SCP / EP 128 Bit AES Encryption
Overview
This document outlines the steps needed to configure a system controller (SCP/EP/2g) panel for 128 bit AES encryption. The purpose of encryption is to encode the TCP network traffic between the Access It! Universal service (AIUniSvc.exe) and the system controller panel. To ensure a secure connection, it is recommended the IP programmer steps are completed with a laptop and a crossover cable.
This operation should only be performed if you have a secure link to the system controller.
Access It! Universal Setup 1 of 2
- From the file menu, click Go | Main | Hardware
- Select Channels from the left hand menu
- Edit the Channel of the system controller requiring encryption
- Uncheck Channel Enabled
- Click Save
- Select SCPs from the left hand menu
- Edit the system controller requiring encryption
- Select the Comm tab
- Select Default Master Key 1 or 2
- Click Save
IP Programmer Setup
- Open the IP Programmer (Start | Programs | Access It! Universal | Utilities)
- Enter the IP address of the system controller requiring encryption
- Set Model accordingly
If using an EP system controller, set model to SCP-E. - Click Attach to SCP
- Minimize the newly opened diagnostics window
- Within the programmer, click Set Encryption Keys
- Click Yes to the warning message
- Click Detach From SCP
- Close the IP programmer
EP
The following steps apply to EP system controller only communicating in IP Server mode.
- Set S1 – Configuration DIP Switch DIP 1 ON
- Open a web browser and browse to the IP address of the system controller
- Click on Click Here to Login
- Click on Continue to this website (not recommended)
- Enter a username of admin
- Enter a password of password
- Click Login
- Select Host Comm from the left hand menu
- Within the Primary Host Port section, set Data Security to Password/AES
- Click Accept
- Click Apply Settings on the left hand menu
- Click Apply Settings, Reboot
The EP controller will reset.
Access It! Universal Setup 2 of 2
- From the file menu, click Go|Main|Hardware
- Select Channels from the left hand menu
- Edit the Channel of the system controller requiring encryption
- Check Channel Enabled
- Click Save
- The system control will come online and begin communicating using 128 bit AES encryption