tag, but Delete Segment
Delete Segment will delete both a keys and a key tags
A reason to Delete Segments is a mission change or emergency supersession

45. Destroy Expired Keys View – Key – Expired Keys
You can either put a check in the individual key or key tags
View – Key – Expired Keys

46. Destroy Expired Keys After key or key tags are selected
tap on Delete or Delete All
After you return the UAS Desktop you will see the key or key tags are gone.

47. FM LOADSET BREAKDOWN LOADSETS ARE GENERATED BY THE UNITS
FREQUENCY MANAGER ON THE ACES/JACS
SYSTEM. WITH LIMITED USER INTERACTION.
A LOADSET CONSISTS OF 6 ESETS, TSK, 6 CRYPTO-
VARIABLE KEYS.
THE CRYPTO-VARIABLE KEYS ARE GENERATED BY
THE UNITS COMSEC CUSTODIAN.
THE LOADSET IS COMMONLY LOCATED UNDER
THE PLATs TAB.
FRKS
SINGARS

48. Associating Crypto Key(s) to a LOADSET
-FRKS
-SINCGARS
- C1
- USED 1 TEK
- AB -1
- C6
-USED 2 KEK
-AB
- H0
- H1
- H2
- H3
- H4
- H5

49. Assign Key to LOADSET
If you have a key tag or key loaded into the SKL you can assign it to a piece of equipment.
Equipment Tab – File – Assign – Key Tags
Will be assigning a key to a SINCGARS radio

50. Assign Key to LOADSET
Highlight the key or key tag you going to use, tap on next
Highlight the channel of a SCINGARS radio you want to assign the key or key tag to and tap on Finish
Repeat till all channels are filled in.
The example assigns the key to channel 1

51. LUNCH BREAK

52. Add Equipment
The same a platform tab, you can edit equipment name and delete the equipment.
You can not change Equipment Type, you would have to delete equipment and re-add equipment to make that correction.
New equipment types are added with new versions of SKL software
Practical Exersize:
The equipments name will be DAGR/ BFT
Equipment type will be “Unknown”
The equipment name will be SINCGAR2
Equipment type will be RT1523

53. Assign Key to Equipment
If you have a key tag or key loaded into the SKL you can assign it to a piece of equipment.
Equipment Tab – File – Assign – Key Tags
Practical Exersize:
Assign the DAGR keys 2 “RED” Annual 1 BLACK Monthly.
Assign the TEK and KEK to the SINCGARS2 Equipment.

54. Add Platform Platform Tab Add Platform Other options Delete Platform
Edit Platform
From Platform tab.
File – Add Platform

55. Add Platform
CMD VEH
Bussed – The SKL will be connected to a Fill Port that is in the Platform but not part of the equipment.
Non-Bussed – The SKL will be connected to equipment Fill Port and no Fill Location wakeup or handshake is required.
Type in the name of the platform you want and tap OK.
PRACTICAL EXERSIZE:
NAME THE NEW PLATFORM CMD VEH
Bussed - An example of this is a helicopter where the equipment is in the rear but the Fill Port is located in the Cockpit.
Non-Bussed - KIV-7
**Distribution Path is reserved for future use** from ACES workstation

56. Assign Equipment to Platform
From Platform Tab: File - Assign – Equipment
PRACTICAL EXERSIZE
HIGHLIGHT CMD

57. Assign Equipment to Platform
This equipment will display all the Equipment created in the SKL
Highlight the piece of equipment that you named during add equipment
PRACTICAL EXERSIZE
SELECT SINCGARS
If you have multiple pieces of equipment to assign to that platform you repeat the steps.
REPEAT FOR SINCGARS2 AND DAGR/BFT

58. Questions Can a key tag be assigned to a piece of equipment? Yes
Can you assign multiple pieces of equipment to one platform?

59. TRANSFERING DATABASE SKL TO SKL
From the Core Library desktop select File from the menu bar at the top of the screen.
Select Transmit
Select Database
On the Database Transmit Wizard screen you can select to transmit ALL or Part of a database. Select All
Under Transfer Mode Screen Select SKL
Select Next
SKL will instruct to press transmit to transmit database(s) selected. BEFORE YOU PRESS TRANSMIT Set up Receiving SKL.
Press Transmit SKL will build databases and begin to send data automatically.
Operation Successful dialog box will display when SKL is finished sending.
Select OK. SKL will return to the UAS desktop.
Disconnect SKLs.
From the Core Library desktop select File from the menu bar at the top of the screen.
Select Receive
Select Database
On the Receive Database Screen Select Source : SKL
Profile box will instruct you to connect SKL to SKL.
SKL will display Status Screen you will see the information being transferred in.
When the Database is received a Save Database now? dialog box will popup. Select Yes.
SKL will save database and will display a Operation Successful dialog box when completed.
Select OK. SKL will return to the Received Database screen. If you do not need any more data select Close.
SKL will return to the UAS desktop and you will see the new Database.

60. Receive Database
When using Receive Database, you can receive Platform, Equipment, Key, SOI, etc. Anything that is in the database.

61. Transmit Database
This function is used to transmit from fill device to fill device, e.g. SKL to SKL.
You can use this function when you have to re-initialize the SKL on a annual basis.
Or when new or re-initialized SKL are brought into you to load but have no platforms of equipment.
You can transmit just that information.
But if you have Equipment assigned to a platform, you can select platform only and the equipment gets transferred also.
Anything that is assign get transferred including key and key tags. So if you don’t want to transmit it, you have to un-assign it first.
File – Transmit – Database
You select what you want to transfer and tap on NEXT.

62. Transmit Database Select what you are transmitting to and tap on NEXT
Then tap on Transmit and the other device initiates the receive function

63. Transmit Database
The data is prepared and sent, once transmit is complete Operation Successful, Tap on OK

64. COMSEC PROCEDURES FOR LOADING RTs WITH THE SIMPLE KEY LOADER (SKL)
TURN ON SKL
Double Click ON CORE LIBRARY
LOG IN USING LOG IN AND PASSWORD
SELECT LAUNCH FROM THE TOOL BAR
CLICK OK ON SKL
PLEASE WAIT CHECKING AND DECRYPTING DATA BASE IN PROGRESS
CLICK OK ON THE START UP INFORMTION
SELECT THE PLATS(PLATFORM) TAB (YOU WILL FIND THE APPROPRATE LOADSET HERE)
HIGHLIGHT THE LOADSET YOU WISH TO TRANSMIT.
IN THE UPPER RIGHT HAND CORNER DC ON THE LOAD ICON
GATHERING DATA
SINCGARS MODE SELECT TRANSFER TYPE
ICOM
***Place a check in the block for send time.****
SELECT OK
LOAD ECU WIZARD SCREEN IS DISPLAYED
VERIFY EQUIPMENT IS RIGHT SELECT NEXT
FOLLOW THE INSTRUCTIONS ON THE SCREEN (THIS PRETAINS TO THE RT)
CONNECT CABLE TO THE AUD/FILL PORT
SET FUNCT SWITCH TO LD
SET COMSEC SWITCH TO FH
SET CHAN TO MAN
DEPRESS TWICE HANDSET TO CLEAR ALARM (THIS WILL NOT BE NESSESSARY WHEN USING ASIP)
SELECT SEND WHEN YOU HAVE COMPLETED THE SCREEN
SCREEN DISPLAYS PRESS LOAD (PRESS LOAD ON RT)
Transfer successful (RT will display done)

65. COMSEC PROCEDURES FOR LOADING DAGR WITH THE SIMPLE KEY LOADER (SKL)
HOOK CABLE FROM DAGR TO SKL
GO TO FILE
TRANSMIT
LOAD SELECTED KEYS
PLACE CHECKS NEXT TO USKAD AND USKAD
HIGHLIGHT USKAD
USING “UP” BUTTON MOVE ABOVE THIS ENSURES PROPER LOADING OF KEYS.
BEFORE SELECTING OK DOUBLE CHECK TO MAKE SURE THAT KEYS AND STILL ARE SELECTED.
SELECT OK,
PROTOCOL IS DS 102,
ACTIVATE MODE IS KYK-13
SELECT OK
TRANSMIT ONE KEY
ONCE TRANSMITTED SKL WILL REPEAT PRIOR STEPS FOR SECOND KEY.
DGR
CONNECT FILL CABLE TO J1
START UP
MAIN MENU
COMMUNICATION
CRYPTOFILL
HIGHLIGHT DS 101 ENTER
ENTER TO CHANGE TO DS 102
ENTER
WAIT

66. 10 Minute BREAK

67. Audit Trail When the Audit Trail was initialized
When accounts are created/deleted
When accounts are logged on/off
Any unsuccessful logon attempts
When an account password is changed
When and what key was received
What device was used to receive the key
When and what key was transmitted
When a key file was transmitted
When a key was zeroized
When the KOV-21 INFOSEC card was zeroized
When and what kind of device the SKL was connected to.
When the date and time were changed
Any alarm codes
This is a list of the thing that the audit trail keep a log

68. Audit Trail Must be logged in as SSO to perform any Audit Functions
Login as SSO
This will on of the screens you see before UAS, or VIEW - Summary Status
Popup warning that its time to perform a audit trail once you have 18K in audit. If Audit trail is too big EKMS can not upload.
SKL has 2 MG reserved for Audit Trail,
LCMS can only handle 24K
Tools
- SSO
- Audit Functions

69. Audit Trail Image on left shows the date and time of event
Image on right was the slide bar at bottom of audit trail moved to the right.

70. Audit Trail / Summary Status
A popup warning will display at 18K, indicating that its time to upload the audit trail.
LCMS can only handle 24K, anything larger than 24k is too big for the current version of LCMS to upload,
SKL has 2 MG reserved for the Audit Trail.

71. Audit Trail / Summary Status
From the Summary Status screen you can see that there is a lot of information you
Show:
Number of Platforms, Equipment, Segments, Keys and type of key (next slide)
Keys Needed, Expired Key, EP (which is frequency hopping)
The File Header is the text file name that was used when issuing keys to SKL/DTD

72. Audit Trail IDOC 007-04, 22 (U) Audits
“Audit information must be uploaded and reviewed, at a minimum, on a semi-annual basis.”
IDOC d (U/FOUO) Deleting
After any audit data has been uploaded or physically recorded, the SSO shall delete the existing audit data from the SDS/SKL
TB , a (U) Electronic Key Destruction
100% accountability from generation until destruction, Custodians and users must document a positive and uninterrupted audit trail.
a.3. “…any uploaded DTD Audit Trails will be maintained in desktop folders as supporting documentation”
The desktop folder is within LCMS
The TB also make a few references “It is important to note that DTD Audit Trails are not considered to be 100% reliable

73. Power Down
Exit UAS: File – Exit. If you have made any changes and have not already saved the Database you will be prompted to save.
You should never shutdown the SKL without first exiting the UAS program.

74. Logout Logout Wait for the green KOV-21 light to turn off KOV Light
As previously stated a COMSEC account should create a User login for your own use and not use SSO for daily business, unless that is the only place to perform that function such as setting Date and Time and Audit Functions. If you mess the SSO login it will re-initialize the SKL, while messing up a User login only locks their login, can change User password from SSO login.

75. Power Down
Logout of the KOV 21 wait until green led goes out on top of SKL
Press and hold power button until Power Off sequence starts, approximately 3 seconds.

76. Questions What is the order to Power Down?
Exit UAS, Logout, Power Button

77. Additional References
Addition References can be found a the CECOM web page
Can use your CAC card to login
Manuals and Software

78. Additional References
And the National EKMS TIER 3 Help Desk
Has Common Problem, FAQ, Software, etc
And information for DTD, SKL, Common Fill Devices (CFD), etc
Can uses your CAC card to login
But you must have a login and password to download
Manuals and Software

79. Warranty Information Warranty Service Contract
CSLA Item Manager: Kim Dorman
Commercial:
DSN:

80. Questions?
(c) Cassandra LaBeause