CommPower CP-145 Instruction Manual

US e-Mail™
CommPower CP-145 Gateway
Installation and Administration Manual
Document Part #: /cpe/cp-145/adm/004
C O M M
P O WE R

Document Part Number and Revision:
ACP-145 Gateway Installation and Administration Manual
Document Part Number: /cpe/cp-145/adm/004
Revision History:
Date
Document Revision
June 2003
001
September 2004
002
December 2005
003
July 2014
004
This document describes the installation and administration of the ACP-145
Gateway
Copyright Notice:
Copyright 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012,
2013, 2014 Communications & Power Engineering, Inc.
All rights reserved. No part of this publication may be reproduced, transmitted,
stored in a retrieval system, nor translated into any human or computer language,
in any form or by any means, electronic, mechanical, magnetic, optical, chemical,
manual, or otherwise, without the prior written permission of the copyright
owner, Communications & Power Engineering, Inc. Copyright infringement is a
serious matter under the United States and foreign Copyright Laws.
Any copyrighted software that accompanies this document is licensed to the End
User only for use in strict accordance with the governing End User License
Agreement (EULA), which should be read carefully before commencing use of
the software. Information in this document is subject to change without notice.
Use, duplication, or disclosure by the UNITED STATES GOVERNMENT is
subject to restrictions as set forth in subparagraph (c) (1) of the COMMERCIAL
COMPUTER SOFTWARE - RESTRICTED RIGHTS clause at FAR 52.227-
19, or subparagraph (c) (1) (ii) of the RIGHTS IN TECHNICAL DATA AND
COMPUTER SOFTWARE clause at DFARS 52.227-7013. The
“Contractor/Manufacturer” is Communications & Power Engineering, Inc.
C O M M
POWE R
CommPower, Inc.
850 Calle Plano, Suite K
Camarillo, CA 93012
Telephone: [phone]
e-Mail: Internet ([e-mail])

/cpe/cp-145/adm/004 (07/14) -i -
ACP-145 INSTALLATION AND
ADMINISTRATION MANUAL
TABLE OF CONTENTS
CHAPTER 1
OVERVIEW.............................................................. 1-1
1.1 PRODUCT OVERVIEW......................................................................1-1
1.2 DOCUMENT OVERVIEW.................................................................1-3
CHAPTER 2
SOFTWARE INSTALLATION/REMOVAL....................... 2-1
2.1 SOFTWARE INSTALLATION...........................................................2-1
2.1.1 DCL MTA Installation......................................................................2-1
2.1.2 CP-145 Gateway Installation............................................................2-7
2.1.3 Results of the CP-145 Gateway Installation ............................... 2-11
2.1.4 Data Required For Permanent License File................................ 2-13
2.1.5 Manual Software License File Installation................................... 2-14
2.1.6 Post Installation Procedures.......................................................... 2-14
2.2 SOFTWARE REMOVAL .................................................................. 2-14
CHAPTER 3
BASIC MTA/ACP-145 CONFIGURATION .................... 3-1
3.1 BASIC DCL MTA CONFIGURATION............................................3-1
3.2 BASIC CP-145 LOCAL AND CP-145 FOREIGN
CONFIGURATION AND SETUP............................................................... 3-10
3.2.1 CP-145 Offline Configuration ...................................................... 3-11
3.2.2 CP-145 Gateway Online Configuration ...................................... 3-16
CHAPTER 4
ACP-145/MTA STARTUP/SHUTDOWN ...................... 4-1
4.1 ACP-145 STARTUP/SHUTDOWN...................................................4-1
4.1.1 ACP-145 Gateway Startup................................................................4-1
4.1.2 ACP-145 Gateway Shutdown ..........................................................4-1
4.2 DCL MTA STARTUP/SHUTDOWN................................................4-2
4.2.1 DCL MTA Startup.............................................................................4-2
4.2.2 DCL MTA Shutdown .......................................................................4-2
CHAPTER 5
CP-145 CONFIGURATION UTILITY ........................... 5-1
5.1 SYSTEM CONFIGURATION ............................................................5-1
5.1.1 System Parameters .............................................................................5-4
5.1.2 Users ....................................................................................................5-7
5.1.3 Message Translation ..........................................................................5-8
5.1.4 Network Access .............................................................................. 5-13
5.1.5 Message Purge Password ............................................................... 5-14
5.1.6 Default Classification...................................................................... 5-15
5.1.7 Flags .................................................................................................. 5-15

ACP-145 Installation and Administration Manual
-ii- /cpe/cp-145/adm/004 (07/14)
5.1.8 Logging Levels................................................................................. 5-18
5.1.9 CP-145 Settings - CP-145(L) only ................................................ 5-18
5.1.10 Security Tables - CP-145(L) only................................................ 5-23
5.1.11 AUTODIN Settings - CP-145(L) only ...................................... 5-24
5.1.12 Virus Checking - CP-145(F) only ............................................... 5-25
5.1.13 SMIME settings - CP-145(F) only.............................................. 5-26
5.1.14 X400 Gateway Assignments – CP-145(F) only........................ 5-32
5.2 SECURITY CONFIGURATION..................................................... 5-33
5.2.1 Security Configuration – CP-145(L)............................................. 5-33
5.2.2 Security Configuration – CP-145(F)............................................. 5-35
5.3 CHANNEL CONFIGURATION .................................................... 5-35
5.3.1 Channel Configuration – CP-145(L)............................................ 5-35
5.3.2 Channel Configuration – CP-145(F)............................................ 5-37
5.4 ACP-145 LOG FILES ......................................................................... 5-37
5.4.1 Log File Removal............................................................................ 5-39
APPENDIX A
CP-145 CONFIGURATION FILES ...........................A-1
A.1 OPTIONS FILES...................................................................................A-1
A.1.1 Security Category Options File (cat) .............................................A-1
A.1.2 Crypto Server Option File (cs).......................................................A-2
A.1.3 Error Message Options File (er) ....................................................A-3
A.1.4 Routing Options File (fp) ...............................................................A-4
A.1.5 I/O Options File (io).......................................................................A-4
A.1.6 Message Conversion Options File (mc)........................................A-4
A.1.7 Month Labels Options File (month).............................................A-5
A.1.8 Privacy Mark Options File (priv)...................................................A-5
A.1.9 Security Labels Options File (sec) .................................................A-5
A.1.10 System Configuration Options File (sys)....................................A-7
A.1.11 TRC Code Options File (trc) .......................................................A-8
APPENDIX B
ERROR MESSAGES ............................................. B-1
APPENDIX C
TROUBLESHOOTING/SYSTEM TIPS...................... C-1
C.1 SYSTEM WON’T START....................................................................C-1
C.1.1 Messages Are Re-released Automatically At System Startup.....C-1
C.1.2 Clear Error Log Files.......................................................................C-2
C.1.3 Clear Event Log Files, Statistics Log Files, and The Message
Archive ............................................................................................................C-2
C.1.4 Messages Are Not Input/Output From/To The MTA.............C-2
C.1.5 Configuration Changes Are Not Implemented ...........................C-2
C.2 MAP SYSTEM UTILITY .....................................................................C-3
C.2.1 Map System Utility Startup .............................................................C-3
C.2.2 Map System Utility Operation........................................................C-4
C.2.3 Map System Utility Shutdown........................................................C-6
APPENDIX D
MCAFEE ANTI-VIRUS SCANNING .......................... D-1
D.1 VIRUS CONFIGURATION .............................................................. D-1

Table of Contents
/cpe/cp-145/adm/004 (07/14) Index-iii
D.2 EVENT VIEWER MESSAGES ........................................................ D-4
APPENDIX E
MESSAGE RECOVERY UTILITY ..............................E-1
E.1 MESSAGE RECOVERY UTILITY...................................................E-1
E.1.1 Find Message Option ......................................................................E-3
E.1.2 Save Message List to File Option ..................................................E-4
APPENDIX F
CACHE UTILITY ...................................................F-1
F.1 CACHE UTILITY STARTUP AND OPERATION ...................... F-1
F.1.1 Cache Utility Startup ........................................................................ F-1
F.1.2 Cache Utility Operation................................................................... F-2

/cpe/cp-145/adm/004 (07/14) 1-1
Chapter 1
OVERVIEW
This document describes how to install and administer the CommPower
ACP-145 Gateway (ACP-145). The ACP-145 is designed to run in the
Windows 2008 Server R2 operating environment and features user-friendly
menus and dialogs that let you configure, monitor, and control ACP-145
operations.
1.1
PRODUCT OVERVIEW
Throughout the world, e-mail based Military Messaging services have
become an integral component of a modern Defense Command and Control
infrastructure, providing the means through which commanders at all levels
can effectively and securely communicate orders, instructions, and strategies.
Unfortunately, true globalization of such services has not and probably
cannot be realized due to differences in national implementations and the
lack of a common end-to-end security policy. The CCEB (Combined
Communications Electronics Board) has recognized this shortcoming and in
response, has drafted a standard (ACP145) that details the requirements and
functions of a nation-to-nation Military Messaging Gateway based on
ACP123/X.400 technology and S/MIME-ESS security services. In turn,
CommPower has taken this standard from paper to practice with the
introduction of its CP-145 Gateway product.
The CP-145 Gateway consists of two subsystems, or "Elements", one for
handling JANAP-128 messages and one handling SMIME-ESS P772
messages. The Local Element provides connectivity to a local JANAP-128

ACP-145 Installation and Administration Manual
1-2 /cpe/cp-145/adm/004 (07/14)
messaging host via a dedicated Mode I serial connection, whereas the
Foreign Element connects to the external network of the foreign nation.
Messages received/transmitted on each network interface are processed in
full per the security policy that governs the domain represented by the CP-
145 Element.
•Supported Security Standards: The security standards supported within the
Gateway include: S/MIME-ESS (Extended Security Services).
•Security Policy Definition: Security Policy Information Files (SPIFs) can be
created for each security domain that define the security policy in effect and
enforce access control. Multiple policies can be supported for each security
domain.
•Security Label Translation: User configurable Security Policy Translation
Tables (SPTTs) are used within the Gateway that defines the security label
translation rules between differing security policies. These tables are loaded
from a configurable location on disk.
Message flow within the Gateway between the discrete Elements is
accomplished via XML services that promote standardization, commerciality,
and extensibility within the product. Core features of the CP-145 include the
following:
•Virus Checking: Third party anti-virus products can be invoked by the CP-
145 to scan in-transit messages and their attachments for malicious content.
•Message Services: As with all CommPower Military Messaging products,
the CP-145 offers full protection, accountability, and recovery for all
messages within the Gateway.
•Third Party Services: Third party capabilities such as profilers can be
installed "in line" to perform additional processing on the XML message as
it passes through the Gateway.
•Extensibility: Because of the Gateway's modular architecture, a host of
configurations can be realized to allow connectivity to one or more nations,
each with a separate security translation policy.
The CommPower CP-145 Gateway product was selected by the U.S.
Department of Defense as the sole provider of ACP145 Gateway services
for its Defense Message System (DMS) program.

Chapter 1. Overview
/cpe/cp-145/adm/004 (07/14) 1-3
1.2
DOCUMENT OVERVIEW
This document describes the installation and administration of the CP-145 in
the following chapters and appendices:
Chapter 1, Overview: This chapter provides an overview description of the
CP-145 and this document.
Chapter 2, Software Installation/Removal: This chapter describes how to
install the Message Transfer Agent (MTA) software, and the CP-145
software. It also describes how to remove (or “un-install”) the CP-145
software.
Chapter 3, Basic MTA/CP-145 Configuration: This chapter describes how
to perform basic configuration of the MTA and the CP-145 software.
Chapter 4, CP-145/MTA Startup/Shutdown: This chapter describes how
to startup and shutdown the CP-145 and MTA software.
Chapter 5, CP-145 Configuration Utility: This chapter describes how to
use the CP-145 Configuration Utility to display the default configuration
supplied with the system and how to use the utility to create or modify
system configuration parameters.
Appendix A, CP-145 Configuration Files: This appendix describes the
contents of the CP-145 configuration files that are supplied with the system.
Appendix B, Error Messages: This appendix describes the error messages
that are generated and displayed by the CP-145 along with the Message
Recovery Utility.
Appendix C, Troubleshooting/System Tips: This appendix describes
troubleshooting procedures that can be used to recover from problem
conditions and some general tips that can be used to help maintain the CP-
145 system.
Appendix D, Symantec Anti Virus Scanning: This appendix describes the
setup procedures for enabling virus scanning.
Appendix E, Message Recovery: This appendix describes the procedures
for using the Message Recovery Utility.
Appendix F, Cache Utility:This appendix describes how to startup and
operate the CP-145 Cache Utility. This utility provides the administrator the
capability of performing the following CP-145 cache database related
functions.

/cpe/cp-145/adm/004 (07/14) 2-1
Chapter 2
Software Installation/Removal
This chapter describes how to install the DCL MTA software, and the CP-
145 Gateway software. It also describes how to remove (or “un-install”) the
CP-145 Gateway software.

NOTE: When installing the software, you must load the MTA before
loading the CP-145(F) (see “Software Installation” below). Also, if installing
a new release of the CP-145 Gateway software, remove the old release prior
to loading the new one (see “Software Removal” below).
2.1
SOFTWARE INSTALLATION
Perform software installation in the order described below and under the
local system administrator account:
1. DCL MTA - consists of three components, each installed separately
2. Microsoft XML Core services
3. dot Net Framework
4. CP-145 Gateway software

NOTE: Always restart the system when instructed to make certain
that configuration data is read or to start services that are required. Log on
after each restart under the local system administrator account.
This document assumes an installation on the C: drive. Please note,
however, that the CP-145 Gateway can be installed on any drive.
2.1.1
DCL MTA Installation
2.1.1.1
DCL MTA Pre-Installation Requirements
1. WINDOWS 2008 Server R2 is loaded on the system targeted for
software installation.
2. Logged onto the system under an account with local administrator
privileges.
3. All Windows applications are closed.
4. CP-145 Gateway is NOT loaded on the system.
5. Check that both DNS lookups and reverse DNS lookups work on the
network.

ACP-145 Installation and Administration Manual
2-2 /cpe/cp-145/adm/004 (07/14)
2.1.1.2
DCL MTA Installation Instructions
2.1.1.2.1
DC Directory Installation
The DC Directory is required to provide a directory service to support the
DCL MTA. To install DC Directory, perform the following steps:
1. Log onto the system under an account with local administrator privileges.
2. Insert the CP-145 Gateway CD if it was removed following the Fortezza
Card Reader Driver installation and double click on DCL MTA
3.0\dcdsrvr\setup.exe. The Welcome window is displayed.
3. Select the Next button in the Welcome window. The CD Key window
is displayed.
4. Enter the CD Key as 013-9704-97251 and then select the Next button
on the CD Key window. The Select Components window is displayed.
5. Confirm all component check boxes are selected. Select any that is not
checked.
6. Select Browse to display the Choose Folder window. Enter the Path as
D:\dcdsrvr (where D: represents the drive letter for the largest drive
available on the system) and select OK.
7. If prompted to create this folder, select Yes on the Setup window. The
Select Components window is displayed.
8. Select Next and the Enter Admin Node window is displayed.
9. Select Normal if not selected and enter a country value of U.S. Leave
the remaining fields blank. Select Next to display the Specify Server
Name window.
10. If the Server Name value is not correct, enter the correct value as seen
in the site’s Detail Design document. Enter a Port Number of 104
(Note: be sure to change this from the default value of 102).
11. Select Next to display the Enter Organization Name window.
12. Enter the site’s organization name and select Next. The Enter
Password window is displayed.
13. Enter the password of the logged on user in the Enter Password
window and select Next. The Select Program Folder window is
displayed.
14. Select Next on the Select Program Folder window. The Customize
DC Directory Server Configuration? Window.
15. Make sure the Customization option is NOT checked and select Next
on the Customize DC Directory Server Configuration? Window and
the Enter Password window is displayed.