Digital Content Manager (DCM) DCM Supercrypt

Transcription

1 Rev D Digital Content Manager (DCM) DCM Supercrypt Configuration Guide Software Package 3.0

2

3 Safe Operations For Your Safety Explanation of Warning and Caution Icons Avoid personal injury and product damage! Do not proceed beyond any symbol until you fully understand the indicated conditions. The following warning and caution icons alert you to important information about the safe operation of this product: You may find this symbol in the document that accompanies this product. This symbol indicates important operating or maintenance instructions. You may find this symbol affixed to the product. This symbol indicates a live terminal where a dangerous voltage may be present; the tip of the flash points to the terminal device. You may find this symbol affixed to the product. This symbol indicates a protective ground terminal. You may find this symbol affixed to the product. This symbol indicates a chassis terminal (normally used for equipotential bonding). You may find this symbol affixed to the product. This symbol warns of a potentially hot surface. You may find this symbol affixed to the product and in this document. This symbol indicates an infrared laser that transmits intensity-modulated light and emits invisible laser radiation or an LED that transmits intensitymodulated light. Important Please read this entire guide. If this guide provides installation or operation instructions, give particular attention to all safety statements included in this guide Rev D iii

4

5 Safe Operations Notices Trademark Acknowledgments Cisco, Cisco Systems, and the Cisco Systems logo are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the U.S. and certain other countries. Scientific Atlanta and the Scientific Atlanta logo are registered trademarks of Scientific-Atlanta, Inc. SciCare is a trademark of Scientific-Atlanta Inc. ROSA and Copernicus are trademarks of Scientific-Atlanta Europe NV. All other trademarks shown are trademarks of their respective owners. Publication Disclaimer Copyright Scientific-Atlanta Europe NV assumes no responsibility for errors or omissions that may appear in this publication. Scientific Atlanta reserves the right to change this publication at any time without notice. This document is not to be construed as conferring by implication, estoppel, or otherwise any license or right under any copyright or patent, whether or not the use of any information in this document employs an invention claimed in any existing or later issued patent Scientific-Atlanta Europe NV. All rights reserved. Information in this publication is subject to change without notice. No part of this publication may be reproduced or transmitted in any form, by photocopy, microfilm, xerography, or any other means, or incorporated into any information retrieval system, electronic or mechanical, for any purpose, without the express permission of Scientific-Atlanta Europe NV. Comments About This Document If you have comments about your experience with this documentation, please visit the Scientific Atlanta web site and complete the user documentation satisfaction survey at the following address: Your completed survey will be forwarded to the documentation manager directly responsible for publishing this document Rev D v

6

7 Contents Safe Operations Preface ix xi Chapter 1 Introduction 1 Introducing the DCM Supercrypt... 2 General... 2 Modular Concept... 3 Principle... 4 Introducing Conditional Access System... 5 Introduction... 5 Scrambling, Control Word, and Cryptoperiod... 6 Access Criteria and Access Rights... 6 Entitlement Control Messages... 7 Event Information Scheduler... 9 Scrambling levels Simulcrypt Scrambling Timing Parameters Introducing the Web Browser User Interface About the Web Browser User Interface Using the Web Browser User Interface Web Browser User Interface Security Introduction Logging On or Off the Web Browser User Interface Configuring the Security Checking the Version Information Introduction To check the Version Information Importing and Exporting Device Settings Introduction Exporting Configuration Settings Importing Configuration Settings Restarting the System Introduction To Restart the DCM Supercrypt System Rev D iii

8 Contents Chapter 2 Configuration 31 Device Configuration Changing the Device Name Adding or Removing SNMP Trap Destinations Setting the Device Clock Card Configuration Changing the Name of an Interface Card GbE Port Configuration Configuring the Interface Parameters of a GbE Port GbE Port Backup Adding or Deleting Static ARP Table Entries Adapting the Static Route Table Checking the Routes to Destination Devices Joining or Leaving GbE Ports to IGMP Multicast Groups Checking the GbE Statistics General Configuration Changing Default Values for Settings of Incoming Transport Streams Changing Default Values for Settings of Outgoing Transport Streams Changing the Display Mode Chapter 3 Service Routing 73 Description Creating Service Routing Files Introduction Creating a Service Routing File Uploading and Downloading Service Routings Uploading a Service Routing File Downloading the Service Routings Changing Service Routing Settings Adding a Service Routing Removing Service Routings Changing the Standard of an Incoming Transport Stream Changing Settings of Outgoing Transport Streams Changing Settings of Incoming Services Changing the SID of an Outgoing Service iv Rev D

9 Contents Chapter 4 Scrambling Configuration 95 Introduction General About the SCS Configuration GUI Changing the Scrambling Properties Introduction To Change the Scrambling Properties Entitlement Control Message Generators Introduction To Assign an ECMG Interface Changing the ECMG Specific Parameters Removing an ECMG Interface Overruling the ECMG Channel Status Message Parameter Values Adding, Changing, or Removing ECMG Descriptor Rules Event Information Schedulers Introduction To Assign an EIS Interface Changing the EIS Interface Connection Parameters Removing an EIS Interface Chapter 5 Alarm Monitoring 113 Configuring the Alarms Introduction Enabling or Disabling Alarm Message Reporting for all Alarms Generating Test Messages Configuring the Settings of the Device Alarms Configuring the Settings of the Interface Alarms Checking the Alarms Introduction Alarms Related to Incoming Transport Streams Alarms Details Related to Incoming Transport Streams Alarms Related to Incoming Services Alarms Details Related to Incoming Services Alarms Related to Outgoing Services Alarms Details Related to Incoming Services To Check the Device Status Overview Table Alarm Overview Interface Card Related Alarms Device Related Alarms Rev D v

10 Contents Chapter 6 Checking Bit Rates 131 Checking the Bit Rates Overview Tables Introduction Checking the Input Bit Rates Checking the Output Bit Rates Restarting the Bit Rate Measurement Chapter 7 Software Upgrade 147 Introduction About the Upgrade Software System Requirements Installing the Upgrade-It Software Package Upgrading the DCM Software Appendix A Customer Information 157 Product Support Obtaining Support Support Telephone Numbers Return Products for Repair Introduction Obtaining an RMA Number and Shipping Address Packing and Shipping the Product Appendix B Integrating a DCM Supercrypt into ROSA NMS 163 Introduction About ROSA NMS Installing the ROSA 3.0 Drivers Introduction To Install the ROSA Drivers Making Task Instances Introduction To Make a Task Instance Mapping a DCM Supercrypt into ROSA NMS Introduction To Map a DCM into ROSA NMS Working with the Graphical User Interfaces Opening the Web Browser User Interface Opening the Graphical User Interface of a Task or Component vi Rev D

11 Contents Appendix C Configuring the Access Criteria 179 Introduction General About the AC Manager Component GUI General Settings To Change the Number Format Setting up the Transport Stream Model Introduction To Set up the TS Model by Uploading the TS Model from the DCM Supercrypt Device(s) To Set up the TS Model Manually Defining Access Criteria Configuration Dialog Conditional Access System Information Access Criteria Information Assigning Access Criteria Appendix D Scrambling Control 201 Introduction About the Scrambling Control Task Communication Setup Starting and Stopping Scrambling General Settings Starting the Task Automatic Start Stopping the Task Synchronizing the Task with the AC Manager Component To Change the Number Format Changing the ECM ID Mode Introduction To Change the ECM ID Mode Checking the DCM Devices to which a Transport Stream Belongs Starting and Stopping Scrambling Starting Scrambling Stopping Scrambling Event Logging Advanced Settings Restoring Communication Overruling the Scrambling Control Configuration Rev D vii

12 Contents Appendix E Extended Operations 219 Downloading MIBs from the DCM Introduction To Download MIB files Viewing Trace Logs Introduction Filtering the Card Trace Logs Changing the ORB Trace Level Checking the Trace Logs Downloading Trace Logs Glossary 227 Index 235 viii Rev D

13 Safe Operations Safe Operations The software described in this guide is used to monitor and / or manage Scientific Atlanta equipment. Certain safety precautions should be observed when operating equipment of this nature. For product specific safety requirements refer to the appropriate section of the documentation accompanying your product Rev D ix

14

15 Preface Preface Introduction Audience This configuration guide provides the necessary information to configure and to operate the Digital Content Manager (DCM) DCM Supercrypt using the web browser user interface of the device. In this configuration guide the Digital Content Manager (DCM) Supercrypt is further indicated by DCM Supercrypt. The audience of this configuration guide includes authorized and trained personnel who are responsible for the configuration and operation of the DCM Supercrypt. Required Knowledge To use this configuration guide, the personnel should have a basic knowledge about the technology used in relation to this product. Related Publication Refer to the following Scientific Atlanta publications for more information concerning the DCM Supercrypt: Digital Content Manager (DCM) Model D System Guide, part number This guide is shipped with the DCM Supercrypt. Digital Content Manager (DCM) Model D Data Sheet, this data sheet can be found on the Scientific Atlanta web site at the following location: ROSA Network Management System - User's Guide, part number IIOP Protocol Driver - User's Guide, part number Document Version This is the fourth release of this configuration guide Rev D xi

16

17 1 Chapter 1 Introduction Introduction This chapter provides information concerning the DCM Supercrypt and gives an introduction of Conditional Access Systems. In This Chapter Introducing the DCM Supercrypt... 2 Introducing Conditional Access System... 5 Introducing the Web Browser User Interface Web Browser User Interface Security Checking the Version Information Importing and Exporting Device Settings Restarting the System Rev D 1

18 Chapter 1 Introduction Introducing the DCM Supercrypt General The Digital Content Manager (DCM) Supercrypt is a bulk-encryptor that can be used into Switched Digital Video (SDV) applications, Video on Demand (VOD) applications, etc... The DCM Supercrypt is a compact 2 RU device configurable with up to four GbE Interface Card/Co-Processor modules. The following illustration depicts a DCM Supercrypt. Scientific Atlanta Alarm PS 1 Model D9900 Digital Content Manager (DCM) PS 2 The DCM Supercrypt supports hot swappable and redundant power supplies and hot swappable cooling fans. The DCM Supercrypt is controlled via a simple and intuitive Graphical User Interface. Routing of the incoming services to the output of the DCM Supercrypt can be done using the web browser user interface or can be done in advanced using a service routing file editable by means of a standard text editor or Microsoft Excel Rev D

19 I/O GbE 10/ Modular Concept Introducing the DCM Supercrypt The DCM Supercrypt is a fully modular concept build around a 2 RU high housing. The flexible modular concept ensures easy system capability upgrades. The following illustration shows the modular concept of the DCM Supercrypt. PS 1 PS 2 The following DCM Supercrypt equipment is available: Housing V dc Power Supply Unit (PSU) V ac PSU GbE Interface Card/Co-Processor Card module PSU slot cover plate Interface card slot cover plate When the DCM Supercrypt leaves Scientific Atlanta's assembly line, the device is configured as ordered. When the device is not fully populated, meaning not populated with four GbE Interface Cards/Co-Processor Card modules, the device can always be upgraded at a later date by adding GbE Interface Card/Co-Processor Card modules Rev D 3

20 Chapter 1 Introduction Principle The DCM Supercrypt contains the following functional blocks: PSUs Main Card GbE Interface Card/Co-Processor Card module Mains Mains PSU PSU Power Distribution Card Co-Processor Card GbE 10/100/BaseT 4 GbE Interfaces GbE Interface Card Main Card I/O Contacts Co-Processor Card Front Panel Status LEDs 4 GbE Interfaces GbE Interface Card Co-Processor Card 4 GbE Interfaces GbE Interface Card Co-Processor Card Data 4 GbE Interfaces GbE Interface Card Control Power Supply Status Rev D

21 Introducing Conditional Access System Introducing Conditional Access System Introduction A Conditional Access System (CAS) is the basis in a Pay TV system to prevent unauthorized reception of services (picture, sound, or data) and to secure the charge of the subscribing remuneration. The following illustration depicts DCM Supercrypt integration into a Conditional Access System. Access Criteria Scheduler Event Information Scheduler Database ECM Generator Subscriber Management System Control Word Access Criteria ECMs SCGs Control Word Generator Control Word Simulcrypt Synchronizer (P)SI Generator DCM Supercrypt Control Word (P)SI Tables ECMs MUX TS Scrambler TS Transport Stream A CAS system combines scrambling of picture, sound, or data services with a specific Scrambling/Descrambling key management system. Scrambling is the process that uses a cryptographic algorithm to make services unintelligible for nonauthorized subscribers Rev D 5

22 Chapter 1 Introduction Scrambling, Control Word, and Cryptoperiod At the transmission site of a Condition Access System (CAS), services multiplexed into a Transport Stream can be scrambled using a particular scrambling algorithm (also called DVB Common Scrambling Algorithm) with a scrambling/descrambling key (named Control Word). At the receiver site the scrambled services can then be descrambled by an appropriate descrambling algorithm using the same Control Word (CW). Transport Stream Scrambler Transport Stream with Scrambled Services Descrambler Transport Stream CW CW To increase the security of a CA System the Control Word used to scramble and descramble services changes periodically (typically every 10 seconds). The duration of scrambling by one Control Word is named Crypto Period. Control Words, which are typically 64 bits long, are generated by a Control Word Generator (CWG) and requested by the Simulcrypt Synchronizer (SCS). Transport Stream Scrambler Transport Stream with Scrambled Services Descrambler Transport Stream CW CWG? CW SCS Control Words cannot be delivered from the transmitter to the receiver site in the clear, they need to be encrypted. The algorithm used to encrypt the Control Word is unique to each CA System and implemented in a secure device of the descrambler and uses the smart card of the customer s Conditional Access Module (CAM). Access Criteria and Access Rights When a subscriber is only interested in particular services like sport and nature, he only wants to pay for these services. Services, for which the subscriber doesn t pay, have to remain unintelligible. Therefore two parameters are defined, namely Access Criteria and Access Rights: Access Criteria is Conditional Access vendor specified information and specifies service-related criteria that are applied to a package of services or elementary streams. These subscriptions (also called theme or product) are encapsulated into Entitlement Control Messages (ECMs). More information concerning ECMs can be found in topic Entitlement Control Messages on page Rev D

23 Introducing Conditional Access System Access Rights are stored on the smart card of the descrambler and determines which services the subscriber can access. These Access Rights are periodically reconfirmed using Entitlement Management Messages (EMMs). When the Access Rights for a particular subscriber should be changed, EMMs are sent to the descrambler containing the new Access Rights. Example: AC criteria 1, subscription = Football ECM1 AC criteria 2, subscription = Tennis ECM2 AC criteria 3, subscription = Snooker ECM3 A subscriber pays to view football and snooker programs. His set top box receives all ECM packets that contain the appropriate control words. Besides that, the set top box also receives EMM packets that contain the access rights for this set top box. These rights are compared with the access criteria and the set top box is only allowed to decipher the ciphered Control Words of the ECMs for which the subscriber has Access Rights (ECM1 and ECM3). Entitlement Control Messages The Simulcrypt Synchronizer (SCS) triggered from the Event Information Scheduler (EIS) to start a Conditional Access event, will get every Crypto Period a Control Word (CW) for this event from the Control Word Generator (CWG). Incoming Transport Stream ECMs MUX Scrambler Outgoing Transport Stream? CWG CW SCS CW (...,AC,...) CW/AC ECMs DCM EIS ECMG Note: For more information concerning the Event Information Scheduler, please refer to topic Event Information Scheduler on page Rev D 7

24 Chapter 1 Introduction The Simulcrypt Synchronizer extracts the Access Criteria from the information (named Scrambling Control Group) received from the Event Information Scheduler. The synchronizer sends this Access Criteria together with the Control Word for the corresponding Crypto Period to the Entitlement Control Message Generator (ECMG). The Entitlement Control Message Generator encrypts both the Access Criteria and the Control Word using a particular cryptographic algorithm with a specific Service Key. This encrypted data is encapsulated into an Entitlement Control Message (ECM) and sent to the Simulcrypt Synchronizer. Incoming Transport Stream ECMs MUX Scrambler Outgoing Transport Stream? CWG CW SCS CW DCM (...,AC,...) CW/AC ECMs EIS ECMG A certain time before the first Crypto Period for this event begins, the Simulcrypt Synchronizer starts sending ECMs for this event at regular times to the multiplexer (typically every 200 msec). This start time is necessary to give the descrambler time to decrypt the encrypted Control Word and Access Criteria. The multiplexer multiplexes this stream of ECMs with the outgoing Transport Stream. When the event begins, the Simulcrypt Synchronizer sends the Control Word to the scrambler, which starts scrambling the service(s) associated with this event. Incoming Transport Stream ECMs MUX Scrambler Outgoing Transport Stream? CWG CW SCS CW DCM (...,AC,...) CW/AC ECMs EIS ECMG Rev D

25 Introducing Conditional Access System Before the end of the Crypto Period, the Simulcrypt Synchronizer requests a new Control Word from the Control Word Generator, sends this new Control Word together with the Access Criteria to the ECMG, and receives a new ECM for this event from the ECM Generator. This new generated ECM is multiplexed in the outgoing Transport Stream. When the Crypto Period is ended, the new Control Word is sent to the scrambler, which starts scrambling the service(s) using the new Control Word. This reiterates for every Crypto Period until the end of the event. Incoming Transport Stream ECMs MUX Scrambler Outgoing Transport Stream? CWG CW SCS CW DCM (...,AC,...) CW/AC ECMs EIS ECMG Event Information Scheduler The Event Information Scheduler (EIS) is the functional unit in the Conditional Access System that holds the schedule information, the configuration, and the Conditional Access Information required for the complete Conditional Access System. Incoming Transport Stream ECMs MUX Scrambler Outgoing Transport Stream? CWG CW SCS CW (...,AC,...) CW/AC ECMs DCM EIS ECMG Rev D 9

26 Chapter 1 Introduction To start a scrambling event the Event Information Scheduler provides the Simulcrypt Synchronizer with a Scrambling Control Group (SCG) provisioning message. A SCG provisioning message contains a list of services and/or Elementary Streams that must be scrambled at the same time with the same Control Word and a list with ECM Groups for which ECMs must be generated. An ECM Group contains the necessary information, like Super_Cas_ID 1, ECM_ID 2, and Access Criteria, to bind an ECM stream to a Conditional Access Provider. To stop a scrambling event the EIS sends a SCG provisioning message update to the Simulcrypt Synchronizer. The ECM Group for the event of which scrambling must be stopped is removed from the SCG provisioning message. The following illustration shows a SCG provisioning message. SCG Provisioning Message ECM Groups Service ID xxx.. SCG ID. Components ID xxx Activation Time Supercas ID x Access Criteria xx 2 Supercas ID x Access Criteria xx 3 Supercas ID x Access Criteria xx 4 Supercas ID x Access Criteria xx 5 Supercas ID x Access Criteria xx 6 Supercas ID x Access Criteria xx y Supercas ID x.. Access Criteria xx ECM ID 1 The Super_Cas_ID is the concatenation of the CA_system_ID and the CA_Subsystem_ID and is used to identify the ECM Generator within the Contitional Access System. 2 The ECM_ID identifies an ECM stream within the Conditional Access System Rev D

27 Introducing Conditional Access System Scrambling levels Scrambling can be done on two different levels, namely: Elementary Stream Level scrambling and Service Level scrambling. The following list describes these scrambling levels: Elementary Stream Level Scrambling: Each component of a service may be scrambled by a separate Control Word. For example, video and audio may be scrambled with a separated Control Word. This is useful in multilingual systems where a premium is charged for a second audio in a different language. In this case, each component or elementary stream is associated with its own stream of ECM messages. Input TS Output TS PMT Video PID Audio PID Transport Stream (P)SI Tables PSIG ECMs MUX Scrambler PMT Video PID CA Descriptor ES Video ES Audio CW CWG EIS (...,AC,...) SCS CW/AC ECMs CW DCM ECM PID Audio PID ES Video (scrambled) ES Audio ECM PID EMM PID ECMG When scrambling at the elementary stream level, all Elementary Streams within the service are scrambled using different Control Words. One ECM is required for each Elementary Stream. The CA descriptors are inserted after each elementary stream within the PMT. Service Level Scrambling: The alternative to elementary stream level scrambling is to scramble all components that make up a service with the same Control Word. In this case, there is only one stream of ECM messages associated with the service as a whole. Input TS Output TS PMT Video PID Transport Stream ECMs MUX Scrambler PMT CA Descriptor Audio PID ES Video ES Audio CW CWG EIS (...,AC,...) SCS CW/AC ECMs CW DCM ECM PID Video PID Audio PID ES Video (scrambled) ES Audio (scrambled) ECM PID ECMG EMM PID Rev D 11

28 Chapter 1 Introduction When scrambling at the service level, all Elementary Streams within the service are scrambled using the same Control Word. Only one ECM is required for each service. The CA descriptor is inserted near the top of the PMT. Note: Elementary Stream Level Scrambling and Service Level Scrambling can be mixed within the scrambler but not within the same service. Simulcrypt Scrambling Simulcrypt scrambling is a scrambling method whereby a single Transport Stream contains ECMs from different Conditional Access systems. This enables different CA decoder populations to receive and correctly decode the same video and audio streams. Input TS Output TS PMT Video PID Audio PID Transport Stream ECMs MUX Scrambler PMT CA Descriptor ECM 1 PID ES Video ES Audio CWG CW SCS CW ECM 2 PID ECM n PID Video PID (..., ECMgrp1(...,AC1), ECMgrp2(...,AC2),...,ECMgrpn(...,ACn),...) CW/AC1 ECM1s ECMG1 CW/AC2 ECMs ECMG2 CW/ACn ECMn ECMGn Audio PID CSA(ES Video, CW) CSA(ES Audio, CW) ECM 1 PID ECM 2 PID EIS ECM n PID Timing Parameters When the Event Information Scheduler (EIS) triggers the Simulcrypt Synchronizer the start of a new Conditional Access (CA) event using a Scrambling Control Group (SCG ID 1) provisioning message, the Simulcrypt Synchronizer request a Control Word (CW 1) from the Control Word Generator. Once the Simulcrypt Synchronizer has received the Control Word from the CW Generator, the Simulcrypt Synchronizer sends the Control Word together with the Access Criteria and ECM ID extracted from the Scrambling Control Group provisioning message to the ECM Generator. The ECM Generator encrypts the Control Word and Access Criteria and encapsulates this data into an ECM. The ECM Generator sends this ECM to the Simulcrypt Synchronizer. A certain time before (t1-t2) starting the CA event (Activation Time) the Simulcrypt Synchronizer start sending ECMs for the first Crypto Period at regular times to the Multiplexer Rev D

29 Introducing Conditional Access System Transition Start Delay 3 (t1-t2): represents the amount of time between the start of the first Crypto Period following a clear to scrambled transition, and the start of the broadcasting of the ECM attached to this period. The multiplexer multiplexes these ECMs directly into the outgoing Transport Stream. At the same time a CA descriptor containing the ECM PID is inserted into the Program Map Table (PMT) of the Transport stream. SCG ID 1 SCG ID 1 SCG Transmission ECM Transmission ECM (CW 1) t1 ECM (CW 2) t3 t4 ECM (CW 3) ECM (CW L) tl+1 Crypto Period t2 CP 1 t5 CP 2 CP L tl Service Status Clear Scrambled using CW 1 Scrambled using CW 2 Scrambled using CW L Clear Activation Time from the SCG provisioning message Activation Time from the SCG de-provisioning message The Transition Start Delay must match the time the descrambler needs to decapsulate the ECM PID from the PMT and to decrypt the Control Word and Access Criteria. At the begin (t2) of the first Crypto Period (CP 1) the set top box starts descrambling the scrambled service using CW 1. A certain time (t3-t5) before the end of the running Crypto Period (CP 1) the SCS stops transmitting ECMs attached to this CP and a certain time (t4-t5) before the next Crypto Period (CP 2) the SCS starts transmitting ECMs for CP 2. Stop Delay 4 (t3-t5): represents the amount of time between the end of a Crypto Period, and the end of the broadcasting of the ECM attached to this period. Start Delay 5 (t4-t5): represents the amount of time between the start of a Crypto Period, and the start of the broadcasting of the ECM attached to this period. 3 A positive start delay parameter means that the ECM shall be delayed with respect to the start of thecrypto Period. A negative delay parameter it means that the ECM shall be broadcast ahead of this time. Only a negative Transition Start Delay can be used. 4 A positive stop delay parameter means that the end of the ECM broadcast shall be delayed with respect to the end of the Crypto Period. A negative stop delay parameter means that the ECM broadcast shall be ended ahead of time. 5 A positive start delay parameter means that the ECM shall be delayed with respect to the start of the Crypto Period. A negative delay parameter it means that the ECM shall be broadcast ahead of this time Rev D 13

30 Chapter 1 Introduction When the Simulcrypt Synchronizer receives a SCG provisioning message update from the Event Information Scheduler indicating the end of the running CA event, the synchronizer extend the last Crypto Period until the end of the period match the end of the activation time extract from the SCG provisioning message update. Once the activation time (tl) is reached the set top box stops descrambling the service. The Simulcrypt Synchronizer stops transmitting ECMs attached to this last Crypto Period at time (tl+1). Transition Stop Delay (tl-tl+1): this parameter represents the amount of time between the end of last Crypto Period preceding a scrambled to clear transition, and the end of the broadcasting of the ECM attached to this period. When the Simulcrypt Synchronizer receives a SCG provisioning message containing another Access Criteria for the service(s), the synchronizer stops sending ECMs containing the previous Access Criteria at time t6 in the last Crypto Period and starts sending ECMs with the new Access Criteria at time (t7). SCG ID 2 SCG Transmission ECM Transmission ECM (CW L) ECM (CW L+1) t6 t7 ECM (CW L+2) ECM (CW L+3) Crypto Period CP L-1 CP L CP L+1 CP L+2 t8 Service Status Scrambled using CW L-1 Scrambled using CW L Scrambled using CW L+1 Scrambled using CW L+2 Activation Time SCG ID 2 AC Start Delay 6 (t7-t8): represents the amount of time between the start of the first Crypto Period following a change in the Access Criteria and the start of the broadcasting of the ECM attached to this period. AC Stop Delay 7 (t6-t8): represents the amount of time between the end of the lastcrypto Period preceding a change in Access Criteria, and the end of the broadcasting of the ECM attached to this period. 6 A positive start delay parameter means that the ECM shall be delayed with respect to the start of the Crypto Period. A negative delay parameter it means that the ECM shall be broadcast ahead of this time. 7 A positive stop delay parameter means that the end of the ECM broadcast shall be delayed with respect to the end of the Crypto Period. A negative stop delay parameter means that the ECM broadcast shall be ended ahead of time Rev D

31 Introducing Conditional Access System During the connection setup between the Simulcrypt Synchronizer and the Entitlement Control Message Generator, the Simulcrypt Synchronizer receives a Channel Status Message containing particular timing parameters. When timing parameters are missing or inaccurate, ROSA s SCS Configurator allows overruling these parameters. When a subscriber tunes into a scrambled service in a particular Crypto Period, the scrambler is not able to scramble the service during the rest of this Crypto period because he has only the Control Word for the next period. To solve this problem, an Entitlement Control Message (ECM) can be provided with more than one Control Word. The most Conditional Access Systems allow 1 or 2 Control Words in an ECM, viz. the Control Word of the current Crypto Period and the Control Word of the next period. SCG Transmission ECM Transmission SCG ID 1 ECM (CW 1-2) ECM (CW 2-3) ECM (CW 3-4) Crypto Period CP 1 CP 2 CP 3 Service Status Clear Scrambled using CW 1 Scrambled using CW 2 Scrambled using CW 3 Activation Time Rev D 15

32 Chapter 1 Introduction Introducing the Web Browser User Interface About the Web Browser User Interface The web browser user interface of the DCM Supercrypt is a pure HTML based Graphical User Interface (GUI) that can be opened using Microsoft Internet Explorer 6.0 or higher. By entering the IP Address of the DCM Supercrypt in the address box of Internet Explorer web browser, the web browser user interface of the device will be opened. The following illustration shows the opening page of the DCM Supercrypt GUI. Note: The procedure to log on the web browser user interface can be found in topic Web Browser User Interface Security on page Rev D

33 Introducing the Web Browser User Interface Using the Web Browser User Interface Browsing through a Tree The incoming and outgoing services of the DCM Supercrypt as well as the DCM Supercrypt configuration are represented using trees. You can browse through a tree by collapsing or expanding branches. A branch that can be expanded is indicated by a + sign and an expanded leave is indicated by a - sign. To expand a branch, point to the + sign in front of the branch. To collapse a branch, point to the - sign in front of the branch. Using the Apply and Reload Command Button Particular pages and sub pages of the web browser user interface of the DCM Supercrypt can be provided with a Reload command button and an Apply command button. When changes are made to settings on a certain page or sub page, clicking on the Apply command button will send these new settings to the DCM Supercrypt. Note: When settings are changed on multiple pages or sub pages, only the settings on the page or sub page for which the Apply command button is pressed, are sent to the DCM Supercrypt. When settings are accidentally changed on a certain page or sub page, clicking on the Reload command button restores these settings to the previous settings as long as the Apply command button on this page or sub page is not pressed. The Reload command button can also be used to update readouts on the page or sub page the command button belongs to Rev D 17

34 Chapter 1 Introduction Image Legend A description of the icons used by the web browser user interface of the DCM Supercrypt can be found on the help - Legend sub page. The following procedure explains how to display the help - Legend sub page. 1 On the web browser user interface of the DCM Supercrypt, point to the Legend link that appears after clicking on the Help link. Result: The help - Legend sub page is displayed Rev D

35 Introducing the Web Browser User Interface Using Popup Windows Particular information is given by the DCM Supercrypt using popup windows. When popup blocking software is active on your PC, these popup windows might be blocked. In this case a message box is displayed. Deactivate this popup blocking software if you use the web browser user interface of the DCM Supercrypt. About Web Browser Toolbars Some toolbars for web browsers (e.g. Google Toolbar) offer an automated form fill in option. This option tries to fill in some fields in forms on web pages that were already visited once in the past (e.g. to automatically fill in name and address if possible). Because the embedded user interface of the DCM Supercrypt consists of pages with large forms this feature can slow down your page considerably. Therefore it is recommended to disable this option when you work with the DCM Supercrypt GUI. Checking the Version of the Web Browser User Interface The software version of the embedded web browser user interface of the DCM Supercrypt can be found on the help - About sub page of the user interface. The following procedure explains how to check the version of the embedded web browser user interface. 1 On the web browser user interface of the DCM Supercrypt, point to the About link that appears after clicking on the Help link. Result: The help - About sub page containing the version information of the web browser user interface is displayed Rev D 19

36 Chapter 1 Introduction Web Browser User Interface Security Introduction To prevent people from gaining access to the DCM Supercrypt, the web browser user interface of the DCM Supercrypt is provided with a security feature. This security feature confirms the identity of the users who are attempting to access the device, protects the device configuration from inappropriate access by users, and provides a simple and efficient way to set up and maintain the security of the DCM Supercrypt. To configure the DCM Supercrypt security, Security Accounts should be defined. A Security Account consists of a unique user name with password. By adding Security Accounts to Security Groups, particular access permissions and rights can be given to users. Three Security Groups are defined each having a different access level, viz.: Guests: read-only access Users: read-write access (without security configuration) Administrators: full control (with security configuration) The security of the DCM Supercrypt is provided with three pre-defined User Accounts. The table below shows these pre-defined accounts. User Name Password Security Groups Guest Guest Guests (read-only access) User User Users (read-write access, without security configuration) Administrator Administrator Administrators (full control) Notes: Both the User Name and Password are case-sensitive. Similar user names cannot be used, even when uppercase and lowercase characters are combined, e.g. user and User. For security reason each action done to the DCM Supercrypt using the web browser user interface will be logged into the Security Log or Action Log. More information concerning these logs can be found in topic Viewing Trace Logs on page Rev D

37 Web Browser User Interface Security Logging On or Off the Web Browser User Interface To Log On Perform the following steps to log on the DCM Supercrypt web browser user interface. Note: When the web browser user interface of the DCM Supercrypt is uploaded from the device after entering the IP address in the Address box of the web browser, the Login page of the web browser user interface is displayed. 1 On the Login page of the DCM Supercrypt web browser user interface, enter the user name in the User Name box and the password in the Password box. Note: Both parameters are case sensitive. 2 Press the Login command button to confirm. Result: You are logged on to the web browser user interface and the Service page is displayed. The user name of the security account that is logged on appears in the Login link. Note: After 30 minutes user interface inactivity, the web browser user interface of the DCM Supercrypt will automatically be logged out. To Log Off The following step explains how to log off the DCM Supercrypt web browser user interface. 1 On the web browser user interface of the DCM Supercrypt, point to the Logout link. Result: The web browser user interface is logged off and the Login page is displayed Rev D 21

38 Chapter 1 Introduction Configuring the Security Adding Security Accounts Perform the following steps to add Security Accounts. 1 Log on to the DCM Supercrypt using a Security Account belonging to the Administrators Security Group. 2 Point to the Security link. Result: The Security page is displayed. Tip: The rows in the Security Accounts table can be re-ordered using a particular parameter by pointing to the table header of this parameter. You can toggle between ascending and descending order by pointing to the parameter header. 3 In the User Name box of the Add New User table, enter a name for the new account. 4 In the Security Group drop down box, select the Security Group to which the new account has to belong. 5 In the Password and Re-enter Password box, enter the password for the new account. 6 Press the Add command button. Result: The new Security Account is added to the Security Accounts table Rev D

39 Web Browser User Interface Security Changing Security Account Settings Perform the following steps to change the settings of a Security Account. 1 Log on to the DCM Supercrypt using a Security Account belonging to the Administrators Security Group. 2 Point to the Security link. Result: The Security page is displayed. Note: When a user is logged on using a Security Account that belongs to the Users or Guests Security Group, the Security link is not applicable. 3 In the Security Accounts table, adapt the following parameters of the Security Account for which settings should be changed: When the name of the Security Account should be changed, enter the new name in the corresponding User Name box. When the Security Account has to belong to another Security Group, select the desired group in the Security Group drop down box. When the password should be changed, tick the corresponding check box and enter the new password in both password boxes. 4 Press the Apply command button to confirm or the Reload command button to abort the operation. Tip: The rows in the Security Accounts table can be re-ordered using a particular parameter by pointing to the table header of this parameter. You can toggle between ascending and descending order by pointing the parameter header. Deleting Security Accounts The following procedure explains how to delete security accounts. 1 Log on to the DCM Supercrypt using a Security Account belonging to the Administrators Security Group. 2 Point to the Security link. Result: The Security page is displayed. Note: When a user is logged on using a Security Account that belongs to the Users or Guests Security Group, the Security page is not applicable. 3 In the Security Accounts table, tick the check box(es) in front of the row(s) of the Security Account that must be removed. Tips: To set the check boxes of consecutive rows in the Security Accounts table, tick the check box of the first row, press and hold down the [SHIFT] key, and tick the check box of the last row. The rows in the Security Accounts table can be re-ordered using a particular parameter by pointing to the table header of this parameter. You can toggle between ascending and descending order by clicking on the parameter header Rev D 23

40 Chapter 1 Introduction 4 Press the Remove Checked Items command button to confirm or the Reload command button to abort the operation. Result: After pressing the Remove Checked Items command button, the selected Security Accounts are removed from the Security Accounts table. Notes: At least one Security Account belonging to the Administrators Security Group must be present in the Security Accounts table. When a Security Account is deleted from a Security Group while a user is logged on to the DCM Supercrypt using this Security Account, the user has access to the DCM Supercrypt as long as he is logged on Rev D

41 Checking the Version Information Checking the Version Information Introduction The Configuration - Version Info sub page of the web browser user interface of the DCM Supercrypt represents the version numbers of the software, hardware, and firmware of the different DCM Supercrypt components. The following picture shows the Configuration - Version Info sub page of a DCM Supercrypt populated with two GbE Interface Card / Co-Processor modules. Note: By pointing to the parameter header in a version table, an ascending or descending order of the rows can be chosen. To check the Version Information Perform the following steps to check the version information of the DCM Supercrypt. 1 On the web browser user interface of the DCM Supercrypt, point to the Version Info link that appears after clicking on the Configuration link. Result: The Configuration - Version Info sub page is displayed Rev D 25

42 Chapter 1 Introduction Importing and Exporting Device Settings Introduction The web browser user interface of the DCM Supercrypt allows exporting and importing of the configuration setting files. This feature is useful for backup or (re- )configuration purposes. Exporting Configuration Settings The following procedure explains how to export the configuration setting files of the DCM Supercrypt. 1 On the web browser user interface of the DCM Supercrypt, point to the Backup link that appears after clicking on the Configuration link. Result: The Configuration - Backup sub page is displayed. 2 Press the Export command button. Result: The File Download dialog is displayed. 3 Click on the Save command button. Result: The Save As dialog is displayed. Note: If the file should be saved in a different folder, locate and open the folder. 4 In the File Name box, enter a name for the file. 5 Click the Save command button to confirm or the Cancel command button to abort the operation Rev D

43 Importing Configuration Settings Importing and Exporting Device Settings The procedure below describes how to import the configuration setting files. 1 On the web browser user interface of the DCM Supercrypt, point to the Backup link that appears after clicking on the Configuration link. Result: The Configuration - Backup sub page is displayed. 2 Point to the Browse command button. Result: The Choose file dialog is displayed. 3 Browse to the configuration file and select this file. 4 Click on the Open command button. Result: The Choose file dialog is closed and the path and the file name appear in the Import Device Settings from File box. 5 Click on the Import command button. Result: A confirmation popup window is displayed. 6 Press the OK command button to confirm or the Cancel command button to abort the operation. Result: After pressing the OK command button, the DCM will be rebooted. WARNING: During booting the DCM, the outgoing services will be interrupted. Note: Booting the DCM can take some time depending on the configuration and the features of the device Rev D 27

44 Chapter 1 Introduction Restarting the System Introduction The DCM Supercrypt can be restarted from a remote location using its web browser user interface. A device restart can be performed with its previous settings (called Warm Restart) or with factory setting (called Cold Restart). When a cold restart is performed, all previous configuration settings will be lost except the IP settings of the 10/100 and 10/100/1000Base-T port of the device. After restarting the device remains accessible by the embedded graphical user interface. Note: Performing a cold restart can only be done when you are logged on to the DCM Supercrypt with a security account belonging to the Administrators security group. To Restart the DCM Supercrypt System The following steps explain how to restart a DCM Supercrypt. 1 On the web browser user interface of the DCM Supercrypt, point to the Maintenance link that appears after clicking on the Help link. Result: The Help - Maintenance sub page is displayed. 2 Click on the Warm or Cold selection button. WARNING: After restarting the DCM Supercrypt using a Cold Restart, all configuration settings will be lost. After restarting the DCM Supercrypt using a Warm Restart, the outgoing services will be interrupted. 3 Press the Reboot command button. Result: A confirmation popup window is displayed. - Warm Restart confirmation popup window Rev D

45 Restarting the System - Cold Restart confirmation popup window 4 Press the OK command button to confirm or the Cancel command button to abort the operation. Notes: Booting the DCM Supercrypt can take some time depending on the configuration and the features of the device. After changing settings using the web browser user interface, it takes at most 5 minutes before these settings are stored in non-volatile memory. When the DCM Supercrypt is powered down during this time, these settings will be lost. To deal with this, wait 5 minutes before power down the DCM Supercrypt or trigger a Warm Restart and wait 20 seconds before powering down the DCM Supercrypt by unplugging he power cord Rev D 29

46

47 2 Chapter 2 Configuration Introduction This chapter covers the configuration of the DCM Supercrypt. This chapter provides the device configuration procedures, card configuration procedures as well as port configuration procedures. In This Chapter Device Configuration Card Configuration GbE Port Configuration General Configuration Rev D 31

48 Chapter 2 Configuration Device Configuration Changing the Device Name Introduction To facilitate the identification of the DCM Supercrypt in an application, a name with maximum 40 characters can be given to the device. Note: The name of the DCM Supercrypt appears in the title bar of the web browser. Tips: The hardware configuration of the DCM Supercrypt is depicted in the Hardware configuration box. Clicking on an interface card in the hardware configuration picture opens the Configuration - Interface configuration sub page of the corresponding interface card Rev D

49 Device Configuration To Change the Device Name The following procedure explains how to change the device name. 1 On the web browser user interface of the DCM Supercrypt, point to the Configuration link. Result: The Configuration page with System sub page is displayed. 2 In the System Settings table, enter a name in the Name box. 3 Click on the Apply command button to confirm or the Reload command button to reload the previous setting. Note: The System Settings table also contains the DCM Supercrypt model to which the web browser user interface belongs Rev D 33