CommPower CP-145 Mode d’emploi

US e-Mail™

CommPower CP-145 Gateway

Installation and Administration Manual

Document Part #: /cpe/cp-145/adm/004

C O M M

P O WE R

Document Part Number and Revision:

ACP-145 Gateway Installation and Administration Manual

Document Part Number: /cpe/cp-145/adm/004

Revision History:

Date

Document Revision

June 2003

001

September 2004

002

December 2005

003

July 2014

004

This document describes the installation and administration of the ACP-145

Gateway

2013, 2014 Communications & Power Engineering, Inc.

stored in a retrieval system, nor translated into any human or computer language,

in any form or by any means, electronic, mechanical, magnetic, optical, chemical,

manual, or otherwise, without the prior written permission of the copyright

owner, Communications & Power Engineering, Inc. Copyright infringement is a

serious matter under the United States and foreign Copyright Laws.

Any copyrighted software that accompanies this document is licensed to the End

User only for use in strict accordance with the governing End User License

Agreement (EULA), which should be read carefully before commencing use of

the software. Information in this document is subject to change without notice.

Use, duplication, or disclosure by the UNITED STATES GOVERNMENT is

subject to restrictions as set forth in subparagraph (c) (1) of the COMMERCIAL

COMPUTER SOFTWARE - RESTRICTED RIGHTS clause at FAR 52.227-

19, or subparagraph (c) (1) (ii) of the RIGHTS IN TECHNICAL DATA AND

COMPUTER SOFTWARE clause at DFARS 52.227-7013. The

“Contractor/Manufacturer” is Communications & Power Engineering, Inc.

C O M M

POWE R

CommPower, Inc.

850 Calle Plano, Suite K

Camarillo, CA 93012

Telephone: 1 805 389 7414

e-Mail: Internet (productsupport@commpower.com)

/cpe/cp-145/adm/004 (07/14) -i -

ACP-145 INSTALLATION AND

ADMINISTRATION MANUAL

TABLE OF CONTENTS

CHAPTER 1

OVERVIEW.............................................................. 1-1

1.1 PRODUCT OVERVIEW......................................................................1-1

1.2 DOCUMENT OVERVIEW.................................................................1-3

CHAPTER 2

SOFTWARE INSTALLATION/REMOVAL....................... 2-1

2.1 SOFTWARE INSTALLATION...........................................................2-1

2.1.1 DCL MTA Installation......................................................................2-1

2.1.2 CP-145 Gateway Installation............................................................2-7

2.1.3 Results of the CP-145 Gateway Installation ............................... 2-11

2.1.4 Data Required For Permanent License File................................ 2-13

2.1.5 Manual Software License File Installation................................... 2-14

2.1.6 Post Installation Procedures.......................................................... 2-14

2.2 SOFTWARE REMOVAL .................................................................. 2-14

CHAPTER 3

BASIC MTA/ACP-145 CONFIGURATION .................... 3-1

3.1 BASIC DCL MTA CONFIGURATION............................................3-1

3.2 BASIC CP-145 LOCAL AND CP-145 FOREIGN

CONFIGURATION AND SETUP............................................................... 3-10

3.2.1 CP-145 Offline Configuration ...................................................... 3-11

3.2.2 CP-145 Gateway Online Configuration ...................................... 3-16

CHAPTER 4

ACP-145/MTA STARTUP/SHUTDOWN ...................... 4-1

4.1 ACP-145 STARTUP/SHUTDOWN...................................................4-1

4.1.1 ACP-145 Gateway Startup................................................................4-1

4.1.2 ACP-145 Gateway Shutdown ..........................................................4-1

4.2 DCL MTA STARTUP/SHUTDOWN................................................4-2

4.2.1 DCL MTA Startup.............................................................................4-2

4.2.2 DCL MTA Shutdown .......................................................................4-2

CHAPTER 5

CP-145 CONFIGURATION UTILITY ........................... 5-1

5.1 SYSTEM CONFIGURATION ............................................................5-1

5.1.1 System Parameters .............................................................................5-4

5.1.2 Users ....................................................................................................5-7

5.1.3 Message Translation ..........................................................................5-8

5.1.4 Network Access .............................................................................. 5-13

5.1.5 Message Purge Password ............................................................... 5-14

5.1.6 Default Classification...................................................................... 5-15

5.1.7 Flags .................................................................................................. 5-15

ACP-145 Installation and Administration Manual

-ii- /cpe/cp-145/adm/004 (07/14)

5.1.8 Logging Levels................................................................................. 5-18

5.1.9 CP-145 Settings - CP-145(L) only ................................................ 5-18

5.1.10 Security Tables - CP-145(L) only................................................ 5-23

5.1.11 AUTODIN Settings - CP-145(L) only ...................................... 5-24

5.1.12 Virus Checking - CP-145(F) only ............................................... 5-25

5.1.13 SMIME settings - CP-145(F) only.............................................. 5-26

5.1.14 X400 Gateway Assignments – CP-145(F) only........................ 5-32

5.2 SECURITY CONFIGURATION..................................................... 5-33

5.2.1 Security Configuration – CP-145(L)............................................. 5-33

5.2.2 Security Configuration – CP-145(F)............................................. 5-35

5.3 CHANNEL CONFIGURATION .................................................... 5-35

5.3.1 Channel Configuration – CP-145(L)............................................ 5-35

5.3.2 Channel Configuration – CP-145(F)............................................ 5-37

5.4 ACP-145 LOG FILES ......................................................................... 5-37

5.4.1 Log File Removal............................................................................ 5-39

APPENDIX A

CP-145 CONFIGURATION FILES ...........................A-1

A.1 OPTIONS FILES...................................................................................A-1

A.1.1 Security Category Options File (cat) .............................................A-1

A.1.2 Crypto Server Option File (cs).......................................................A-2

A.1.3 Error Message Options File (er) ....................................................A-3

A.1.4 Routing Options File (fp) ...............................................................A-4

A.1.5 I/O Options File (io).......................................................................A-4

A.1.6 Message Conversion Options File (mc)........................................A-4

A.1.7 Month Labels Options File (month).............................................A-5

A.1.8 Privacy Mark Options File (priv)...................................................A-5

A.1.9 Security Labels Options File (sec) .................................................A-5

A.1.10 System Configuration Options File (sys)....................................A-7

A.1.11 TRC Code Options File (trc) .......................................................A-8

APPENDIX B

ERROR MESSAGES ............................................. B-1

APPENDIX C

TROUBLESHOOTING/SYSTEM TIPS...................... C-1

C.1 SYSTEM WON’T START....................................................................C-1

C.1.1 Messages Are Re-released Automatically At System Startup.....C-1

C.1.2 Clear Error Log Files.......................................................................C-2

C.1.3 Clear Event Log Files, Statistics Log Files, and The Message

Archive ............................................................................................................C-2

C.1.4 Messages Are Not Input/Output From/To The MTA.............C-2

C.1.5 Configuration Changes Are Not Implemented ...........................C-2

C.2 MAP SYSTEM UTILITY .....................................................................C-3

C.2.1 Map System Utility Startup .............................................................C-3

C.2.2 Map System Utility Operation........................................................C-4

C.2.3 Map System Utility Shutdown........................................................C-6

APPENDIX D

MCAFEE ANTI-VIRUS SCANNING .......................... D-1

D.1 VIRUS CONFIGURATION .............................................................. D-1

Table of Contents

/cpe/cp-145/adm/004 (07/14) Index-iii

D.2 EVENT VIEWER MESSAGES ........................................................ D-4

APPENDIX E

MESSAGE RECOVERY UTILITY ..............................E-1

E.1 MESSAGE RECOVERY UTILITY...................................................E-1

E.1.1 Find Message Option ......................................................................E-3

E.1.2 Save Message List to File Option ..................................................E-4

APPENDIX F

CACHE UTILITY ...................................................F-1

F.1 CACHE UTILITY STARTUP AND OPERATION ...................... F-1

F.1.1 Cache Utility Startup ........................................................................ F-1

F.1.2 Cache Utility Operation................................................................... F-2

/cpe/cp-145/adm/004 (07/14) 1-1

Chapter 1

OVERVIEW

This document describes how to install and administer the CommPower

ACP-145 Gateway (ACP-145). The ACP-145 is designed to run in the

Windows 2008 Server R2 operating environment and features user-friendly

menus and dialogs that let you configure, monitor, and control ACP-145

operations.

1.1

PRODUCT OVERVIEW

Throughout the world, e-mail based Military Messaging services have

become an integral component of a modern Defense Command and Control

infrastructure, providing the means through which commanders at all levels

can effectively and securely communicate orders, instructions, and strategies.

Unfortunately, true globalization of such services has not and probably

cannot be realized due to differences in national implementations and the

lack of a common end-to-end security policy. The CCEB (Combined

Communications Electronics Board) has recognized this shortcoming and in

response, has drafted a standard (ACP145) that details the requirements and

functions of a nation-to-nation Military Messaging Gateway based on

ACP123/X.400 technology and S/MIME-ESS security services. In turn,

CommPower has taken this standard from paper to practice with the

introduction of its CP-145 Gateway product.

The CP-145 Gateway consists of two subsystems, or "Elements", one for

handling JANAP-128 messages and one handling SMIME-ESS P772

messages. The Local Element provides connectivity to a local JANAP-128

ACP-145 Installation and Administration Manual

1-2 /cpe/cp-145/adm/004 (07/14)

messaging host via a dedicated Mode I serial connection, whereas the

Foreign Element connects to the external network of the foreign nation.

Messages received/transmitted on each network interface are processed in

full per the security policy that governs the domain represented by the CP-

145 Element.

•Supported Security Standards: The security standards supported within the

Gateway include: S/MIME-ESS (Extended Security Services).

•Security Policy Definition: Security Policy Information Files (SPIFs) can be

created for each security domain that define the security policy in effect and

enforce access control. Multiple policies can be supported for each security

domain.

•Security Label Translation: User configurable Security Policy Translation

Tables (SPTTs) are used within the Gateway that defines the security label

translation rules between differing security policies. These tables are loaded

from a configurable location on disk.

Message flow within the Gateway between the discrete Elements is

accomplished via XML services that promote standardization, commerciality,

and extensibility within the product. Core features of the CP-145 include the

following:

•Virus Checking: Third party anti-virus products can be invoked by the CP-

145 to scan in-transit messages and their attachments for malicious content.

•Message Services: As with all CommPower Military Messaging products,

the CP-145 offers full protection, accountability, and recovery for all

messages within the Gateway.

•Third Party Services: Third party capabilities such as profilers can be

installed "in line" to perform additional processing on the XML message as

it passes through the Gateway.

•Extensibility: Because of the Gateway's modular architecture, a host of

configurations can be realized to allow connectivity to one or more nations,

each with a separate security translation policy.

The CommPower CP-145 Gateway product was selected by the U.S.

Department of Defense as the sole provider of ACP145 Gateway services

for its Defense Message System (DMS) program.

Chapter 1. Overview

/cpe/cp-145/adm/004 (07/14) 1-3

1.2

DOCUMENT OVERVIEW

This document describes the installation and administration of the CP-145 in

the following chapters and appendices:

Chapter 1, Overview: This chapter provides an overview description of the

CP-145 and this document.

Chapter 2, Software Installation/Removal: This chapter describes how to

install the Message Transfer Agent (MTA) software, and the CP-145

software. It also describes how to remove (or “un-install”) the CP-145

software.

Chapter 3, Basic MTA/CP-145 Configuration: This chapter describes how

to perform basic configuration of the MTA and the CP-145 software.

Chapter 4, CP-145/MTA Startup/Shutdown: This chapter describes how

to startup and shutdown the CP-145 and MTA software.

Chapter 5, CP-145 Configuration Utility: This chapter describes how to

use the CP-145 Configuration Utility to display the default configuration

supplied with the system and how to use the utility to create or modify

system configuration parameters.

Appendix A, CP-145 Configuration Files: This appendix describes the

contents of the CP-145 configuration files that are supplied with the system.

Appendix B, Error Messages: This appendix describes the error messages

that are generated and displayed by the CP-145 along with the Message

Recovery Utility.

Appendix C, Troubleshooting/System Tips: This appendix describes

troubleshooting procedures that can be used to recover from problem

conditions and some general tips that can be used to help maintain the CP-

145 system.

Appendix D, Symantec Anti Virus Scanning: This appendix describes the

setup procedures for enabling virus scanning.

Appendix E, Message Recovery: This appendix describes the procedures

for using the Message Recovery Utility.

Appendix F, Cache Utility:This appendix describes how to startup and

operate the CP-145 Cache Utility. This utility provides the administrator the

capability of performing the following CP-145 cache database related

functions.

/cpe/cp-145/adm/004 (07/14) 2-1

Chapter 2

Software Installation/Removal

This chapter describes how to install the DCL MTA software, and the CP-

145 Gateway software. It also describes how to remove (or “un-install”) the

CP-145 Gateway software.



NOTE: When installing the software, you must load the MTA before

loading the CP-145(F) (see “Software Installation” below). Also, if installing

a new release of the CP-145 Gateway software, remove the old release prior

to loading the new one (see “Software Removal” below).

2.1

SOFTWARE INSTALLATION

Perform software installation in the order described below and under the

local system administrator account:

1. DCL MTA - consists of three components, each installed separately

2. Microsoft XML Core services

3. dot Net Framework

4. CP-145 Gateway software



NOTE: Always restart the system when instructed to make certain

that configuration data is read or to start services that are required. Log on

after each restart under the local system administrator account.

This document assumes an installation on the C: drive. Please note,

however, that the CP-145 Gateway can be installed on any drive.

2.1.1

DCL MTA Installation

2.1.1.1

DCL MTA Pre-Installation Requirements

1. WINDOWS 2008 Server R2 is loaded on the system targeted for

software installation.

2. Logged onto the system under an account with local administrator

privileges.

3. All Windows applications are closed.

4. CP-145 Gateway is NOT loaded on the system.

5. Check that both DNS lookups and reverse DNS lookups work on the

network.

ACP-145 Installation and Administration Manual

2-2 /cpe/cp-145/adm/004 (07/14)

2.1.1.2

DCL MTA Installation Instructions

2.1.1.2.1

DC Directory Installation

The DC Directory is required to provide a directory service to support the

DCL MTA. To install DC Directory, perform the following steps:

1. Log onto the system under an account with local administrator privileges.

2. Insert the CP-145 Gateway CD if it was removed following the Fortezza

Card Reader Driver installation and double click on DCL MTA

3.0\dcdsrvr\setup.exe. The Welcome window is displayed.

3. Select the Next button in the Welcome window. The CD Key window

is displayed.

4. Enter the CD Key as 013-9704-97251 and then select the Next button

on the CD Key window. The Select Components window is displayed.

5. Confirm all component check boxes are selected. Select any that is not

checked.

6. Select Browse to display the Choose Folder window. Enter the Path as

D:\dcdsrvr (where D: represents the drive letter for the largest drive

available on the system) and select OK.

7. If prompted to create this folder, select Yes on the Setup window. The

Select Components window is displayed.

8. Select Next and the Enter Admin Node window is displayed.

9. Select Normal if not selected and enter a country value of U.S. Leave

the remaining fields blank. Select Next to display the Specify Server

Name window.

10. If the Server Name value is not correct, enter the correct value as seen

in the site’s Detail Design document. Enter a Port Number of 104

(Note: be sure to change this from the default value of 102).

11. Select Next to display the Enter Organization Name window.

12. Enter the site’s organization name and select Next. The Enter

Password window is displayed.

13. Enter the password of the logged on user in the Enter Password

window and select Next. The Select Program Folder window is

displayed.

14. Select Next on the Select Program Folder window. The Customize

DC Directory Server Configuration? Window.

15. Make sure the Customization option is NOT checked and select Next

on the Customize DC Directory Server Configuration? Window and

the Enter Password window is displayed.

Autres manuels pour CP-145

Table des matières

Autres manuels CommPower Porte

CommPower

CommPower CP-145 Manuel utilisateur

Manuels Porte populaires d'autres marques

LST

LST M500RFE-AS Manuel utilisateur

Kinnex

Kinnex Media Gateway Manuel utilisateur

2N Telekomunikace

2N Telekomunikace 2N StarGate Manuel utilisateur

Mitsubishi Heavy Industries

Mitsubishi Heavy Industries Superlink SC-WBGW256 Manuel utilisateur

ZyXEL Communications

ZyXEL Communications ZYWALL2 ET 2WE Manuel utilisateur

Telsey

Telsey CPVA 500 - SIP Manuel utilisateur

RTA

RTA 460A-NNA4 Fiche technique

Shaw

Shaw Gateway HDPVR Manuel utilisateur

ABB

ABB VSN900 Guide de démarrage rapide

Commander

Commander Pulse Manuel utilisateur

2N Telekomunikace

2N Telekomunikace ATEUS EasyGate 501309E Manuel utilisateur

NETGEAR

NETGEAR C6300BD Manuel utilisateur

Amit

Amit CDW531AM Manuel utilisateur

HMS

HMS Netbiter EasyConnect EC150 Manuel utilisateur

Huawei

Huawei EchoLife HG620 Manuel utilisateur

AT&T

AT&T U-verse 3801 Manuel d'utilisation et d'entretien

Logic IO

Logic IO RTCU MX2 turbo Manuel utilisateur

Suttle

Suttle MediaMAX MXM-521 Manuel utilisateur