Can anybody confirm that ADP software encryption is included with every APX6000 with a p25 feature set? If hardware encryption is in the flash can software also still be used?
Thanks for this info. For example in this flash code on an APX6000AN 1.5 has a flash code of 9Q20482014906. Reading the feature set Q498 Hardware Multikey Encryption w/ OTAR is included with the radio. Does that mean software ADP (single key or multikey) is included by default and is usable via CPS instead of using a KVL to load hardware keys?No it is not. A smart rep will automatically include it in the purchase because it will activate the MACE, but if you don't specifically ask for it, it's not included.
What do you mean hardware encryption is in the flash?
Due to P25 CAP compliance it is possible to order a radio with no encryption, where ADP used to be the standard option.A smart rep will automatically include it in the purchase because it will activate the MACE, but if you don't specifically ask for it, it's not included.
Correct me if I'm wrong but I'm 99.9% sure software encryption does NOT use the MACE. You can have software encryption enabled and no hardware MACE installed. Just because you enable software encryption on a radio doesn't mean you automatically get a hardware module. I believe it depends on the model you buy if its included by default, if it is not then you have to specifically purchase H/W encryption with the algos desired. Regardless when purchasing you still need to purchase the hardware algos desired or load them yourself.Since Software ADP isn't in the flashcode, you'll have to verify that it's loaded into the MACE by putting the radio into service mode.
Oh like you know anything about Motorola radiosPeople will disagree with me, but oh well...
You CAN NOT remove SW ADP from an APX. it is part of the firmware. To do so would require separate ADP and non-ADP firmware versions, which would be a nightmare.
The CAP compliance (or whatever it's called) thing is just a codeplug flag if you order a radio with no encryption (It locks the codeplug choice to "no encryption).
The ones KevinC are referring to have no way to enable Hardware or Software encryption. The dropdown only says "Disabled"Depends who you ask. Last year I bought a 6000, & brought it somewhere to have ADP added to the FC. He told me even though it’s not in the FC, it still has ADP. He then proceeded to type in an ADP key, & it worked. So I suggest the OP go to software encryption, & try adding an ADP key.
No one is talking about removing anything from firmware. Your argument is the same as saying "you can not remove P25 Phase II from an APX, it is part of the firmware", or insert any other feature. The average user isn't going to be able to change a Flashcode or change the Featureset on their own. You need to order a radio with encryption or order an upgrade to enable encryption after the fact.People will disagree with me, but oh well...
You CAN NOT remove SW ADP from an APX. it is part of the firmware. To do so would require separate ADP and non-ADP firmware versions, which would be a nightmare.
The CAP compliance (or whatever it's called) thing is just a codeplug flag if you order a radio with no encryption (It locks the codeplug choice to "no encryption).
Not all features are part of the flashcode, there are factory set features in the codeplug that will not decode in a FC no matter how hard you try. You need special software that I have never seen in the wild to change these features. If you want to explore what these features may be, decrypt and read the raw model tiering file.Depends who you ask. Last year I bought a 6000, & brought it somewhere to have ADP added to the FC. He told me even though it’s not in the FC, it still has ADP. He then proceeded to type in an ADP key, & it worked. So I suggest the OP go to software encryption, & try adding an ADP key.
Ok. My point was ordering a radio with "no encryption" only sets a codeplug flag to make the choice of encryption grayed out and set to disabled. To get ADP back the flag needs to be removed and no end users can't do it, but once it's removed SW ADP magically reappears without having to add SW ADP via an upgrade or algo add or anything else.No one is talking about removing anything from firmware. Your argument is the same as saying "you can not remove P25 Phase II from an APX, it is part of the firmware", or insert any other feature. The average user isn't going to be able to change a Flashcode or change the Featureset on their own. You need to order a radio with encryption or order an upgrade to enable encryption after the fact.
Because it's in the MACE and ADP can be software or hardware loaded if it's in the MACE regardless of whether or not Software ADP is in the flashDepends who you ask. Last year I bought a 6000, & brought it somewhere to have ADP added to the FC. He told me even though it’s not in the FC, it still has ADP. He then proceeded to type in an ADP key, & it worked. So I suggest the OP go to software encryption, & try adding an ADP key.
I don't know what flag you are talking about, it's a Flashcode option that needs to be enabled for this to happen. Technically speaking if it's disabled and you want to enable software ADP, the radio does get upgraded via a FLASHport upgrade, no ways around not upgrading because the codeplug needs to be upgraded and with that it asks you for a firmware file during the upgrade process. You can give it the same version that is loaded in the radio so it doesn't have to reload the entire radio but it still goes through an upgrade process for the codeplug.but once it's removed SW ADP magically reappears without having to add SW ADP via an upgrade or algo add or anything else.
Beginning 2020.4 MOL release ADP will no longer be available for High and Mid tier devices without the option enabled in the FC
I don't know what flag you are talking about, it's a Flashcode option that needs to be enabled for this to happen. Technically speaking if it's disabled and you want to enable software ADP, the radio does get upgraded via a FLASHport upgrade, no ways around not upgrading because the codeplug needs to be upgraded and with that it asks you for a firmware file during the upgrade process. You can give it the same version that is loaded in the radio so it doesn't have to reload the entire radio but it still goes through an upgrade process for the codeplug.
I'm not clear on how you think SW ADP magically reappears otherwise.
Edit: For clarification here are the options with more info:
Option for Advanced Digital Privacy Enabled Software
Q667 - Portable
G193 - Mobile
Option to disable ADP @ factory/depot
PCI_ADP_FLASHCODE_GATING
Ah okay, thanks for clearing that up. That flag would be the PCI_ADP_FLASHCODE_GATING option.What he is saying is that if you order a radio with no encryption from the factory, they set a flag that only they can clear at the depot if you want encryption of any flavor. We had an agency try to add AES/DES via KVL and it wouldnt take because there was no way to set the codeplug to Hardware and only had one option on the dropdown for disabled. They had a bulletin about it specifically saying any radio ordered without encryption would have to be returned to Motorola if you changed your mind later and needed crypto. Motorola told them that even if they wanted to order ADP software encryption, the radio would need to go back because even if it was in the FlashCode, you guessed it, the codeplug would not have the option for Software, just Disabled again.
This was in response to other manufacturers complaining that they were giving away a non-P25 compliant encryption scheme (ADP) that was not specified in TIA.102. To remain compliant, the radio either had to have AES or no encryption at all. This was their solution. Others have simply included single key AES to remain compliant.