Curtiss-Wright DTS1 User manual

DTS1
CSfC / ECC
Cryptographic
Data Transport System
User Guide
Part Number: DDOC0099-000-AH


This Page Intentionally Left Blank

User Guide DDOC0099-000-AH
DTS1 CSfC i Front Matter
© 2020 Curtiss-Wright Defense Solutions
Front Matter
Revisions
The Curtiss-Wright DTS1 CSfC User Guide (DDOC0099-000) is made up of the following
individual chapters and appendices.
Document
Number Media Revision Date Description PCN
DDOC0099-000 PDF A1 07/17/18 Multiple updates. 1227
DDOC0099-000 PDF A2 08/14/18 Multiple updates. 0818-0001
DDOC0099-000 PDF A3 10/01/18 Multiple updates. 1018-0001
DDOC0099-000 PDF A4 11/01/18 Multiple updates. 1118-0001
DDOC0099-000 PDF A5 01/22/19 Multiple updates. 0119-0001
DDOC0099-000 PDF A6 04/24/19 Conversion to new format. 0419-0001
DDOC0099-000 PDF A7 05/15/19 Corrected as noted by change bars. 0519-0005
DDOC0099-000 PDF A8 08/15/19 Corrected as noted by change bars. 0819-0005
DDOC0099-000 PDF A9 09/03/19 Removed references to RUGS-E system 0919-0001
DDOC0099-000 PDF AA 09/19/19 Revised encryption password / passphrase
requirements.
0919-0005
DDOC0099-000 PDF AB 10/25/19 Revised to include video stream capture. Additional
revisions / corrections as noted by change bars.
1019-0014
DDOC0099-000 PDF AC 3/27/20 Revised format and style of illustrations and tables.
Technical changes incorporated as noted by change
bars.
0320-0012
DDOC0099-000 PDF AD 4/9/20 Deleted VS-RMC-003 RMC, 1 TB and Secure Erase
from Appendix C
0420-0004
DDOC0099-000 PDF AE 5/8/20 Corrected as noted by change bars. 0520-0003
DDOC0099-000 PDF AF 6/2/20 Corrected as noted by change bars. 0620-0003
DDOC0099-000 PDF AG 6/8/20 Update istarget information. Corrected as noted by
change bars.
0620-0005
DDOC0099-000 PDF AH 6/29/20 Add Quick Start section. All other corrections / updates
noted by change bars.
0620-0012
Chapter / Appendix Topic Content Revision
1.0 Introduction 0.0
2.0 Overview 5.0
3.0 Controls and Indicators 2.0
4.0 Installation 2.0
5.0 Encryption 6.0
6.0 Quick Start 0.0
7.0 Operation 4.0

User Guide DDOC0099-000-AH
DTS1 CSfC ii Front Matter
© 2020 Curtiss-Wright Defense Solutions
Changes to technical content are shown through the use of change bars placed in the left margin
next to the changed material (as shown here). Corrections to typographical errors are not noted
unless they significantly impact the content.
Copyright
All content in this User Guide (DDOC0099-000-AH) is copyrighted by Curtis-Wright Defense
Solutions.
Safety
WARNING
HAZARD. A potential hazard that could result in serious injury or death.
Information contained in WARNINGS applies to dangers and hazards that may result in injury and
/ or death to personnel. The actual hazard is provided in CAPITALIZED letters and the information
that mitigates the danger is provided in sentence case. This information typically precedes
procedural steps. It also may be present in narrative text to warn operators or maintenance
personnel of dangers present in the equipment.
CAUTION
HAZARD. A potential hazard that could result in equipment damage or improper operation.
Information contained in CAUTIONS applies to dangers and hazards that may result in damage to
equipment or improper operation. The actual hazard is provided in CAPITALIZED letters and the
information that mitigates the danger is provided in sentence case. This information typically
precedes procedural steps. It also may be present in narrative text to warn operators or
maintenance personnel of dangers present in the equipment.
NOTE
Amplifying information that helps in making a task or procedure more easily understood.
NOTES are used to supply amplifying information that will result in ease of testing or be beneficial
to personnel. This information typically precedes procedural steps. It also may be present in
narrative text as well.
8.0 System Configuration 1.0
9.0 Troubleshooting 0.0
10.0 Simple Network Management Protocol 1.0
11.0 Remove / Replace 1.0
12 Command Line Interface 5.0
A Specifications 3.0
B Connectors / Cables 2.0
C Ordering Information 3.0
Chapter / Appendix Topic Content Revision

User Guide DDOC0099-000-AH
DTS1 CSfC iii Front Matter
© 2020 Curtiss-Wright Defense Solutions
Style and Conventions
This user guide uses the following typographical conventions.
This style Refers to
Ready Text the software displays.
go Anything you type, exactly as it appears, whether referenced in text or
at a prompt.
ENTER Special keys on the keyboard, such as enter, alt, and spacebar.
Save Software command buttons and sections of dialog boxes, such as
group boxes, text boxes, and text fields.
File  Open A menu and a specific menu command.
ALT+F1Pressing more than one key at the same time.
ALT, TAB Pressing more than one key in sequence.
xx,yy Variable in error messages and text.
jobfile.dat File names.
This style Refers to
Denotes the result of an action or procedure.
xyz Hyperlink.
STOP Controls on equipment.

User Guide DDOC0099-000-AH
DTS1 CSfC iv Table of Contents
Table of Contents
Introduction
1.1 Purpose ..................................................................................................................................................... 1-1
1.2 Scope ........................................................................................................................................................ 1-1
1.3 Quality ....................................................................................................................................................... 1-1
1.4 Related Information ................................................................................................................................... 1-2
1.5 Technical Support...................................................................................................................................... 1-2
1.6 Ordering Process....................................................................................................................................... 1-2
Overview
2.1 Description................................................................................................................................................. 2-1
2.1.1 Chassis ........................................................................................................................................... 2-1
2.1.2 RMC Module ................................................................................................................................... 2-3
2.2 Protocols.................................................................................................................................................... 2-4
2.3 CSfC Encryption ........................................................................................................................................ 2-4
2.3.1 Hardware Encryption Layer ............................................................................................................. 2-4
2.3.1.1 Account Creation ................................................................................................................... 2-4
2.3.1.2 Account Login ........................................................................................................................ 2-5
2.3.2 Software Encryption Layer .............................................................................................................. 2-6
2.3.3 Zeroize ............................................................................................................................................ 2-6
2.4 Features .................................................................................................................................................... 2-6
Controls and Indicators
3.1 Chassis Indicators ..................................................................................................................................... 3-1
3.1.1 POWER LED ................................................................................................................................... 3-1
3.1.2 FAULT LED ..................................................................................................................................... 3-1
3.1.3 KEY LOADED LED ......................................................................................................................... 3-1
3.1.4 DRIVE CAPACITY LEDs ................................................................................................................ 3-1
3.2 Chassis Controls ....................................................................................................................................... 3-2
3.2.1 Key Clear Button ............................................................................................................................. 3-2
3.2.2 Write-Enable Switch ........................................................................................................................ 3-2
3.3 RMC Module Controls / Indications ........................................................................................................... 3-2
3.3.1 STATUS LED (Green / Left) ............................................................................................................ 3-2
3.3.2 ACTIVITY LED (Green / Middle) ..................................................................................................... 3-3
3.3.3 FAULT LED ..................................................................................................................................... 3-3
3.3.4 Removal Request Button* ............................................................................................................... 3-3
Installation
4.1 Package..................................................................................................................................................... 4-1
4.2 Inspection .................................................................................................................................................. 4-1
4.3 Mounting.................................................................................................................................................... 4-2
4.4 Cables ....................................................................................................................................................... 4-3
4.4.1 Power Cable .................................................................................................................................... 4-3
4.4.2 Utility Cable ..................................................................................................................................... 4-4
4.4.3 Ethernet Cable ................................................................................................................................ 4-4
4.4.4 Ground Cable .................................................................................................................................. 4-5

User Guide DDOC0099-000-AH
DTS1 CSfC v Table of Contents
Encryption
5.1 Passwords / Passphrases ......................................................................................................................... 5-1
5.1.1 Hardware Layer Passwords ............................................................................................................ 5-1
5.1.2 Software Layer Passwords / Passphrases ...................................................................................... 5-1
5.1.3 Incorrect Password / Passphrase Entered ...................................................................................... 5-1
5.1.4 Change Password / Passphrase ..................................................................................................... 5-1
5.2 Check Hardware Layer Status................................................................................................................... 5-2
5.2.1 Hardware Layer Definitions ............................................................................................................. 5-2
5.3 Hardware Layer Encryption ....................................................................................................................... 5-3
5.3.1 Initialize / Login - Crypto Module ..................................................................................................... 5-3
5.3.2 Verify Successful Login ................................................................................................................... 5-4
5.3.3 Access RMC Module (Plain Text DEK / Encrypted DEK) ............................................................... 5-4
5.3.3.1 Access RMC Module (Plain Text DEK) ................................................................................. 5-4
5.3.3.2 Access RMC Module (EDEK) ................................................................................................ 5-5
5.3.4 Hardware Encryption Key Storage .................................................................................................. 5-5
5.3.4.1 Pain Text DEK ....................................................................................................................... 5-5
5.3.4.2 Encrypted DEK ...................................................................................................................... 5-5
5.3.4.3 Status Report ......................................................................................................................... 5-6
5.3.4.4 Load / Unload Stored Hardware Encryption Key to RMC Module ......................................... 5-7
5.3.4.5 Autoload Key ......................................................................................................................... 5-7
5.3.4.6 Delete Key ............................................................................................................................. 5-7
5.4 Software Layer Encryption ........................................................................................................................ 5-8
5.4.1 Unpartitioned Disk ........................................................................................................................... 5-8
5.4.1.1 Initialize Container (Unpartitioned Disk) ................................................................................ 5-8
5.4.1.2 Open SWE Container (Unpartitioned Disk) ........................................................................... 5-9
5.4.1.3 Format / Mount SWE Container (Unpartitioned Disk) ............................................................ 5-9
5.4.1.4 Close SWE Container (Unpartitioned Disk) ........................................................................... 5-9
5.4.1.5 Delete SWE Container (Unpartitioned Disk) ........................................................................ 5-10
5.4.2 Partitions ....................................................................................................................................... 5-10
5.4.2.1 Initialize SWE Containers (Partitions - Different Passphrases) ........................................... 5-10
5.4.2.2 Open SWE Container (Partitions - Different Passphrases) ................................................. 5-11
5.4.2.3 Initialize SWE Encryption (Partitions - Same Passphrase) ................................................. 5-12
5.4.2.4 Open SWE Container (Partition - Same Passphrase) ......................................................... 5-12
5.4.2.5 Format / Mount SWE Containers (Individual Partitions) ...................................................... 5-13
5.4.2.6 Format / Mount SWE Containers (All Partitions) ................................................................. 5-13
5.4.2.7 Close SWE Containers (Individual Partitions) ..................................................................... 5-14
5.4.2.8 Close SWE Container (All Partitions) .................................................................................. 5-14
5.4.2.9 Delete SWE Container (Individual Partitions) ...................................................................... 5-14
5.4.2.10 Delete SWE Containers (All Partitions) ............................................................................. 5-15
5.5 Zeroize HWE Key / Delete SWE Container / RMC Purge ....................................................................... 5-15
5.5.1 Zeroize HWE Key .......................................................................................................................... 5-15
5.5.2 Delete SWE Container .................................................................................................................. 5-15
5.5.3 RMC Purge ................................................................................................................................... 5-15
Quick Start
6.1 Connections / Preparation ......................................................................................................................... 6-1
6.2 Initialization................................................................................................................................................ 6-1
6.3 Login.......................................................................................................................................................... 6-3

User Guide DDOC0099-000-AH
DTS1 CSfC vi Table of Contents
Operation
7.1 Setup / Connections .................................................................................................................................. 7-1
7.2 Basic Operation ......................................................................................................................................... 7-2
7.2.1 Communications ............................................................................................................................. 7-2
7.2.1.1 Terminal Emulation ................................................................................................................ 7-2
7.2.1.2 Ethernet ................................................................................................................................. 7-3
7.2.2 IP Address ....................................................................................................................................... 7-4
7.2.3 Account Management ..................................................................................................................... 7-4
7.2.4 Passwords ....................................................................................................................................... 7-4
7.2.5 Time / Date ...................................................................................................................................... 7-5
7.3 Login.......................................................................................................................................................... 7-5
7.4 Encryption.................................................................................................................................................. 7-6
7.4.1 Hardware Encryption Layer ............................................................................................................. 7-6
7.4.2 Software Encryption Layer .............................................................................................................. 7-6
7.4.3 Zeroize / Delete SWE Container / RMC Purge ............................................................................... 7-6
7.5 Storage Media ........................................................................................................................................... 7-6
7.5.1 Preparation for Partition .................................................................................................................. 7-6
7.5.2 Partition Disk ................................................................................................................................... 7-7
7.5.3 Services .......................................................................................................................................... 7-8
7.5.3.1 Assign Services ..................................................................................................................... 7-8
7.5.3.2 Boot Services ........................................................................................................................ 7-9
7.5.3.3 Restart Services .................................................................................................................... 7-9
7.5.4 Assign Mount Point Names ........................................................................................................... 7-10
7.5.5 Format / Mount .............................................................................................................................. 7-11
7.5.5.1 Format Only ......................................................................................................................... 7-11
7.5.5.2 Format / Mount .................................................................................................................... 7-12
7.5.6 iSCSI ............................................................................................................................................. 7-14
7.6 PCAP....................................................................................................................................................... 7-15
7.7 Health ...................................................................................................................................................... 7-16
7.7.1 Sens .............................................................................................................................................. 7-16
7.8 Built In Test.............................................................................................................................................. 7-17
7.8.1 IBIT (Initiated BIT) ......................................................................................................................... 7-17
7.8.2 MBIT (Maintenance BIT) ............................................................................................................... 7-17
7.9 Update Software / Firmware.................................................................................................................... 7-18
7.10 Access from Windows as NAS Device .................................................................................................. 7-19
7.11 Access from Linux as NAS Device ........................................................................................................ 7-20
System Configuration
8.1 Crypto Module ........................................................................................................................................... 8-1
8.1.1 Initialize / Log In .............................................................................................................................. 8-1
8.1.2 Key Load / Unload ........................................................................................................................... 8-1
8.1.3 Key Removal / Zeroize .................................................................................................................... 8-1
8.1.4 Key Commands ............................................................................................................................... 8-1
8.2 DTS1 ......................................................................................................................................................... 8-1
8.2.1 Versions ...................................................................................................................................... 8-2
8.2.2 Configure ......................................................................................................................................... 8-2
8.3 RMC Module.............................................................................................................................................. 8-2
8.3.1 RMCCTL Definitions ....................................................................................................................... 8-2
8.3.2 Configure ......................................................................................................................................... 8-3

User Guide DDOC0099-000-AH
DTS1 CSfC vii Table of Contents
8.3.3 Encrypt / Decrypt ............................................................................................................................. 8-3
8.3.4 Insert / Remove ............................................................................................................................... 8-3
8.3.5 Service ............................................................................................................................................ 8-3
Troubleshooting
9.1 Chassis LED Fault Indicators .................................................................................................................... 9-1
9.2 RMC Module LED Fault Indications .......................................................................................................... 9-1
9.3 Encryptor Error Codes............................................................................................................................... 9-2
Simple Network Management Protocol
10.1 SNMP MIB............................................................................................................................................. 10-1
Remove / Replace
11.1 RMC Module.......................................................................................................................................... 11-1
11.1.1 Install ........................................................................................................................................... 11-1
11.1.2 Remove ....................................................................................................................................... 11-2
11.2 Battery ................................................................................................................................................... 11-2
Command Line Interface
12.1 DTS1 ..................................................................................................................................................... 12-1
12.2 RMC Module.......................................................................................................................................... 12-1
12.3 Commands ............................................................................................................................................ 12-1
12.3.1 amnt ............................................................................................................................................ 12-2
12.3.2 cmfwupdate ................................................................................................................................. 12-4
12.3.3 cmkey .......................................................................................................................................... 12-5
12.3.4 cmlogin ........................................................................................................................................ 12-8
12.3.5 dhcpconfig ................................................................................................................................. 12-10
12.3.6 fdefaults ..................................................................................................................................... 12-12
12.3.7 fupdate ...................................................................................................................................... 12-13
12.3.8 fwall ........................................................................................................................................... 12-14
12.3.9 help ........................................................................................................................................... 12-16
12.3.10 ibit ............................................................................................................................................ 12-17
12.3.11 info .......................................................................................................................................... 12-18
12.3.12 ipconfig .................................................................................................................................... 12-20
12.3.13 istarget .................................................................................................................................... 12-22
12.3.14 ledctrl ....................................................................................................................................... 12-24
12.3.15 log ........................................................................................................................................... 12-25
12.3.16 mbit ......................................................................................................................................... 12-26
12.3.17 ntpdate .................................................................................................................................... 12-28
12.3.18 password ................................................................................................................................. 12-30
12.3.19 pcap ........................................................................................................................................ 12-31
12.3.20 reboot ...................................................................................................................................... 12-32
12.3.21 rmcctl ....................................................................................................................................... 12-33
12.3.22 rmcfree .................................................................................................................................... 12-36
12.3.23 rmcinfo .................................................................................................................................... 12-37
12.3.24 rmcpurge ................................................................................................................................. 12-39
12.3.25 rtp ............................................................................................................................................ 12-40
12.3.26 sens ......................................................................................................................................... 12-42
12.3.27 serv ......................................................................................................................................... 12-43
12.3.28 shutdown ................................................................................................................................. 12-45
12.3.29 sysdate .................................................................................................................................... 12-46

User Guide DDOC0099-000-AH
DTS1 CSfC viii Table of Contents
Specifications
A.1 Envelope / Mounting Dimensions..............................................................................................................A-1
A.1.1 RMC Module ...................................................................................................................................A-1
A.1.2 Panel Mount ....................................................................................................................................A-2
A.1.3 DZUS Fastener Mount ....................................................................................................................A-3
A.2 DTS1 Specifications..................................................................................................................................A-4
A.3 RMC Module Specifications ......................................................................................................................A-4
A.4 Mean Time Between Failures ...................................................................................................................A-4
A.5 Environmental Specifications ....................................................................................................................A-5
A.6 EMI Compliance........................................................................................................................................A-6
A.7 Electrical Power Compliance ....................................................................................................................A-6
Connectors / Cables
B.1 Power Connector J1 / Power Lab Cable ...................................................................................................B-1
B.2 Utility Connector J2 / Utility Lab Cable......................................................................................................B-2
B.3 Ethernet Connector J3 / Ethernet Lab Cable ............................................................................................B-3
B.4 Ground Lug ...............................................................................................................................................B-5
Ordering Information
C.1 DTS1 / RMC Module / Lab Cables............................................................................................................C-1

User Guide DDOC0099-000-AH
DTS1 CSfC ix List of Figures
List of Figures
Figure 2.1 DTS1................................................................................................................................................ 2 - 1
Figure 2.2 DTS1 Chassis / Components .......................................................................................................... 2 - 2
Figure 2.3 DTS1 Rear Panel / Battery Access Cover and Rear Connectors.................................................... 2 - 3
Figure 2.4 DTS1 Processor Carrier PCB Programming Connector / Write-Enable Switch .............................. 2 - 3
Figure 2.5 DTS1 With RMC Module ................................................................................................................. 2 - 3
Figure 2.6 Hardware Encryption Layer Account Creation................................................................................. 2 - 5
Figure 2.7 Hardware Encryption Layer Account Login ..................................................................................... 2 - 6
Figure 3.1 DTS1 Controls / Indicators............................................................................................................... 3 - 1
Figure 3.2 Remaining Disk Capacity Indicators ................................................................................................ 3 - 2
Figure 3.3 DTS1 Write-Enable Switch .............................................................................................................. 3 - 2
Figure 3.4 RMC Module Controls / Indicators................................................................................................... 3 - 3
Figure 4.1 DTS1 Chassis Anti-Tamper Label Locations................................................................................... 4 - 1
Figure 4.2 RMC Module Anti-Tamper Label Location....................................................................................... 4 - 2
Figure 4.3 DTS1 Chassis Mounting .................................................................................................................. 4 - 2
Figure 4.4 DTS1 Required Door Clearance...................................................................................................... 4 - 3
Figure 4.5 DTS1 Rear Panel Connectors ......................................................................................................... 4 - 3
Figure 4.6 Power Lab Cable ............................................................................................................................. 4 - 3
Figure 4.7 Utility Lab Cable............................................................................................................................... 4 - 4
Figure 4.8 Ethernet Lab Cable.......................................................................................................................... 4 - 4
Figure 4.9 DTS1 Ground Connection ............................................................................................................... 4 - 5
Figure 5.1 Key Storage Diagram ...................................................................................................................... 5 - 6
Figure 6.1 Initialization Quick Start Process Flow............................................................................................. 6 - 2
Figure 6.2 Login Quick Start Process Flow....................................................................................................... 6 - 4
Figure 7.1 DTS1 Test Setup ............................................................................................................................. 7 - 1
Figure 7.2 PuTTY Terminal Emulator (Serial Data) .......................................................................................... 7 - 2
Figure 7.3 PuTTY Terminal Emulator (SSH) .................................................................................................... 7 - 3
Figure 7.4 DTS1 Update Utility ....................................................................................................................... 7 - 19
Figure 11.1 RMC Module Install / Remove ....................................................................................................... 11 - 1
Figure 11.2 RMC Module Controls, Indicators, and Handle ............................................................................. 11 - 2
Figure 11.3 Battery Assembly Replacement..................................................................................................... 11 - 3
Figure 11.4 Battery Access Panel Screws Tightening Sequence..................................................................... 11 - 3
Figure A.1 RMC Module.................................................................................................................................... A - 1
Figure A.2 DTS1 (Panel Mount) ........................................................................................................................ A - 2
Figure A.3 DTS1 (Dzus Mount) ......................................................................................................................... A - 3
Figure B.1 Power Connector J1 ........................................................................................................................ B - 1
Figure B.2 Power Lab Cable Diagram............................................................................................................... B - 1
Figure B.3 Utility Connector J2.......................................................................................................................... B - 3
Figure B.4 Utility Lab Cable Diagram ................................................................................................................ B - 3
Figure B.5 Ethernet Connector J3..................................................................................................................... B - 4
Figure B.6 Ethernet Lab Cable Wiring Diagram................................................................................................ B - 5

User Guide DDOC0099-000-AH
DTS1 CSfC x List of Tables
List of Tables
Table 3.1 RMC Module STATUS LED Indications ................................................................................................ 3-3
Table 7.1 Ethernet Interfaces ................................................................................................................................ 7-2
Table 9.1 Chassis LED Fault Indications .............................................................................................................. 9-1
Table 9.2 RMC Module LED Fault Indications ...................................................................................................... 9-2
Table 9.3 Encryptor Error Codes........................................................................................................................... 9-2
Table A.1 DTS1 / RMC Calculated Mean Time Between Failures ........................................................................ A-4
Table B.1 Power Connector J1 Signals ................................................................................................................. B-1
Table B.2 Power Lab Cable (VS-DTS1PWRCAB-0) ............................................................................................. B-1
Table B.3 Utility Connector J2 Signals .................................................................................................................. B-2
Table B.4 Utility Lab Cable (VS-DTS1ETHCAB-J2) .............................................................................................. B-3
Table B.5 Ethernet Connector J3 Signals.............................................................................................................. B-4
Table B.6 Ethernet Lab Cable (VS-DTS1ETHCAB-J3) ......................................................................................... B-4
Table C.1 DTS1 CSfC Chassis.............................................................................................................................. C-1
Table C.2 RMC Module ......................................................................................................................................... C-1
Table C.3 DTS1 Lab Cables .................................................................................................................................. C-1
Table C.4 DTS1 Battery......................................................................................................................................... C-1

User Guide DDOC0099-000-AH
DTS1 CSfC 1 - 1 Introduction
© 2020 Curtiss-Wright Defense Solutions Revision 2.0
Introduction
1.1 Purpose
The purpose of this guide is to describe the Curtiss-Wright Data Transport System 1-slot (DTS1)
LRU (Line Replaceable Unit) product and to guide users through the process of unpacking,
installing, configuring, and using. The unit requires the use of a Removable Memory Cartridge
(RMC) module. From this point forward, the product will be referred to as the DTS1 and the
associated cartridge will be referred to as the RMC module.
1.2 Scope
The information in this user guide is intended for information systems personnel, systems
coordinators, or highly skilled network users. This manual contains the following information:
• An overview of the DTS1.
• Unpacking, installation, and setup information.
• User interface connections.
• User input.
• Configuration options.
• Product specifications.
• Operation requirements.
• Environmental restrictions.
• Connector pinout and specifications.
• Ordering information for related products and parts
1.3 Quality
Curtiss-Wright Controls, Inc., Electronic Systems is committed to leveraging our technology
leadership to deliver products and services that meet or exceed customer requirements. In
addition to the physical product, the company provides documentation, sales and marketing
support, hardware and software technical support, and timely product delivery. Our quality
commitment begins with product concept and continues after receipt of the purchased product.
Curtiss-Wright Controls, Inc., Electronic Systems' Quality Management System is accredited to the
latest revision of the aerospace standard, AS9100 Quality Management Systems - Requirements
for Aviation, Space, and Defense Organizations.
Our Quality System addresses the following basic objectives:
• Achieve, maintain, and continually improve the quality of our products and service through
established design, test, production and service procedures.
• Improve the quality of our operations to meet the needs of our customers, suppliers, and other
stakeholders.
• Provide our employees with the tools and overall work environment to fulfill, maintain, and
improve product and service quality.
• Ensure our customer and other stakeholders that only the highest quality product or service
will be delivered.
Eagle Registrations Inc. assessed Curtiss-Wright's Quality Management System and confirmed
conformance to AS9100D including ISO 9001:2015 with Certificate No. 5819. The scope of the
registration is as follows: “Design manufacture, test and repair of board level products, electronic
sub-systems, related software and services for commercial, aerospace and military applications.”
Customer feedback is integral to our quality and reliability program. We encourage customers to
contact us with questions, suggestions, or comments regarding any of our products or services.
We guarantee professional and quick responses to your questions, comments, or problems.

User Guide DDOC0099-000-AH
DTS1 CSfC 1 - 2 Introduction
© 2020 Curtiss-Wright Defense Solutions Revision 2.0
1.4 Related Information
• AES (Advanced Encryption Standard). csrc.nist.gov/publications/fips/fips197/ fips-197.pdf
• EIA-232 RS-232 electrical characteristics single-ended voltage digital interface circuit. http://
www.eia.org/
• VITA 46, 47, 48, and 58. http://www.vita.com/vso-stds.html
• FIPS 140-2. csrc.nist.gov/publications/fips/fips197/ fips-197.pdf
• EMI Mil-Std-461
• NAS, http://www.pdl.cmu.edu/PDL-FTP/NASD/hotnet99.pdf
• Ruggedization, Curtiss-Wright, www.cwcdefense.com
• Curtiss-Wright Controls Defense Solutions www.cwcdefense.com
• PuTTy User Manual (client program for SSH, Telnet, and R login network protocols).
• MIL-STD-704F Department of Defense Interface Standard, Aircraft Electric Power
Characteristics.
• MIL-HDBK-704-8 Guidance For Test Procedures For Demonstration Of Utilization Equipment
• Compliance To Aircraft Electrical Power Characteristics 28 VDC
1.5 Technical Support
Technical documentation is provided with all of our products. This documentation describes the
technology, its performance characteristics, and includes some typical applications. It also
includes comprehensive support information, designed to answer any technical questions that
might arise concerning the use of this product. We also publish and distribute technical briefs and
application notes that cover a wide assortment of topics. Although we try to tailor the applications
to real scenarios, not all possible circumstances are covered.
While we have attempted to make this document comprehensive, you may have specific problems
or issues this document does not satisfactorily cover. Our goal is to offer a combination of products
and services that provide complete, easy-to-use solutions for your application.
If you have any technical or non-technical questions or comments, contact us. Hours of operation
are from 8:00 a.m. to 5:00 p.m. Eastern Standard/Daylight Time.
• Phone: [phone] or [phone]
• E-mail: D[email protected]
• Fax: [phone]
• World Wide Web address: www.cwcdefense.com
1.6 Ordering Process
To learn more about Curtiss-Wright Defense Solutions' products or to place an order, please use
the following contact information.
• E-mail: [email protected]
• World Wide Web address: http://www.cwcdefense.com/
To contact a local Curtiss-Wright sales representative go to: http://www.cwcdefense.com/
sales.html and point to your location on the map presented, then click on the pop-up with the sales
representative's name.

User Guide DDOC0099-000-AH
DTS1 CSfC 2 - 1 Overview
© 2020 Curtiss-Wright Defense Solutions Revision 5.0
Overview
2.1 Description
The Curtiss-Wright DTS1 (Figure 2.1) is a rugged Network Attached Storage (NAS) device with
solid state storage capacities from 128 GB up to 4 TB. The DTS1 provides data storage to
assorted network clients via two IEEE 802.3 / 802.3u / 802.3ab Ethernet ports. The DTS1 is a
ruggedized unit designed to operate on vehicles, in field stations, or in laboratories.
The DTS1 is configured/controlled through a Command Line Interface (CLI) via RS-232 or
Ethernet (Telnet or SSH). The CLI utilizes Curtiss-Wright’s proprietary command structure, which
includes built in Help. The DTS1 uses the Commercial Solutions for Classified (CSfC) specification
and associated dual layer data security system to provide a NSA-acceptable data encryption
method. Data is encrypted by hardware and software to fulfill the CSfC dual layer requirements.
Figure 2.1 DTS1
2.1.1 Chassis
The chassis (Figure 2.2) is made up of the following major assemblies:
• RMC Module Mount
• Backplane PCB
• Power Supply PCB
• Processor Carrier PCB
• Mini Comm PCB
• USB Flash Module
It also contains a battery used to power the EPROM that stores the encryption key.
DDOC0099-0001
DTS1 Standard Mount
DTS1 DZUS Mount

User Guide DDOC0099-000-AH
DTS1 CSfC 2 - 2 Overview
© 2020 Curtiss-Wright Defense Solutions Revision 5.0
Figure 2.2 DTS1 Chassis / Components
The RMC module mount positions the RMC module in the chassis. The backplane is used to
interface the RMC module to the processor carrier PCB. The mini comm PCB is the primary
assembly in the unit. It contains the processor / CPU, memory, and the encryption circuitry. The
processor carrier PCB is used to interface the mini comm PCB to the rest of the system. It also has
the utility (J2) and Ethernet (J3) connectors installed on it. The power supply assembly takes the
28 VDC input power, cleans and conditions it, and then distributes it to the entire system.
The enclosure is compliant with Military Specification MS25212 rail mounting standard for military/
aviation utilizing Dzus quarter-turn fasteners. A standard platform mounting option is also
available. Front panel LEDs give the user an at-a-glance DTS1 status report. Additional status
information is available through the CLI.
Two rear panel 10/100/1000 Ethernet ports (connectors J2 and J3) (Figure 2.3) are available for
network connections supporting NFS, CIFS, FTP, iSCSI, PCAP, and HTTP file transfer protocols.
The DTS1 also supports the Preboot eXecution Environment (PXE) giving remote computers the
capability to boot from files stored on the DTS1. Connector J2 also supports RS-232
communication protocol (primarily used for configuring the DTS1) as well as a discrete zeroize and
reset function. Connector J1 is used to connect the DTS1 to 28 VDC (operating voltage). In
addition, the DTS1 has a removable panel located on the underside of the unit. It is removed to
allow replacement of the crypto module battery.
A set of processor carrier PCB connections (Figure 2.4) is provided under a panel on the side of
the DTS1. Currently they are reserved for manufacturing and service activities. Contact Curtiss-
Wright for more information about end-user utilization of these connectors. A write-enable switch is
provided as well. The switch must be in the READ-WRITE position to enable configuring the
DTS1. Refer to paragraph 3.2.2 Write-Enable Switch for detailed information.
DDOC0099-0043
Battery
USB Flash
Module
Mini Comm
PCB
Processor Carrier PCB
Power Supply PCB
RMC Module
Mount
Backplane
PCB

User Guide DDOC0099-000-AH
DTS1 CSfC 2 - 3 Overview
© 2020 Curtiss-Wright Defense Solutions Revision 5.0
Figure 2.3 DTS1 Rear Panel / Battery Access Cover and Rear Connectors
Figure 2.4 DTS1 Processor Carrier PCB Programming Connector / Write-Enable Switch
2.1.2 RMC Module
One RMC module (Figure 2.5) is housed in the DTS1. The RMC module is accessed via a sealed
door with a quarter-turn latch located on the front panel of the unit. The RMC module within the
DTS1 is also a rugged compact unit that can be personally transported with minimal precautions to
a secure location or deployment.
Figure 2.5 DTS1 With RMC Module
DDOC0099-000 5
Battery Access
Panel
Ethernet
Power
Ground Stud
Ethernet / RS-232
DDOC0099-0019
Processor Carrier PCB
Programming Connctors
Write-Enable Switch
RMC Module
DTS1
Quarter-Turn
Latch
Sealed Door
DDOC0099-0002

User Guide DDOC0099-000-AH
DTS1 CSfC 2 - 4 Overview
© 2020 Curtiss-Wright Defense Solutions Revision 5.0
2.2 Protocols
The DTS1 supported protocols include Telnet, TFTP, CIFS, NFS, FTP, HTTP, DHCP, SNMP, and
iSCSI in addition to its RS-232 console port. The CIFS and NFS protocols are enabled by default,
all others are disabled. The unit also supports SSH, which is always enabled. The user can enable
the desired protocols to support their application. Refer to paragraph 12.3.27 serv for additional
information.
The FDEEEcPP20 and FDEAAcPP20 Protection Profiles did not consider, nor did they include
networking protocols as part of the security functional requirements, and as a result, did not
include any requirements for addressing those protocols.
Therefore, as per the FDEEEcPP20 and FDEAAcPP20, the protocols have not been examined as
part of the required assurance activities and consequently the evaluation can make no claims
about the DTS1’s networking protocols.
It is suggested that a customer using the product consider the impact of utilizing remote
administration via SSH across the network (rather than through the console) based upon their
specific use case. The customer should factor into their risk management decision the
environment in which the DTS1 operates (dedicated, segregated, private network versus residing
in a Demilitarized Zone [DMZ] accessible to the Internet), and the value of data to be protected.
2.3 CSfC Encryption
Commercial Solutions for Classified (CSfC) encryption is based on a National Security Agency (NSA)
specification. The CSfC program requires multi-layered security. Hardware data encryption is used for
the first security layer. The second security layer is software data encryption. Both encryption processes
are performed in the DTS1, one in the HW crypto module, the other by the Processor. The hardware
encryption key is retained in the DTS1 crypto module memory, the software encryption key is stored on
the RMC module.
2.3.1 Hardware Encryption Layer
CAUTION
DATA LOSS. If the Specific User Token Key is lost, the user account will be rendered unusable.
NOTE
Refer to paragraph 5.3 Hardware Layer Encryption for information regarding the actual
commands and procedures used to create and log into the hardware encryption layer.
2.3.1.1 Account Creation
Before use, an account must be created (Figure 2.6) on the DTS1 Hardware Encryption (HWE)
layer. To start the account creation, the user logs into the DTS1 via the Command Line Interface
(CLI). Once logged in, additional commands are entered to create an account on the DTS1 HWE
layer. The HWE layer contains a Pre-Shared Key (PSK) which is generated at initial equipment
power-on at the manufacturer and provided separately by Curtiss-Wright. The PSK cannot be read
out of the DTS1. When the account is created, a user token key is internally generated by the
HWE layer. The layer then keywraps the user token key using the PSK and supplies it to the end
user through the CLI. The keywrapped user token key is validated on a third-party system by
comparing the DTS1-generated HMAC and the third-party-generated HMAC. If both match, the
user token is unwrapped using the PSK. The unwrapped user token key is then used in
subsequent logins as the specific-user token.

User Guide DDOC0099-000-AH
DTS1 CSfC 2 - 5 Overview
© 2020 Curtiss-Wright Defense Solutions Revision 5.0
Figure 2.6 Hardware Encryption Layer Account Creation
2.3.1.2 Account Login
Any subsequent use of the equipment requires logging in (Figure 2.7) to the HWE layer before
data storage and/or transfer can begin. The user enters their user name and password into the
DTS1. The HWE layer checks the information against its accounts. If the user name and password
are recognized, a random one-time 64-byte key (also referred to as a nonce) is generated. The
nonce is sent to the end-user via the CLI. The user then enters the nonce and their specific-user
token key (generated when the account was created) into a third-party HMAC-SHA384 generator
using the user token as the key. The CLI then sends this data as a user-generated HMAC to the
DTS1 HWE layer. The layer compares the user HMAC and the HWE layer HMAC. If they are the
same, the user is logged in. If they do not compare, the user is denied access.
TERMINAL / PC
DTS1
CLI
HARDWARE
CRYPTO LAYER
Internally Generate
32-byte User
Token Key
PSK Keywraps
User Token
Key (AES256
Keywrap)
PSK
Generate
HMAC
(User Token
Key and PSK)
Send Encrypted
User Token
Key and HMAC
Login / Create
Account on
Hardware
Encryption
Layer
Validate HMAC (Use
PSK and Encrypted
User Token Key)
User Token Key is
Now a Specific-User
Token Key Tied to
Account
Decrypt User Token
Key (Use PSK )
DDOC0099-0017
TERMINAL / PC
DTS1
CLI HARDWARE CRYPTO LAYER
Check / Verify End-User
Name / Password
Against Account Information
Generate Random One-Time
Use 64-byte Key (Nonce)
Send Nonce
Generate HMAC (Nonce
and Specific-User
Token Key)
Compare User HMAC
and Hardware Encryption
Layer HMAC
Log Into
Previously
Created
Account
Send
User-Generated
HMAC
User Generates
HMAC via 3rd-Party
Software (Use Specific
User Token Key
and Nonce)
If Comparison Passes,
User is Logged In
If Comparison Fails,
User is Denied Access
DDOC0099-0018

User Guide DDOC0099-000-AH
DTS1 CSfC 2 - 6 Overview
© 2020 Curtiss-Wright Defense Solutions Revision 5.0
Figure 2.7 Hardware Encryption Layer Account Login
2.3.2 Software Encryption Layer
CAUTION
DATA LOSS. If the software encryption key / passphrase is lost, the RMC module will be rendered
unusable.
NOTE
Refer to paragraph 5.4 Software Layer Encryption for information regarding the actual
commands and procedures used to create and log into the software encryption layer
NOTE
If the drive is going to be partitioned, the partition(s) must be created before the software encryp-
tion is activated.
To create the software encryption layer, the user must first log into the HWE layer. After that
procedure has been accomplished, creation of the Software Encryption (SWE) layer can begin.
Software encryption is performed before the RMC module is formatted or mounted. Multiple RMC
modules can be encrypted using the same or different encryption key / passphrase. In addition, RMC
modules can be partitioned and have each partition use the same or different encryption key /
passphrase. Before attempting to encrypt the RMC module, the status should be checked. If the status
is not correct, creation of the SWE layer will fail. After the software encryption has been performed, the
RMC module can be formatted and mounted.
Subsequent use of the RMC module is dependent upon the proper encryption key / passphrase
being entered using the CL). Failure to enter the proper information will result in the RMC module
being inaccessible for data storage or use.
2.3.3 Zeroize
There are two methods to zeroize the DTS1:
• Local
• Remote
To locally initiate zeroization, the KEY CLEAR button is depressed and held for a minimum of five
seconds. To remotely initiate zeroization, the Zeroize_N signal is shorted to ground for
approximately five seconds.
The Zeroize_N signal (connector J2-1) is internally pulled-up to +3.3V. The external device is
required to sink no more than approximately 3.3 mA when Zeroize_N is shorted to GND. This can
be accomplished by a switch, relay, or an open drain/collector type semiconductor device as long
as the DTS GND reference (connector J2-3) is used. Refer to paragraph B.2 Utility Connector J2
/ Utility Lab Cable for additional information regarding external connections.
2.4 Features
• Services
• CIFS
• DHCP
• FTP
• HTTP
• NFS
• SNMP
• TFTP
• TEL
• Performance (typical)
• NFS & CIFS, single Ethernet channel and client
• Sustained read: 105 Megabytes per second
• Sustained write: 108 Megabytes per second
• NFS & CIFS, two Ethernet channels, single client per channel
• Sustained read: 61 Megabytes per second per channel
• Sustained write: 64 Megabytes per second per channel