Motorola STU-III/R Instruction Manual

STU m/R
R E M O T E C O N T R O L L A B L E S E C U R E
VOICE/DATA TERMINAL
OPERATION, INSTALLATION AND
M A I N T E N A N C E M A N U A L
MOTOROLA INC.

[/R
STU II
R E M O T E C O N T R O L L A B L E S E C U R E
VOICE/DATA TERMINAL
OPERATION, INSTALLATION AND
M A I N T E N A N C E M A N U A L .
March 1991
Consult with local security authority for security procedures
applicable to the control and use of the STU-III/R.
Motorola Document Number 68-P39024D001

Table of Contents
Chapter 1General Description
H O W T O U S E T H I S M A N U A L . .
STU-III/R FEATURES
T E C H N I C A L S P E C I F I C A T I O N S .
RELATED PUBLICATIONS
1-1
1-3
1-5
1-6
Chapter 2Modes of Operation
STU-III MODE
STU-II MODE
T E L C O / B L A C K D I G I TA L O P E R AT I O N . . . . 2 - 2
RED ANALOG/DIGITAL VOICE
OPERATION
2-1
2-1
2-2
Chapter 3Controls, Indicators, and
Connectors
CONTROLS
INDICATORS
CONNECTORS
R C I C O N N E C T O R ( J 4 ) . .
Remote Control ..
Analog Voice ....
Pu s h t o Tal k ( P T T)
LPC Input Enable
RED DATA /DIGITAL CON NECTOR (J3) ... 3-6
Red Digital Data
Red Digital Voice
B L A C K D I G I TA L C O N N E C T O R ( J 5 )
TELCO CONNECTOR (J6)
POWER CONNECTOR (Jl)
3-1
3-2
3-3
3-3
3-3
3-3
3-3
3-4
3-6
3-7
3-9
3-11
3-13
1

S T U - I I I F I L L D E V I C E / C I K C O N N E C T O R . 3 - 1 4
STU-II FILL CONNECTOR .
BATTERY COMPARTMENT
3-14
3-14
C h a p t e r 4 I n s t a l l a t i o n
UNPACKING
C H E C K I N G O F T H E C O N T E N T S
L O C AT I O N R E Q U I R E M E N T S . .
MOUNTING
4-1
.4-1
4-3
4-3
4-3
STU-III/R Terminal Mounting ..
Power Supply Mounting
SYSTEM CONNECTIONS
RCI Connection
Red Digital Connection
Black Digital Connection
Power Supply Connection
TELCO Connection
4-5
4-6
4-6
4-6
4-6
4-7
4-7
POWER-UP
CONFIGURATION
U K I N S T A L L A T I O N
4-9
4-9
4-10
Chapter 5Fill Devices &Cryptographic
Ignition Keys
STU-III FILL DEVICES
STU-II FILL DEVICES
KOI-18
KYK-13
CRYPTOGRAPHIC IGNITION KEYS
(CIKs)
5-1
5-2
..5-2
5-3
5-4
11

C h a p t e r 6 C r y p t o g r a p h i c
Procedures
FILL PROCEDURES
STU-III FILL PROCEDURE
STU-III REKEY
STU-II FILL PROCEDURE
F I L L E R R O R P R O B L E M S O L V I N G
ZEROIZING STU-III/R
SELECTIVE ZEROIZATION
EMERGENCY ZEROIZATION ...
6-1
6-1
6-2
6-3
6-4
6-5
6-5
6-6
Chapter 7Maintenance
BATTERY REPLACEMENT
F U S E R E P L A C E M E N T . . . .
INSPECTION OF CABLE
CONNECTIONS
C A R E A N D C L E A N I N G . . .
7-1
7-3
7-4
7-4
Chapter 8Troubleshooting
ERROR INDICATORS
FILL ERROR
HARDWARE FAULT
SECURITY FAULT
RCI ERROR MESSAGES
FAULT ISOLATION
NO POWER
NO RCI RESPONSE
R E D D I G I T A L A N D B L A C K D I G I T A L
PROBLEMS
NO DIAL TONE
NO CLEAR AUDIO
8-1
8-2
8-2
8-2
8-2
8-2
8-3
8-3
8-3
8-4
8-4
111

Chapter 9Security
COMSEC CUSTODIAN
SECURITY AWARENESS
LOST OR STOLEN CIK
NET VARIABLE UPDATE
TEMPEST PROTECTION
EQUIPMENT CLASSIFICATION
9-1
9-1
9-1
9-2
9-2
9-2
Chapter 10 Warranty and Service
W H A T T H I S W A R R A N T Y C O V E R S A N D
FOR HOW LONG
A D D I T I O N A L F E A T U R E S O F T H I S
WARRANTY
HOW TO OBTAIN WARRANTY
SERVICE
L I M I T A T I O N S O F T H E W A R P i A N T Y . . . .
R E M E D I E S A V A I L A B L E T O T H E
GOVERNMENT
D I S A G R E E M E N T S P E R T A I N I N G T O
THE WARFiANTY
GENERAL PACKING AND SHIPPING
INFORMATION
10-1
10-1
10-3
10-4
10-5
10-5
10-6
Appendices
ARCI Error Messages
Acron}ans and Abbreviations
A-l
BB-1
Index i-i
IV

List of Illustrations
Page
Figure
STU-III/R Front Panel
STU-III/R Rear Panel
Contents of STU-III/R Shipping Package
STU-III/R Mounting Hole Locations ...
Power Supply Mounting Hole Locations
KOI-18 Fill Device
KYK-13 Fill Device
Zeroize Switch
Battery Replacement
Fuse Replacement
3-1
3-1.
3-43-2.
4-2
4-1.
4-4
4-2.
4-5
4-3.
5-2
5-1.
5-3
5-2.
6-6
6-1.
7-2
7-1.
7-3
7-2.
List of Tables
Page
Table
3-2
Status Indicators
RCI/Red Analog (J4)
Red Analog Voice Interface
Red Data/Digital Interface (J3)
Red Digital Voice Signal Descriptions
Black Digital Interface (J5)
Black Digital Signal Descriptions ...
2-Wire TELCO Interface (J6)
4-Wire TELCO Interface (J6)
TELCO Interface Specifications ....
Power Supply Interface (Jl)
TELCO Parameter Options
Fill Exception Summary
Error Indicators
Equipment Classification
3-1.
3-5
3-2.
3-6
3-3.
3-7
3-4.
3-8
3-5.
3-93-6.
3-10
3-7.
3-8. 3-11
3-113-9.
3-12
3-10.
3-11. 3-13
4-84-1.
6-56-1.
8-1
8-1.
9-39-1.
V

Chapter 1
General Description
The STU-III/R is aVoice/Data Encryption unit with an integral
wi r e l in e m o d e m. I t i s s i m il a r i n f u nc t i o n t o th e M o t o ro l a
SECTEL family of secure telephones, but its purpose is different.
The STU-III/R has no handset or display, and is not intended to
be operated directly by auser. Instead, the STU-III/R is
controlled by an External Remote Controller (ERC) which, in
most cases, is asecured PBX called ared switch. Aminimal
user interface is provided for setup and maintenance functions.
The STU-III/R is typically rack mounted and installed in aPBX
equipment room. Power for the STU-III/R is provided by an
external 90-265 V(117 Vac, 305 mA, 36 watts nominal), 50-
440Hz power supply.
H O W T O U S E T H I S M A N U A L
Chapter 1General Information
Contains abrief description of information found in each chapter
along with asummary of equipment capabilities, features, and
technical specifications.
Chapter 2Modes of Operation
Describes the different operating modes of the STU-III/R.
Chapter 3Controls, Indicators and Connectors
Describes the controls, indicators, and connectors of the STU-
III/R.
Chapter 4Installation
Describes the unpacking, checking of the contents, location
requirements, mounting, system connections, and the power-up
procedure, necessary to prepare the system for operation.
1-1

Chapter 5Fill Devices and Cryptographic Ignition Keys
(CIKs) Describes the STU-II and STU-III fill devices and CIKs.
Chapter 6Cryptographic Procedures
Contains procedures for filling the terminal Avith STU-II and
STU-III keying material, updating the NET variable, and
performing zerioize functions.
Chapter 7Maintenance
Contains the procedures for the care and cleaning of STU-III/R,
battery replacement, fuse replacement, and the inspection of the
cable connections.
Chapter 8Troubleshooting
D e s c r i b e s c o m m o n e r r o r c o n d i t i o n s a n d i s o l a t i o n o f f a u l t s .
Chapter 9Security
Describes the equipment classification levels and protection of
the Communications Security (COMSEC) equipment.
Chapter 10 Warranty and Service
Contains information regarding the STU-III/R warranty and
how to obtain service assistance.
Appendix -Lists the abbreviations and acronyms that are
pertinent to the STU-III/R.
1-2

STU-m/R FEATURES
T h e S T U - I I I / R f e a t u r e s i n c l u d e :
●High quality voice, and high speed data operation at 9600 bps
●4800 bps voice operation according to government
standard CELP 3.1
●Interoperability with the STU-III family of equipment
●Interoperability with STU-II (KY-71) equipment in Net
Broadcast Mode
●External modem connection which provides black digital
network operation
●Black Digital alerting capability including global and
dedicated operation
●Emergency zeroize switch on the front of terminal
●Selectable clear/secure or secure only operation
●Selectable 2/4-wire TELCO interface with many configuration
options
●Red digital voice output to facilitate digital conferencing
●Selectable VOX or push-to-talk half duplex transmission
initiation
●Simple user interface for performing fill operations
●Ruggedized design for use in industrial and airborne
environments
1-3

●Power supply accepts v\dde-range voltage and frequency input
●Automatic secure on answer capability
●Selectable clear mode beep to alert user of nonsecure
operation
●Selectable AUTOVON and IVSN preemption tone detection
●Adjustable audio output volume
●Storage for two STU-III keysets to allow multiple security
levels
●ACK/NACK signalling option to improve operation on noisy
networks
1-4

_TECHNICAL SPECIFICATIONS
M o d e m S p e c i fi cations
Bit Rate 9.6 Kbps and 4.8 Kbps V.32 With Echo Canceling
2.4 Kbps V.26 With Echo Canceling
-6 to -43 dBm
0 t o - 1 2 d B m ( a d j u s t a b l e )
Input Level .
Output Level
_Secure Data Transmission
Asynchronous ,
Synchronous .,
“Data Connector
75/110/300/600/1200/2400/4800/9600 bps
2400/4800/9600 bps
RS-232C compatible
Speech Processor
Type 2400 bps LPC-lOe, interoperable FED-STD-1015
4800 bps CELP, interoperable FED-STD-1016
9600 bps MRELP, Motorola proprietary
Interfaces
Network
Analog Voice ....
Black Digital Voice
Black Digital Data
Remote Control ..
2 / 4 - w i r e T E L C O o r A u t o v o n
.4-wire, balanced, 600 ohm
RS-232C
RS-232C
RS-423A
Physical Characteristics
Height 3.20 i n c h e s
(8.13 centimeters)
10.50 i n c h e s
(26.67 centimeters)
12.75 i n c h e s
(32.39 centimeters)
12.5 lbs (5.7 kilograms)
Width
Depth
Weight
1-5

Battery
3volt, 1/3N lithium
... 2years typical
Type
Operating Life
Power Supply
6.5 inches
4.50 i n c h e s
(5.50 inches over tabs)
2.5 inches
Length
Width
Height
90 to 265 VAC (117V, 305 mA
nominal), 50 -440 Hz
GMC lA, 250V
Universal Auto Ranging
Fuse Type
Environmental
. . S h o r t Te r m 7 0 " C
Long Term 55°C
-20“C
-55“Cto85°C
95%, non-condensing
35,000 feet
High Temperature Operating
Low Temperature Operating
Storage Temperature
Humidity
Altitude
General
FCCPart68
FCC Part 15, Class A
(meets FCC Part 15, Class B)
Belgium, FRG, UK
Meets NACSIM 5100A Requirements
....Tested to Airborne Certification
RTCA D0-160B
FCC Approval
Host Nation Connection Approval
TEMPEST ...
Environmental
UL Listed
RELATED PUBLICATIONS
STU-HI/R Interface Control Document, Document Number 5983-
B004-001.
1-6

Chapter 2
Modes of Operation
The STU-III/R has two basic modes of operation: STU-III mode and
STU-II mode. These two modes correspond to the two basic types of
encryption used by the STU-III/R. In either of these modes the
STU-III/R can be configured for either TELCO or black digital
operation. In addition, the STU-III/R can accept as an input and
provide as an output either analog or digitized voice. Each of these
operating configurations is described in this chapter.
S T U - m M O D E
In the STU-III mode, the STU-III/R provides terminal
authentication and communication security for all levels of classified
traffic passed to other STU-III family equipment. In the STU-III
mode, the STU-III/R supports full duplex voice communication at
2400, 4800 or 9600 bps and half duplex voice at 2400 bps. Full
duplex data may be passed synchronously at 2400, 4800, or 9600
bps, and asynchronously at 75, 110, 300, 600, 2400, 4800, or 9600
bps. Half duplex data may be passed at 2400 bps or any slower
rate.
STU-n MODE
In the STU-II mode, the STU-III/R provides secure voice
compatibility with existing STU-II (KY-71 or similar) equipment.
Thi s m o d e a l l o w s se c ur e co mm un i ca ti on w it h o th er S TU - II I/ R o r
STU-II compatible terminals which have common Net keying
material. The STU-II mode may sometimes be referred to as Net
Broadcast or Multipoint mode, because it can be used to broadcast
secure voice or data to multiple users. This mode provides one
means of establishing asecure conference call.
The STU-II mode supports voice communication in half duplex and
at 2400 bps only. Half duplex data may be passed between STU-
III/R or STU-III/A terminals using a2400 bps synchronous protocol.
STU-II terminals do not support Multipoint data mode.
2-1

T E L C O / B L A C K D I G I T A L O P E R A T I O N
The STU-III/R can be operated over most TELCO networks using
the integral wireline interface and wireline modem. The TELCO
connection is made via the TELCO connector (J6) on the back panel
of the STU-III/R (see Chapter 3).
Alternatively, the STU-III/R can operate on ablack digital network.
This network can take many forms, but typically consists of an HE
radio link. For this type of installation, an external HE modem is
connected to the STU-III/R black digital connector (J5) and to an HE
radio to provide the communication link. Black digital operation is
limited to 2400 bps.
R E D A N A L O G / D I G I T A L V O I C E O P E R AT I O N
The STU-III/R can be used in astandard telephone configuration by
connecting apowered handset to the four-wire analog voice interface
on the RCI connector (J4). This is referred to as red analog voice
operation. Alternatively, the STU-III/R can operate in the red
digital voice configuration. In this configuration, unencrypted
digital vocoder frames are transmitted and received over the red
digital connector (J3). Red digital operation is typically used to
create asecure conference call with little or no signal degradation. _
2-2

Chapter 3
Controls, Indicators, and
Connectors
This chapter provides information about the controls, indicators, and
connectors of the STU-III/R. Figure 3-1 shows the controls,
indicators and connectors located on the STU-III/R front panel.
CONTROLS
The toggle switch located on the front panel
that is used to apply or remove electrical
power to or from the STU-III/R.
P o w e r S w i t c h
The pushbutton switch located on the front
panel that is used during the STU-II and
STU-IIl fill procedures (see Chapter 6).
Fill Button
The locking toggle switch located on the front
panel that is used to erase all keying
material stored in the STU-III/R in an
emergency situation (see Chapter 6). This
s w i t c h l o c k s i n b o t h t h e z e r o i z e a n d
operational position.
Zeroize Switch
FAULT-
OHARDWARE
OSECURITY
FILL MODE
O- FILL -((
ON LINE FILL DEVICE
SN STU 11
^BATTERY^ZEROIZE V"
O
Oerror
yv.yv
yv
STU III
OPOWER
AA, MOTOROLA CIK
STU 1Il/R
z.
0250-2-1
STU-III/R Front Panel
Figure 3-1.
3-1

DTOICATORS
The STU-III/R has eight front panel indicators to display terminal
st a tus. The i n dica t or fu n ctio n s are de s cri b e d in Table 3 - 1.
T a b l e 3 - 1 . S t a t u s I n d i c a t o r s
INDICATIONINDICATOR
Unit is on and powered
POWER (Green)
Unit is ready to process callsO N L I N E ( G r e e n )
U n i t i s i n fi ll mode
FLASHING; Prompts user to press the
fill button
ON:
FILL (Green)
A fi l l e r r o r h a s o c c u r r e d
FILL ERROR
(Red)
STU-III fill is in process
FLASHING: P r omp ts us e r to i n st a ll
ON:
STU-IH/CIK
(Yellow)
CIK
STU-H fill is in process
FLASHING: Prompts use r t o a t t a c h
STU-H fill device or pull
paper tape through fill
device
STU-II (Yellow) ON:
Anon-security related hardware failure
h a s o c c u r r e d
H A R D W A R E ( R e d )
FAULT
Asecurity related hardware failure
h a s o c c u r r e d
SECURITY (Red)
FAULT
NOTE
It is normal for the SECURITY FAULT indicator to light
momentarily in response to some RCI commands.
3-2

CONNECTORS
The following paragraphs describe the external connectors and their
functions.
RCI CONNECTOR (J4)
The S T U - I I I / E i n t er fa c es t o th e E xt e rn al R em o te C on t ro ll e r (E RC )
via aserial input/output port called the Remote Control Interface
(RCI) located on the rear panel of the STU-III/R (see Figure 3-2).
The RCI connection is made via a25-pin female D-type connector
with apinout as shown in Table 3-2. The RCI provides four distinct
functions: remote control, analog voice, push-to-talk, and LPC input
e n a b l e . E a c h o f t h e s e f u n c t i o n s a r e d e s c r i b e d i n d e t a i l b e l o w .
Remote Control
The remote control function provides full external control of the
STU-III/R by the ERC. It permits activation of functions normally
considered operator functions for the desktop STU-III. All STU-
III/R configuration and control is directed over the RCI. The remote
control interface is an asynchronous RS-423A electrical interface
that uses RS-232C protocol and operates at 9600 bps. The STU-III/R
functions as aData Communication Equipment (DCE), and the ERC
as aData Terminal Equipment (DTE).
Analog Voice
Analog voice is passed to the ERC over afour-wire interface
physically located on the RCI port. This four wire audio interface
consists of a600 ohm balanced receive and transmit pair. Technical
specifications for this interface are provided in Table 3-3.
P u s h - t o - Ta l k ( P T T )
The STU-III/R can be configured for either Voice Activated Switch
(VOX) or Push-To-Talk (PTT) operation. When configured for push-
to-talk, the PTT connection on the RCI is used to control half-duplex
voice tra ns mi ss io ns in secure mode. Each time PTT is as se rt ed , the
STU-III/R will initiate ahalf-duplex voice transmission if it is not
currently receiving. The PTT signal is active low (logic 0=
asserted), and will remain nonasserted if unused.
3-3

LPC Input Enable
The LPCIN signal on the RCI is used to select between red digital
and red analog voice operation. When LPCIN is asserted,
unencrypted vocoder frames are received from the red digital port.
If LPCIN is not asserted, analog voice is received from the audio
interface on the RIC. The LPCIN signal is active low (logic 0=
asserted), and will remain nonasserted of unused.
J50 o
RCI B L A C K D I G I TA L
RED DIGITAL
TELCO
POWER
J1 o?Z^o
□
J6
0250-2-3
S T U - I I I / R R e a r P a n e l
Figure 3-2.
3-4

Table 3-2. RCI/ Red Analog Interface (J4)
PIN
SIGNAL NAME
1
Protective Ground (AA)
2
Transmitted Data (BA)
3
Received Data (BB)
4
Request to Send (CA)
5
Clear to Send (CB)
6
Data Set Ready (CC)
7
Signal Ground (AB)
Received Line Signal Detector (CF) 8
9
P u s h t o Ta l k ( P T T ) *
LPC Input Enable (LPCIN)* 10
Transmit Audio (TXAUD) 12
13
Receive Audio (RXAUD)
Data Terminal Ready (CD) 20
24
Receive Audio Return (RXAUDRTN)
Transmit Audio Return (TXAUDRTN) 25
*Considered active when logic 0is applied
3-5