Uni-Directional Digital Cable Products Supporting m-card m-udcp device Acceptance Test Plan tp-atp-m-udcp-i05-20080304 issued notice This Test Plan document is furnished by Cable Television Laboratories, Inc


Certificate Storage and Management



Download 3.36 Mb.
Page6/31
Date28.01.2017
Size3.36 Mb.
#10091
1   2   3   4   5   6   7   8   9   ...   31

2.3Certificate Storage and Management

2.3.1Certificate CA Structure


First time M-UDCP-CableCARD binding consists of a communication sequence to generate the matching Copy Protection keys in both M-UDCP and CableCARD. It will store the intermediate keys in their respective non-volatile memory. DFAST requires that the M-UDCP shall use specific root origination structure (CA00004) for manufacturer and device certificates.

CableLabs tests M-UDCP certificate with a product from Digital Keystone called the HPNx PRO. Follow procedure below to launch the HPNx Pro resources. Capture both the manufacturer certificate (MAN_CERT) and the device certificate (DEV_CERT) to verify the M-UDCP root origination.



Procedure:

Step#

Procedure

Pass/Fail

PICS



Bring up the HPNX PRO software on the PC, and verify that the PC and HPNx Pro are on the same isolated network.

N/A






Note the last 4 (mac address) digits of HPNx Pro you are using.

(Information is on the back side of card).



N/A






Insert the HPNx Pro extender card into DUT. From the HPNx Pro trace window, verify that the status of the HPNx Pro goes to ready.

N/A






Check that the Resource Manager opened its session.

N/A






Go to the Application Information tab and click on it. Press the Play button to open the resource.

N/A






Go to the Man Machine Interface tab and click on it. Press the Play button to open the resource.

N/A






Expand the “Extended Channel” tab. The DUT should support extended channel version 1 as defined in CCIF2.0 Specification.

Right click on the Session slot. Select “Change Resource Version”.

Enter the correct resource version.

Click OK.

On the “Extended channel” tab press the Play button to open the extended channel resource.


N/A






Verify that the DUT issues a New_flow_req to Extended Channel requesting a service_type = MPEG_section with a PID = 0x1FFC. See example below.



N/A






In the “Extended channel” tab, under “Flow Feed” function, next to the “SI table file” click the Browse button. Select a valid system time file from wherever you have stored it on the HPNx Pro, and click “OPEN”.

Note: A current STT.hex (C5) table identifier file should be created.



N/A






Enter the FLOW_ID that was noted from HPNx Pro New_flow_req trace into the Flow ID window and click Send.


N/A






Select the Copy Protection tab. Expand CP Provider Menu and choose production certificate.


N/A






Press the Copy Protection Play button.

N/A






Verify that the “CopyProtection Session Key successfully generated” in the trace display window.



N/A






Under the Copy Protection tab expand the “Save DUT Certificates” menu. Press save for the Device Certificate. Label this file and save it somewhere on the given PC as a .cer file.

N/A






Under the same “Save DUT Certificates” menu, press save for the Manufacturer Certificate. Label this file and save it somewhere on the given PC as a .cer file.

N/A






Open the saved manufacturer CA certificate and click on the “Details” menu. Click “Issuer” and verify CN = CableLabs Manufacturer Root CA.. Exit window.




CertMgt.8




Open the saved device certificate and click on the “Details” menu. Click “Issuer” and verify the OU=CA00004. Exit window.




CertMgt.8




Download 3.36 Mb.

Share with your friends:
1   2   3   4   5   6   7   8   9   ...   31




The database is protected by copyright ©ininet.org 2024
send message

    Main page