BISS-2

**BISS-2 KMS encryption is available on MCM9000 from version 5.6.4 onwards.

To configure BISS-2 KMS, follow the steps below.

  1. Navigate to KMS → KMS Configuration on the MCM9000.

  2. Click on the add icon highlighted in red to add a KMS type. Give a name and choose the Type as BISS-2 from the dropdown.

3. Fill in the details appropriately.

Fields

Description

Name

Name of the KMS.

Type

Type of KMS (BISS2).

Private Key (BISS2-CA)

This is an autogenerated configuration by MCM, hence, please keep this field empty.

When creating a new “BISS2-CA KMS”, the MCM generates a public/private key pair. The public key should be copied and sent to the sender. (The private key is not visible on the GUI/API - can not be read. it is exported to the XML - but encrypted. This keeps it over a software upgrade)

On the channel config, it should be detected during the scan as “BISS-2” and the relevant KMS should be configured to the channel.

Public Key (BISS2-CA)

This is an autogenerated configuration by MCM, hence, please keep this field empty.

When creating a new “BISS2-CA KMS”, the MCM generates a public/private key pair. The public key should be copied and sent to the sender. 

Session Key (BISS2-E)

BISS-2-E:

When creating a new “BISS KMS” - paste the static SK (session key) - 32 char long hex value.

BISS-2-1:

Paste the 16 char constant key to the channel configuration key field.

 

Click on Submit once you fill in all the fields.

 

4. Scan a MPEGTS channel. Please refer to for detailed description on Scanning sources.

5. Navigate to Sources → Configuration and edit the channel to set the KMS type to BISS-2.

Click on Submit to save the configuration.