J-1_Sec_J_Attachment_1__DD-254_Draft.pdf

Please wait...

If this message is not eventually replaced by the proper contents of the document, your PDF viewer may not be able to display this type of document.

You can upgrade to the latest version of Adobe Reader for Windows®, Mac, or Linux® by visiting http://www.adobe.com/go/reader_download.

For more assistance with Adobe Reader visit http://www.adobe.com/go/acrreader.

Windows is either a registered trademark or a trademark of Microsoft Corporation in the United States and/or other countries. Mac is a trademark of Apple Inc., registered in the United States and other countries. Linux is the registered trademark of Linus Torvalds in the U.S. and other countries.

EKMS-1E

ORIGINAL

ELECTRONIC KEY MANAGEMENT SYSTEM

(EKMS) POLICY AND PROCEDURES FOR

NAVY TIERS 2 & 3

07 Jun 2017 i

Ser N5/

07 Jun 2017

Article I. LETTER OF PROMULGATION

1. PURPOSE. EKMS-1E prescribes the minimum policies for issuing, accounting, handling, safeguarding, and disposing of

COMSEC (Communications Security) material. This document is not designed to be read from cover-to-cover. It is meant as a ready-reference for supervisors and managers involved in the management, use and accounting of COMSEC material.

2. BACKGROUND. The Electronic Key Management System (EKMS) which operates through the use of a Local Management Device/Key

Processor (LMD/KP) provides the capability for the automated generation, accounting, distribution, destruction, and management of electronic keys, as well as management of physical key and non-key COMSEC related items. The goal of this policy is to balance timely COMSEC support to a global user community while enhancing security and minimizing costs.

3. APPLICABILITY.

a. EKMS-1E applies to COMSEC materials held by U.S. Navy, U.S. Marine Corps, U.S. Coast Guard, and Military Sealift

Command EKMS-numbered accounts. These provisions apply to all who require access to or the use of COMSEC material. All such personnel must be aware that non-compliance or deviation from the prescribed policies and procedures can jeopardize the security of the United States and could result in prosecution of the parties concerned under the espionage laws, Title 18.

U.S.C., Sections 793, 794, and 798.

b. The policies governing the handling, safeguarding, and use of Two Person Control Sealed Authentication System (TPC SAS) material are not in this manual but can be found in CJCSI

3260.01(series), a required directive for all commands with TPC

SAS material holdings. See Article721 for contact information to obtain a copy of the document, if required. Requests for disposition of SAS/TPC material must be addressed to the

Controlling Authority per CJCSI 3260.01 (series), info the COR.

The COR is not authorized to provide disposition instructions for this material.

4. SCOPE. The policies in this manual have been derived from ii those set forth in NSA, OPNAV, SECNAV and other National and

Navy COMSEC policy manuals. This guidance supplements but in no way alters or amends the provisions of SECNAV M5510.30 (series), SECNAV M5510.36 (series) or U.S. Navy regulations.

5. ACTION. EKMS-1E is effective upon receipt and supersedes

EKMS-1B (April 2010).

6. REPRODUCTION. EKMS-1E is authorized for reproduction, distribution and use in any operational environment and is available via the the INFOSEC website located at:

https://infosec.navy.mil

7. COMMENTS. Submit comments, recommendations, and suggestions for changes to Naval Communications Security Material System

(NCMS).

/s/

D. V. WILSON

mailto:NAFW_NCMS_N5@navy.mil?subject=EKMS-1%20(series)%20FEEDBACK

Original iii

RECORD OF AMENDMENTS

AMEND NUMBER/

IDENTIFICATION

DATE ENTERED

(YYMMDD)

ENTERED BY (Signature, Rank/Rate, Command Title)

Original iv

RECORD OF PAGE CHECKS

DATE

CHECKED

CHECKED BY (SIGNATURE,

RANK/RATE, COMMAND TITLE)

DATE

CHECKED

CHECKED BY (SIGNATURE,

RANK/RATE, COMMAND TITLE)

07Jun2017 Phillips, M. J. GG-13, NCMS v

“SNAPSHOT” of EKMS-1E

ELECTRONIC KEY MANAGEMENT SYSTEM (EKMS) POLICY & PROCEDURES MANUAL

i Letter of Promulgation iii Record of Amendments iv Record of Page Checks v SNAPSHOT of EKMS-1E vii Table of Contents

Chapter 1 - Communications Security Material Control System

(CMCS)

Chapter 2 - Introduction to COMSEC Material

Chapter 3 - CMS Education, Training and Audits

Chapter 4 - Establishment and Maintenance of a COMSEC Account and Associated Responsibilities

Chapter 5 - Safeguarding COMSEC Material and Facilities

Chapter 6 - Maintaining COMSEC Material Allowance

Chapter 7 - Control and Documentation Requirements for COMSEC

Material

Chapter 8 - Disestablishment of a COMSEC Account

Chapter 9 - COMSEC Incident Reporting

Chapter 10 - Practices Dangerous to Security

Chapter 11 - Management of Electronic Key

ANNEXES

A - Glossary

B - Commonly Used Abbreviations and Acronyms

C - Controlling Authorities for COMSEC Material

D - COMSEC Account Establishment Request

E - CMS Form 1

F - COMSEC Account Manager or LE (Issuing) Appointment

Letter/Memorandum

G - Sample Letter/Memorandum of Agreement

H - Emergency Protection of COMSEC Material

I - Construction Specifications for Storage Vaults

J - Construction Specifications for Fixed COMSEC Facilities

K - “Special” Physical Security Safeguards for DOD Black-Bulk

Facilities

L - COMSEC Points of Contact Listing

M - Retention Periods for COMSEC Files, Records, and Logs

N - Completing Locally-Prepared SF-153 COMSEC Material

Accounting Reports

O - Reporting Page Check Discrepancies in COMSEC

Material/Related Devices and CCI

P - Minimum Page Check Requirements for COMSEC Material

Q - EKMS Suite vi

R - Assuming the Duties of COMSEC Account Manager

S - Checklist for Secure Telemetry Missile Firings

T - Secure Terminal Equipment (STE)/Associated KSV-21 CARD/

Iridium Secure Module (ISM)

U - Management of Modern Key

V - LCMS System Failure and Recovery Procedures

W - COMSEC Management Workstation (CMWS)/Data Management

Device Power Station (DMD/PS)

X - Inventory Reconciliation (Processes and Procedures) vii

TABLE OF CONTENTS

CHAPTER 1 -- COMMUNICATIONS SECURITY (COMSEC) MATERIAL_CONTROL

SYSTEM (CMCS)

101. INTRODUCTION TO THE COMSEC MATERIAL CONTROL SYSTEM

(CMCS).................................................1-3

105. INTRODUCTION TO THE ELECTRONIC KEY MANAGEMENT SYSTEM

(EKMS).................................................1-3

a. TIER 0

b. TIER 1, the Common Tier 1 (CT1), and Primary Tier 1

Segment (PT1S)

c. TIER 2

d. TIER 3

110. NATIONAL SECURITY AGENCY (NSA).........................1-4

115. ELECTRONIC KEY MANAGEMENT SYSTEM (EKMS) CENTRAL

FACILITY (CF)..........................................1-4

120. DEPARTMENT OF THE NAVY (DON)...........................1-5

a. Chief of Naval Operations (CNO)

b. Headquarters Marine Corps (C4 CY)

c. Commander, Coast Guard C4IT Service Center (COGARD

C4ITSC)

d. Naval Communications Security Material System (NCMS)

e. COMSEC Material Issuing Office (CMIO)

f. United States National Distribution Authority (USNDA)

125. CONTROLLING AUTHORITY (CONAUTH)........................1-8

126. SERVICE AUTHORITY......................................1-8

130. IMMEDIATE SUPERIOR IN COMMAND (ISIC)...................1-8

135. STAFF CMS RESPONSIBILITY OFFICER (SCMSRO)..............1-9

140. COMMANDING OFFICER (CO)................................1-9

145. COMSEC ACCOUNT.........................................1-9

150. LCMS SYSTEM ADMINISTRATOR..............................1-9

viii

155. COMSEC ACCOUNT MANAGER.................................1-9

160. ALTERNATE MANAGER......................................1-10

165. LOCAL ELEMENT (LE).....................................1-10

166. LOCAL ELEMENT (LE) IN-TRANSIT..........................1-11

167. LMD-ONLY ACCOUNT.......................................1-11

170. COMSEC CLERK...........................................1-12

175. COMSEC WITNESS.........................................1-12

180. KEY MANAGEMENT ENTITIES (KME)..........................1-12

182. PRIVILEGE CERTIFICATE MANAGER (PCM)....................1-12

183. FIREFLY POINT OF CONTACT...............................1-12

184. COMMAND AUTHORITY (CMDAUTH)............................1-12

186. USER REPRESENTATIVE (UR)...............................1-13

188. ORDERING PRIVILEGE MANAGER (OPM).......................1-13

190. SHORT TITLE ASSIGNMENT REQUESTOR (STAR)................1-13

192. AUTHORIZED ID..........................................1-13

194. FIREFLY CREDENTIALS MANAGER............................1-13

CHAPTER 2 -- INTRODUCTION TO COMSEC MATERIAL

201. GENERAL................................................2-3

205. APPLICATION OF PROCEDURES..............................2-3

210. LIMITATIONS............................................2-3

215. CONTROL AND REPORTING..................................2-3

220. COMSEC MATERIAL CLASSIFICATION.........................2-4

225. COMSEC MATERIAL IDENTIFICATION.........................2-4

a. Short Title ix

b. Accounting (serial/register) Number

230. ACCOUNTABILITY LEGEND (AL) CODES.......................2-5

235. ID AND AL CODE ASSIGNMENTS FOR ELECTRONIC KEYS

CONVERTED FROM PHYSICAL KEYS...........................2-6

236. CRYPTO MARKING/DESIGNATION.............................2-6

237. ID AND AL CODE ASSIGNMENTS FOR REMOVABLE

MEDIA STORING ELECTRONIC KEYS..........................2-6

238. SYSTEM KEYS FOR LCMS...................................2-7

a. EKMS Message Keys

b. KP Internal Keys

c. User Keys

d. KG Rules

240. CONTROLLED CRYPTOGRAPHIC ITEM (CCI)....................2-9

245. STATUS OF COMSEC MATERIAL..............................2-9

250. COMSEC MATERIAL SUPERSESSION...........................2-10

a. Regular

b. Irregular

c. Emergency

255. SOURCES OF SUPERSESSION INFORMATION....................2-10

a. Status of COMSEC Material Report (SCMR)

b. AMSG-600

c. Joint COMSEC Management Office Mac Dill AFB, FL

d. CJCSI 3260.01(series)

e. General Message from CONAUTH

f. Commander, Coast Guard TISCOM (TIS-332) Controlled

Joint Inter-Agency Counternarcotic/Counterdrug (CN/CD)

COMSEC Keying Material Package Monthly Status Message

g. COMSEC Publications and Manuals

h. AL Code 6 and 7 COMSEC Material

260. CATEGORIES OF COMSEC MATERIAL..........................2-13

a. Keying Material

b. COMSEC Equipment

c. COMSEC Aids (otherwise known as COMSEC-Related x

Information)

FIGURES: 2-1 DIGRAPH CODES ASSIGNED TO U.S. PRODUCED

KEY..........................................2-16

2-2 DIGRAPH CODES ASSIGNED TO BRITISH

PRODUCED KEY.................................2-17

CHAPTER 3 -- CMS EDUCATION, TRAINING, AND AUDITS

301. GENERAL................................................3-2

305. FORMAL TRAINING........................................3-2

a. General

b. Locations

c. Quotas

d. School House Addresses/Telephone Numbers

e. Criteria for Attending

312. PERSONNEL QUALIFICATION STANDARDS (PQS)................3-6

a. Requirements

315. PRE-AUDIT TRAINING VISITS AND COR AUDITS...............3-7

a. Pre-Audit Training Visits

b. COR Audits

320. COR AUDIT TEAMS........................................3-7

325. COR AUDIT TEAM SERVICES................................3-8

b. Request for Service

c. Types of Services

330. AREAS OF RESPONSIBILITY FOR COR AUDIT TEAMS............3-10

a. Atlantic Region

b. Pacific Region

c. European Region

CHAPTER 4 – ESTABLISHMENT AND MAINTENANCE OF AN EKMS ACCOUNT AND

RESPONSIBILITIES

401. REQUIREMENT FOR A COMSEC ACCOUNT.......................4-3

xi

405. ESTABLISHING AN COMSEC ACCOUNT.........................4-3

a. Preparation

b. Validation of Authorized Holdings

c. Lead Time to Establish

d. Request to Establish

e. Identification of Required Material

f. NCMS Action

g. Steps Required to Establish a COMSEC Account

h. Actions Required to Ensure Receipt of COMSEC

410. SELECTION OF EKMS PERSONNEL............................4-7

412. DESIGNATION REQUIREMENTS FOR ACCOUNT MANAGERS AND

ALTERNATE(S)...........................................4-8

a. Minimum Personnel

b. Grade and Length of Service Requirements (Managers)

c. Grade and Length of Service Requirements (Alternate

Managers)

d. Security and Access Requirements

e. Length of Appointment

f. Training Requirements for COMSEC Account Managers and

Alternates

414. DESIGNATION REQUIREMENTS FOR LOCAL ELEMENT (LE) ISSUING

AND CLERKS.............................................4-11

a. Minimum Personnel

b. Grade and Length of Service Requirements for LE

Issuing

c. Security and Access Requirements

416. DESIGNATION REQUIREMENTS FOR LOCAL ELEMENT (USING) AND

COMSEC WITNESSES ................................... ..4-12

a. General Requirements

b. Additional Training Requirements

418. APPOINTMENT LETTER/MEMORANDUM..........................4-13

420. WAIVERS................................................4-13

422. MANAGEMENT OF MORE THAN ONE ACCOUNT BY AN MANAGER AND

ALTERNATE(S)...........................................4-14

xii

423. TEMPORARY ASSUMPTION OF DUTIES AS AN COMSEC ACCOUNT

MANAGER................................................4-14

425. GRANTING OF TEMPORARY ACCESS ..........................4-15

430. HIGHEST CLASSIFICATION INDICATOR (HCI).................4-15

435. CHANGE OF COMMAND TITLE/ADDRESS/CLAIMANCY SHIFT........4-16

440. COMSEC RESPONSIBILITIES................................4-16

a. Immediate Superior in Command (ISIC)

b. Staff CMS Responsibility Officer (SCMSRO)

c. Chain of Command

d. COMSEC Account Manager

e. Alternate Manager(s)

f. Local Element (LE)

g. COMSEC Clerk

h. COMSEC Witness

445. LETTER OF AGREEMENT (LOA)..............................4-18

450. RESPONSIBILITIES AND DUTIES: COMMANDING OFFICER.......4-18

455. RESPONSIBILITIES AND DUTIES: COMSEC ACCOUNT MANAGER...4-21

460. RESPONSIBILITIES AND DUTIES: ALTERNATE MANAGER .......4-24

465. RESPONSIBILITIES AND DUTIES: LOCAL ELEMENT (LE).......4-25

470. RESPONSIBILITIES AND DUTIES: COMSEC CLERK.............4-26

480. RESPONSIBILITIES AND DUTIES: COMSEC WITNESS...........4-27

CHAPTER 5 -- SAFEGUARDING COMSEC MATERIAL AND FACILITIES

501. GENERAL................................................5-6

505. ACCESS AND RELEASE REQUIREMENTS FOR COMSEC MATERIAL....5-6

a. Security Clearance

b. Requirement for Access or Need-to-Know

c. Briefing/Indoctrination

d. Written Access to COMSEC Keying Material

e. Personnel Access

f. Contractor Personnel

g. Release of COMSEC Material to a Contractor Account

h. Access to COMSEC Equipment (less CCI) xiii

i. Displaying, Viewing, and Publicly Releasing COMSEC

Material and Information

j. Release of COMSEC Material to a Foreign Government

k. Ship Rider Procedures

510. TWO PERSON INTEGRITY (TPI) REQUIREMENTS................5-12

a. Definition

b. Material Requiring TPI at the Account Manager Level

c. TPI Handling and Storage Requirements at the COMSEC

Account Manager Level

d. TPI Handling and Storage at the Local Element Level

e. TPI for Keyed COMSEC Equipment

f. TPI Exceptions

g. Requirement to Report TPI Violations

515. ACCESS TO AND PROTECTION OF SAFE COMBINATIONS,

KP PINS, AND LCMS (SCO) PASSWORDS......................5-17

a. Selection of Combinations

b. Requirements for Changing a Combination

c. Access and Knowledge of Combinations

d. Classification of Combinations

e. Records of Combinations

f. Sealing/Wrapping Combinations, KP Pins, and LCMS (SCO)

Passwords

g. Emergency Access to Containers and Combinations

h. Personal Retention of Combinations

i. Unauthorized Adjustment of Preconfigured Default

Password Parameters on LMD (LCMS SCO Password

Lockout and/or Reset) A Reportable PDS

520. STORAGE REQUIREMENTS...................................5-21

b. Required Forms for Storage Containers

c. Storage of Classified COMSEC Keying Material Marked or Designated CRYPTO

d. TPI Storage Containers

e. Restrictions on Use of Modified GSA Approved Security

Containers and Vault Doors

f. Locking Devices

g. Storage and Protection of COMSEC Equipment

h. Storage of Fill Devices (FDs)

i. Storage of Other COMSEC Material

525. PREPARING COMSEC MATERIAL FOR SHIPMENT.................5-29

xiv

a. Packaging Materials/Shipment Containers

b. Wrapping Requirements

c. Wrapper Marking Requirements

d. Packaging and Shipping Restrictions

530. TRANSPORTING COMSEC MATERIAL...........................5-32

b. COMSEC Equipment (less CCI)

c. Other COMSEC Material

d. Use of Commercial Aircraft

e. Use of Private Conveyances

f. Courier Responsibilities

g. Restrictions on DCS Shipments

h. Airdrop of COMSEC Material

i. Over-the-Air-Rekey (OTAR), Over-the-Air-Distribution

(OTAD) and Over-the-Air-Transfer (OTAT)

535. CONTROLLED CRYPTOGRAPHIC ITEM (CCI)....................5-42

b. Accountability

c. General Access Requirements

d. Access Requirements for Resident Aliens

e. Access Requirements for Foreign Nationals

f. Keying CCI

g. Classification of CCI When Keyed

h. Installing CCI in a Foreign Country

i. Moving CCI to a Sensitive Environment

j. Transporting Keyed/Unkeyed CCI

k. Methods of Shipping CCI

l. Requirements and Restrictions for Transporting CCI on

Commercial Aircraft

m. Storage of CCI

n. Packaging CCI

o. Notification to Intended Recipient

p. Shipments not Received

q. Reportable Incidents

540. GENERAL ROUTINE DESTRUCTION GUIDANCE...................5-50

b. Categories of COMSEC Material

c. Destruction Personnel

d. Conditions Affecting Keying Material Destruction

e. Routine Destruction of Regularly and Irregularly

Superseded Keying Material xv

f. Emergency Supersession of Keying Material

g. Destruction of Maintenance Manuals, Operating

Instructions, and General Doctrinal Publications

h. Destruction of COMSEC Equipment

i. Reporting Destruction

j. Routine Destruction Methods

545. COMSEC FACILITIES......................................5-63

a. Introduction

b. Types of COMSEC Facilities

c. Construction Requirements

550. SAFEGUARDING FIXED COMSEC FACILITIES...................5-64

a. Location

b. Construction Requirements

c. Installation Criteria

d. Facility Approvals, Inspections, and Tests

e. Access Restrictions and Controls

f. Storage of COMSEC Material

g. Protection of Unattended COMSEC Equipment

h. Protection of Lock Combinations

i. Standard Operating Procedures (SOPs)

j. Nonessential Audio/Visual Equipment

555. SAFEGUARDING UNATTENDED FIXED SECURE

TELECOMMUNICATIONS FACILITIES ..........................5-70

a. Location

b. Construction Requirements

c. Installation Criteria

d. Facility Approvals, Inspections, and Tests

e. Access Restrictions and Controls

f. Storage and Protection of COMSEC Material

g. Protection of Lock Combinations

h. Firearms

i. Standard Operating Procedures (SOPs)

j. Nonessential Audio/Visual Equipment

k. Additional Security Requirements

560. SAFEGUARDING CONTINGENCY FIXED SECURE

TELECOMMUNICATIONS FACILITIES..........................5-72

b. Location xvi

d. Installation Criteria

e. Facility Approvals, Inspections, and Tests

f. Access Restrictions and Controls

g. Storage of COMSEC Material

h. Protection of COMSEC Equipment

i. Protection of Lock Combinations

j. Firearms

k. Standard Operating Procedures (SOPs)

l. Nonessential Audio/Visual Equipment

m. Additional Security Requirements

565. SAFEGUARDING FIXED SECURE SUBSCRIBER

TELECOMMUNICATIONS FACILITIES..........................5-73

d. Access Restrictions and Controls

e. Storage of COMSEC Material

f. Protection of Unattended COMSEC Equipment

570. SAFEGUARDING TRANSPORTABLE AND MOBILE COMSEC

FACILITIES.............................................5-75

d. Installation Criteria

e. Facility Approval, Inspections, and Tests

f. Access Restrictions

g. Storage of COMSEC Material

h. Protection of Unattended Facilities

i. Protection of Lock Combinations

j. Firearms

k. Standard Operating Procedures (SOPs)

575. SAFEGUARDING DOD BLACK BULK FACILITIES.................5-77

b. Definitions

c. Safeguarding Criteria

d. General Requirements

e. Special Requirements

FIGURES: 5-1 COMSEC MATERIAL SHIPPING METHODS QUICK REFERENCE

............................................5-33 xvii

5-2 COMSEC MATERIAL DESTRUCTION QUICK REFERENCE..5-60

CHAPTER 6 -- MAINTAINING COMSEC MATERIAL ALLOWANCE

601. GENERAL................................................6-3

602. COMMON ACCOUNT DATA (CAD)..............................6-3

605. COMSEC EQUIPMENT, RELATED DEVICES, EQUIPMENT

MANUALS, AND OPERATING INSTRUCTIONS ALLOWANCE..........6-4

a. Navy, Coast Guard, and MSC Commands

b. USMC Commands

610. VALIDATION OF CRYPTOGRAPHIC EQUIPMENT AND RELATED

DEVICES................................................6-6

615. COMSEC KEYING MATERIAL RESERVE-ON-BOARD (ROB)..........6-8

620. MAINTAINING ROB LEVEL OF KEYING MATERIAL...............6-8

625. MODIFYING ROB LEVEL OF KEYING MATERIAL.................6-9

630. DEFENSE COURIER SERVICE (DCS)..........................6-11

635. DCS ADDRESS CHANGE.....................................6-12

640. OVER-THE-COUNTER (OTC) PICKUP FROM CMIO AND THE UNITED

STATES NATIONAL DISTRIBUTION AUTHORITY(USNDA)..........6-12

645. TERMINATION & RESUMPTION OF AUTOMATIC DISTRIBUTION OF

COMSEC MATERIAL........................................6-13

650. ROUTINE MODIFICATION OF AN ACCOUNT ALLOWANCE FOR

COMSEC KEYING MATERIAL.................................6-18

655. ROUTINE MODIFICATION OF AN ALLOWANCE FOR COMSEC

EQUIPMENT, RELATED DEVICES, EQUIPMENT MANUALS, AND

OPERATING INSTRUCTIONS.................................6-21

660. FORMAT FOR ROUTINE MODIFICATION OF A COMSEC ALLOWANCE..6-25

665. FORMAT FOR REQUESTING STANDARD DEPLOYMENT ALLOWANCE 6-26

670. REQUESTING A FIREFLY VECTOR SET OR MESSAGE SIGNATURE

KEY (MSK)..............................................6-26

xviii

675 FORMAT AND ADDRESSEES FOR REQUESTING NEW KEYING

MATERIAL...............................................6-28

680. EMERGENCY MODIFICATION OF AN AUTHORIZED ALLOWANCE......6-31

685. PERMANENT TRANSFER OF AFLOAT COMMANDS TO A NEW

OPERATING AREA (OPAREA)................................6-32

CHAPTER 7 -- CONTROL AND DOCUMENTATION REQUIREMENTS FOR

COMSEC MATERIAL

701. GENERAL................................................7-7

703. REQUIRED COMSEC FILES..................................7-7

a. Chronological File

b. Correspondence/Message and Directives File

c. Message File

d. Local Custody File

706. COMSEC CHRONOLOGICAL FILE..............................7-7

709. COMSEC CORRESPONDENCE/MESSAGE, AND DIRECTIVES FILES....7-9

a. Correspondence Message/File

b. Message File

c. Directives File

712. LOCAL CUSTODY FILE.....................................7-10

a. Requirement

b. Control

c. Completeness

d. Signature Requirements

715. HANDLING, STORAGE, RETENTION, AND CLASSIFICATION OF

COMSEC FILES, RECORDS, AND LOGS........................7-11

a. Handling and Storage

b. Retention Periods

c. Inactive Records

d. Classification Guidance

718. USE OF FORMS AND MAGNETIC MEDIA........................7-12

a. Locally Prepared

b. Computer-Generated xix

c. Back-up Media

d. LCMS Back-up Requirement

721. COMSEC LIBRARY.........................................7-14

724. TRANSACTION STATUS LOG.................................7-15

727. COMSEC MATERIAL ACCOUNTING REPORTS.....................7-16

730. GUIDANCE FOR SUBMITTING REPORTS TO THE COR.............7-18

733. TRANSFER INITIATING REPORT.............................7-18

a. Defined

b. Transfer Authorization

c. Material Transferred Electronically Between DON

Accounts

d. Physical Transfer of Material Between DON Accounts

e. Reconciling the Account

f. Documentation Requirements

g. Reporting Requirements

h. Inter-Service Transfer of CCI

736. DESTRUCTION REPORT.....................................7-22

b. Destruction Documentation and Reporting Requirements

739. POSSESSION REPORT......................................7-24

740. GENERATION REPORT......................................7-25

a. Reportable Generation Report

b. Local (Non-Reportable) Generation Report

741. CANCELLATION REPORT....................................7-27

742. RECEIPT REPORT.........................................7-27

a. Reporting Criteria

b. Reporting Receipt of ALC-4 and ALC-7

c. Reporting Receipt of CCI from Army or Air Force

Accounts

d. Reporting Receipt of Physical Material from 87XXXX

(Contractor Accounts)

e. Timeframe for Reporting Receipt

f. Discrepancies xx

g. Bad Bulk Encrypted Transaction (BET) Procedures

743. TRACER ACTIONS FOR OVERDUE RECEIPTS....................7-30

744. RECONCILIATION.........................................7-32

745. RELIEF FROM ACCOUNTABILITY REPORT......................7-32

748. CONVERSION REPORT......................................7-32

751. RECEIVING AND OPENING COMSEC MATERIAL SHIPMENTS........7-33

b. USTRANSCOM Form 10

c. CMS Form 1

d. Summary of Processing Steps Upon Opening COMSEC

e. Who May Open COMSEC Material Shipments

754. REQUIRED ACTIONS UPON RECEIPT OF COMSEC MATERIAL.......7-34

a. STEP I: Inspect Packages for Tampering

b. STEP II: Inventory the Contents

c. STEP III: Contents Discrepancy

d. STEP IV: No SF-153 Enclosed, Originator Known

e. STEP V: No SF-153 Enclosed, Originator Not Known

f. STEP VI: Complete and Forward the SF-153 Transfer

Report and Report Receipt

755. LCMS ACCOUNT RECONCILIATION FOR MATERIAL RECEIVED......7-36

a. Reconcile Physical Material Electronic Report

b. Reconcile Physical Material Hard Copy Report

c. Reconcile Electronic Package

757. CONDUCTING PAGE CHECKS AND VERIFYING COMPLETENESS OF

COMSEC MATERIAL........................................7-37

a. Purpose of Page checks

b. Verify Before Installation/Use

c. Establish Internal Procedures

d. Certify Completed Page checks

e. Page check Requirements

f. Procedures

g. Verify Mandatory Modifications

h. Report Page check or Other Discrepancies xxi

758. CONDUCTING PAGE CHECKS AND VERIFYING COMPLETENESS

OF COMSEC EQUIPMENT/HOST DEVICES HAVING EMBEDDED

CRYPTO OR CCI COMPONENTS...............................7-39

760. APPLYING STATUS INFORMATION TO COMSEC MATERIAL.........7-39

763. ACCOUNTABLE ITEMS (A/I) SUMMARY .......................7-41

766. COMSEC INVENTORIES.....................................7-42

a. Inventory Requirements

b. Types of Inventories

c. Miscellaneous Inventory Policy

d. Documenting an Inventory

e. Conducting an Inventory

f. SAIR Tier 1 Inventory Process

g. IRST Accuracy

767. INVENTORY BEST PRACTICE/LESSONS LEARNED................7-56

768. IRST RECONCILIATION RESPONSIBILITIES...................7-58

769. ISSUING COMSEC MATERIAL................................7-60

a. Responsibility

b. Local Custody Defined

c. Local Custody Issue (LCI) Forms

d. Local Custody File

e. Time Periods for Issuing COMSEC Material

f. Issue of COMSEC Keying Material in Hard Copy Form to Mobile Users(including CNECC forces)

g. Issue of Keying Material in Electronic Form to Local

Elements

h. Issue and Receipt of Electronic Key in a Fill Device

i. Issue and Receipt of Key Stored on Removable Media

j. Local Custody Issue (LCI) Limitations

770. ISSUANCE, TRACKING AND CONTROL OF KGV-68Bs.............7-71

772. SEALING COMSEC MATERIAL................................7-72

775. COMSEC MATERIAL MANAGEMENT IN A WATCH STATION

ENVIRONMENT............................................7-75

a. Watch Station Defined

b. Custody

c. Responsibility xxii

d. Inventory Requirements

e. Page check Requirements

f. Discrepancies

g. Status Information

h. Destruction

778. COMSEC MATERIAL MANAGEMENT IN OTHER THAN A WATCH

STATION ENVIRONMENT....................................7-78

b. Custody

c. Inventory Requirements

d. Page check Requirements

e. Destruction

781. REPRODUCING COMSEC PUBLICATIONS AND KEYING MATERIAL....7-80

b. Authority to Reproduce – Role of CO and CONAUTH

c. Restrictions on Reproducing CACs

d. Preparation of Reproduced Copies

e. Control of Reproduced Copies

f. Accountability of Reproduced Copies

g. Classification of Reproduced Copies

h. Handling of Reproduced Copies

i. Procedures to Enter Reproduced CACs, COMSEC publications, and Key lists into CMCS

j. Assignment of Short Titles and Accounting Data

k. Listing Reproduced Copies on Accounting Documents

l. Local Custody Requirements for Reproduced Copies

m. Transfer of Reproduced Copies

784. PREPARING EXTRACTS FROM COMSEC PUBLICATIONS AND

KEYING MATERIAL........................................7-84

b. Authority to Prepare Extracts

c. Controlling Classified Extracts

d. Classification of Extracts

e. Disassembling COMSEC Publications

f. Local Custody Requirements

g. Return of Defective Extracts to NSA

h. Destroying and Documenting Destruction of Extracts

787. ENTERING AMENDMENTS AND CORRECTIONS TO COMSEC

PUBLICATIONS...........................................7-87

xxiii

b. Types of Amendments

c. Numbering of Amendments and Corrections

d. COMSEC Account Manager Actions

e. Supply of Amendments

f. Local Custody

g. Entering Amendments

h. Destruction of Amendment Residue

i. Recording Destruction of Amendment Residue

790. PROCEDURES FOR DESTROYING COMSEC MATERIAL IN PAPER

FORM...................................................7-91

b. Verifying Status Information

c. Verifying Short Title and Accounting Data

d. Timeliness of Destruction

e. Security Safeguards

f. Witnessing Destruction

g. Inspecting Destruction Devices and Destroyed Material

792. DESTRUCTION OF COMSEC MATERIAL IN ELECTRONIC FORM..... 7-95

793. U. S. ARMY AND AIR FORCE COMSEC ACCOUNTS...............7-96

FIGURES: 7-1 CMS 25 COMSEC KEYING MATERIAL LOCAL

DESTRUCTION REPORT...........................7-97

7-2 CMS 25B COMSEC KEYING MATERIAL LOCAL

DESTRUCTION REPORT...........................7-100

7-3 CMS 25MC COMSEC KEYING MATERIAL LOCAL

DESTRUCTION REPORT...........................7-103

7-4 CHECK-OFF LIST FOR ENTERING AMENDMENTS

TO PUBLICATIONS..............................7-105

7-5 EXAMPLE OF CERTIFICATION OF AMENDMENT ENTRY 7-106

CHAPTER 8 -- DISESTABLISHMENT AND COMMAND-TO-COMMAND TRANSFER OF

AN EKMS ACCOUNT

801. REQUIREMENT TO DISESTABLISH A COMSEC ACCOUNT...........8-2

805. INVENTORY REQUIREMENT FOR DISESTABLISHMENT............ 8-2

810. DISESTABLISHMENT PROCESS...............................8-2

xxiv

a. Request to Disestablish

b. NCMS Action

c. COMSEC Account Personnel Action

d. Responsibilities of the ISIC

815. DISPOSITION OF COMSEC MATERIAL.........................8-5

820. MONTHLY DISESTABLISHMENT STATUS MESSAGE................8-6

830. FINAL DISESTABLISHMENT REPORT..........................8-7

840. DISPOSITION OF RECORDS.................................8-7

850. COMMAND-TO-COMMAND TRANSFERS OF COMSEC ACCOUNTS........8-8

860. SUMMARY OF BEST PRACTICES/LESSONS LEARNED..............8-9

CHAPTER 9 -- COMSEC INCIDENT REPORTING

901. INTRODUCTION TO THE NATIONAL COMSEC INCIDENT REPORTING

SYSTEM (NCIRS).........................................9-3

b. Purpose

905. NATIONAL SECURITY AGENCY (NSA).........................9-3

910. NAVAL COMMUNICATIONS SECURITY MATERIAL SYSTEM (NCMS)...9-4

915. CONTROLLING AUTHORITY (CONAUTH)........................9-5

920. DEPARTMENT OF THE NAVY (DON) RESOURCE MANAGERS.........9-5

925. EVALUATING AUTHORITY (EVALAUTH)........................9-6

930. GUIDANCE ON COMSEC INCIDENT REPORTING..................9-6

b. Disciplinary Action

c. Applicability

d. Unclassified COMSEC Material

e. JCS-Positive Control Material

f. NATO Material

g. GPS Receivers

h. Classification and Transmission

i. How to Use Chapter to Report a COMSEC Incident xxv

935. SUBMISSION REQUIREMENTS FOR SF-153 RELIEF FROM

ACCOUNTABILITY AND POSSESSION ACCOUNTING REPORTS.......9-9

a. Relief from Accountability Report

b. Possession Report

940. REPORT SUBMISSION GUIDANCE.............................9-10

945. CATEGORIES AND EXAMPLES OF COMSEC INCIDENTS............9-11

b. Categories of Incidents

c. Examples of Cryptographic Incidents

d. Examples of Personnel Incidents

e. Examples of Physical Incidents

950. TYPES OF COMSEC INCIDENT REPORTS AND SUBMISSION

REQUIREMENTS...........................................9-16

a. Types of Reports

955. EVALUATING AUTHORITIES (EVALAUTHs) AND

RESPONSIBILITIES.......................................9-17

a. Identification of EVALAUTHs

b. EVALAUTH Responsibilities

c. NCMS Responsibilities

960. PRECEDENCE AND TIMEFRAMES FOR SUBMITTING INITIAL

REPORTS................................................9-19

a. Immediate

b. Priority

c. Routine

965. ADDRESSEES FOR COMSEC INCIDENT REPORTS.................9-20

970. FORMAT AND CONTENT OF INITIAL AND AMPLIFYING REPORTS...9-23

b. Subject of Report

c. References

d. Body/Text of Report

975. FINAL LETTER REPORT FORMAT, CONTENT, AND SUBMISSION

REQUIREMENTS...........................................9-32

xxvi

a. Final Letter Report

980. ASSESSING COMPROMISE PROBABILITY.......................9-33

985. REPORTING COMSEC INCIDENTS DURING TACTICAL

DEPLOYMENTS............................................9-34

FIGURES: 9-1. INITIAL AND AMPLIFYING COMSEC INCIDENT

REPORT FORMAT AND CONTENT CHECKLIST.........9-35

9-2. EXAMPLE INITIAL REPORT OF COMSEC INCIDENT...9-37

9-3. EXAMPLE CLOSING ACTION MESSAGE..............9-39

CHAPTER 10 -- PRACTICES DANGEROUS TO SECURITY (PDSs)

1001. GENERAL...............................................10-2

1005. IDENTIFICATION OF PDS.................................10-2

a. Non-reportable

FIGURE: 10-1. SAMPLE NON-REPORTABLE PDS MEMORANDUM.........10-5

b. Reportable........................................10-6

1010. REPORTING AND DOCUMENTATION REQUIREMENTS..............10-6

1015. REPORTING THE LOSS OR FINDING OF UNCLASSIFIED

COMSEC MATERIAL.......................................10-8

CHAPTER 11 -- MANAGEMENT OF ELECTRONIC KEY

1101. OVERVIEW..............................................11-2

1105. RESPONSIBILITES.......................................11-2

1110. SAFEGUARDING REQUIREMENTS.............................11-3

1115. USE AND CERTIFICATION OF KVGS.........................11-3

1120. SECURITY REMINDERS....................................11-3

1125. DISTRIBUTION OF BETS/IETS VIA SIPRNET.................11-3

1130. INVENTORY OF ELECTRONIC KEY ..........................11-4

1135. ACCOUNTABILITY AND DOCUMENTATION REQUIREMENTS.........11-4

1140. KP SPECIFIC ISSUES................................... 11-4

xxvii

ANNEXES

ANNEX A GLOSSARY A1-A30

ANNEX B COMMONLY USED ABBREVIATIONS AND ACRONYMS B1-B10

ANNEX C CONTROLLING AUTHORITIES FOR COMSEC MATERIAL C1-C13

TAB-1 GUIDELINES FOR EXTENDING CRYPTOPERIODS C14-C15

ANNEX D COMSEC ACCOUNT ESTABLISHMENT REQUEST D1-D2

SAMPLE ACCOUNT ESTABLISHMENT MESSAGE D3-D4

ANNEX E CMS FORM 1 E1-E4

ANNEX F COMSEC ACCOUNT MANAGER OR LE (ISSUING) F1

APPOINTMENT LETTER/MEMORANDUM

ANNEX G SAMPLE LETTER /MEMORANDUM OF AGREEMENT G1-G3

ANNEX H EMERGENCY PROTECTION OF COMSEC MATERIAL H1-H13

ANNEX I CONSTRUCTION SPECIFICATIONS FOR STORAGE VAULTS I1-I3

TAB-1 MODULAR VAULT SYSTEMS (MVS) I4-I5

ANNEX J CONSTRUCTION SPECIFICATIONS FOR FIXED COMSEC J1-J4

FACILITIES

ANNEX K “SPECIAL” PHYSICAL SECURITY SAFEGUARDS FOR DOD K1-K4

BLACK-BULK FACILITIES

ANNEX L COMSEC POINTS OF CONTACT LISTING L1-L8

ANNEX M RETENTION PERIODS FOR COMSEC FILES, RECORDS, M1-M4

AND LOGS

ANNEX N COMPLETING LOCALLY-PREPARED SF-153 COMSEC N1-N9

MATERIAL ACCOUNTING REPORTS

ANNEX O REPORTING PAGE CHECK DISCREPANCIES IN COMSEC O1-O4

MATERIAL/RELATED DEVICES AND CCI

ANNEX P MINIMUM PAGE CHECK REQUIREMENTS FOR COMSEC P1

MATERIAL

ANNEX Q EKMS SUITE Q1-Q12

ANNEX R ASSUMING THE DUTIES OF COMSEC ACCOUNT R1-R12

MANAGER

ANNEX S CHECKLIST FOR SECURE TELEMETRY MISSILE S1-S2

FIRINGS

ANNEX T SECURE TERMINAL EQUIPMENT (STE)/ASSOCIATED T1-T24

KSV-21 CARD

TAB-1 IRIDIUM SECURE MODULE (ISM) T25-T32

ANNEX U MANAGEMENT OF MODERN KEY U1-U22

ANNEX V LCMS SYSTEM FAILURE AND RECOVERY PROCEDURES V1-V6

ANNEX W COMSEC MANAGEMENT WORKSTATION (CMWS)/DATA W1-W16

MANAGEMENT DEVICE POWER STATION (DMD/PS)

ANNEX X INVENTORY RECONCILIATION (PROCESSES AND X1-X7

PROCEDURES)

INDEX INDEX-1 – INDEX-19

1-1

CHAPTER 1 - COMMUNICATIONS SECURITY (COMSEC) MATERIAL_CONTROL

(CMCS).................................................1-3

(EKMS).................................................1-3

a. TIER 0

b. TIER 1, the Common Tier 1 (CT1), and Primary Tier 1

Segment (PT1S)

c. TIER 2

d. TIER 3

110. NATIONAL SECURITY AGENCY (NSA).........................1-4

115. ELECTRONIC KEY MANAGEMENT SYSTEM (EKMS) CENTRAL

FACILITY (CF)..........................................1-4

120. DEPARTMENT OF THE NAVY (DON)...........................1-5

a. Chief of Naval Operations (CNO)

b. Headquarters Marine Corps (C4 CY)

c. Commander, Coast Guard C4IT Service Center (COGARD

C4ITSC)

d. Naval Communications Security Material System (NCMS)

e. COMSEC Material Issuing Office (CMIO)

f. United States National Distribution Authority (USNDA)

125. CONTROLLING AUTHORITY (CONAUTH)........................1-8

126. SERVICE AUTHORITY......................................1-8

130. IMMEDIATE SUPERIOR IN COMMAND (ISIC)...................1-8

135. STAFF CMS RESPONSIBILITY OFFICER (SCMSRO)..............1-9

140. COMMANDING OFFICER (CO)................................1-9

145. COMSEC ACCOUNT.........................................1-9

150. LCMS SYSTEM ADMINISTRATOR..............................1-9

155. COMSEC ACCOUNT MANAGER.................................1-9

160. ALTERNATE COMSEC ACCOUNT MANAGER.......................1-10

1-2

165. LOCAL ELEMENT (LE).....................................1-10

166. LOCAL ELEMENT (LE) IN-TRANSIT..........................1-11

167. LMD-ONLY ACCOUNT.......................................1-11

170. COMSEC CLERK...........................................1-12

175. COMSEC WITNESS.........................................1-12

180. KEY MANAGEMENT ENTITIES (KME)..........................1-12

182. PRIVILEGE CERTIFICATE MANAGER (PCM)....................1-12

183. FIREFLY POINT OF CONTACT...............................1-12

184. COMMAND AUTHORITY (CMDAUTH)............................1-12

186. USER REPRESENTATIVE (UR)...............................1-13

188. ORDERING PRIVILEGE MANAGER (OPM).......................1-13

190. SHORT TITLE ASSIGNMENT REQUESTOR (STAR)................1-13

192. AUTHORIZED ID..........................................1-13

194. FIREFLY CREDENTIALS MANAGER............................1-13

1-3

CHAPTER 1 - COMMUNICATIONS SECURITY (COMSEC) MATERIAL CONTROL

(CMCS):

a. Communications Security (COMSEC) material is used to protect U.S. Government and partner classified or sensitive unclassified communications or information from unauthorized persons.

b. The protection of vital and sensitive information moving over government communications systems is crucial to the effective conduct of the government, and specifically, to the planning and execution of military operations. To this end, a system has been established to distribute, control, and safeguard COMSEC material. This system, which consists of production facilities, COMSEC Central Offices of Records (CORs), distribution facilities (i.e., depots), and EKMS accounts, is known collectively as the CMCS.

c. COMSEC material is managed in EKMS/COMSEC accounts throughout the federal government to include military departments and civil agencies supporting the federal government.

(EKMS):

EKMS is an interoperable collection of systems, facilities, and components developed by the services and agencies of the

U.S. Government to automate the planning, ordering, filling, generation, distribution, accountability, storage, usage, destruction and management of electronic key and other types of

COMSEC material. The overall EKMS architecture consists of four layers or tiers. Each tier is part of a higher tier. For example, a Tier 3 (Local Element), must be assigned to a Tier 2

(EKMS Account).

a. TIER 0 (Central Facility) – EKMS Tier 0 consists of the

National Security Agency’s (NSA) Fort Meade and Finksburg Key

Facilities. Tier 0 provides centralized key management services for all forms of COMSEC key.

b. TIER 1 - This layer of the EKMS serves as the intermediate key generation and distribution center, central offices of record (COR), privilege managers, and registration

1-4 authorities for EKMS/COMSEC accounts. Management of the system is a cooperative effort involving the Navy, NSA, Joint Staff, (J6), Army, and Air Force.

(1) Common Tier 1 (CT1) – CT1 is comprised two Primary Tier

1 sites (Lackland AFB, San Antonio, TX and Ft. Huachuca, AZ) and other physical distribution handling systems at several service sites. CT1 houses the physical EKMS servers that are used for accounting and will provide for the generation and distribution of many traditional key types for large nets.

(2) SERVICING PRIMARY TIER 1 SEGMENT (PT1S) – A term used to refer to the Tier 1 site having primary COR (Central Office of Record) responsibility for a portion of the Tier 2 accounts.

c. TIER 2 - The layer of EKMS comprised of the EKMS Accounts that manage key and other COMSEC material. Tier 2 accounts are equipped with a Local Management Device (LMD) that runs Local

COMSEC Management Software (LCMS) and interfaces with a Key

Processor (KP). This suite of equipment is referred to as a

LMD/KP. A small number of Tier 2 accounts whose holdings are restricted to equipment are “LMD-only accounts”. Tier 2 accounts receive electronic key from Tier 0, Tier 1 or other

Tier 2 accounts.

d. TIER 3 - Tier 3 is synonymous with Local Elements (LEs).

Tier 3 is the lowest tier or layer of the EKMS architecture.

Tier 3 may include the AN/PYQ-10 (Simple Key Loader (SKL) other means used to fill key to End Cryptographic Units (ECUs), hard copy material holdings, and STE keying material using Key

Management Entities (KMEs). Tier 3 entities never receive electronic key directly from Tier 0 or Tier 1.

110. NATIONAL SECURITY AGENCY (NSA): The National Security

Agency serves as Tier 0 and is the executive agent for developing and implementing national level policy affecting the control of COMSEC material. NSA is also responsible for the production and distribution of most COMSEC material used to secure communications as well as for the development and production of cryptographic equipment.

115. ELECTRONIC KEY MANAGEMENT SYSTEM (EKMS) CENTRAL FACILITY

(CF): The EKMS CF operates as part of the NSA and functions primarily as a high volume key generation and distribution center. As such, it provides commands with keys currently produced by NSA that cannot be generated locally or must be generated by Tier 0 for other reasons. The CF will

1-5 interoperate with commands through a variety of media, communication devices, and networks, allowing for the automated ordering of COMSEC key and other materials generated and distributed by NSA.

120. DEPARTMENT OF THE NAVY (DON): The DON administers its own

CMCS, which includes Navy, Marine Corps, Coast Guard, and

Military Sealift Command (MSC) EKMS and KMI Accounts. DON system implements national policy, publishes procedures, establishes its own EKMS accounts and serves as a Service

Authority (SERVAUTH) for COMSEC material.

a. CHIEF OF NAVAL OPERATIONS (CNO): Overall responsibility and authority for implementation of National

COMSEC policy within the DON. The Head, Navy Information

Assurance (IA) Branch is the COMSEC resource sponsor and is responsible for consolidating the COMSEC programming, planning and implementation of policy and technical improvements.

NOTE: DON CIO as the Executive Agent is overall responsible for DON COMSEC policy and oversight. The

Deputy Under Secretary of the Navy for Plans, Policy, Oversight and Integration (DUSN PPOI) is the DON's Security

Executive responsible for DON security policy.

b. HEADQUARTERS MARINE CORPS (C4 CY): HQMC C4 CY serves as

COMSEC resource sponsor for the Marine Corps. The department functions as the USMC Service Authority and coordinates with

CNO, COMNAVIFOR, and NCMS to establish, promulgate, and oversee

EKMS account management matters unique to the Marine Corps. The

C4/CY is the focal point for requirements and administration for all Marine Corps EKMS accounts.

c. COMMANDER, U.S. COAST GUARD C4IT SERVICE CENTER, INFORMATION ASSURANCE BRANCH (C4ITSC-BOD-IAB): Acts as the USCG

Service Authority (SA) and exercises overall authority for USCG

COMSEC matters and also serves as the USCG Program Manager and

Principal Agent for the USCG COMSEC Program and also functions as the USCG; Service Authority, Evaluating Authority, Command

Authority (CA) and USCG ISIC. This office promulgates USCG

COMSEC Program policy and exercises service wide management of

Coast Guard EKMS accounts including hardware and software allowances. The branch also acts as principal USCG liaison for

COMSEC with CNO, NCMS and the Tier 1s to ensure that all USCG

EKMS Accounts have the necessary resources to operate effectively. The Office coordinates with other Military

Services, the Director NSA, other Federal, State, and Local law

1-6 enforcement entities to ensure secure/privacy communications interoperability.

d. NAVAL COMMUNICATIONS SECURITY MATERIAL SYSTEM (NCMS):

Administers the DON COMSEC program and is the Service Authority for DON. NCMS performs these specific functions:

1. Maintain the central office of record, ensuring the proper storage, distribution, inventory, accounting, and overall safeguarding of COMSEC materials for the Navy, Marine Corps, Coast Guard, Military Sealift Command, and joint and allied commands as required.

2. As the DON COMSEC policy author, draft and publish

COMSEC policy directives, standards, and procedures pertaining to COMSEC material security, distribution, training, handling, and accounting within the DON to ensure National level policies are followed and enforced.

3. Operate, maintain, and exercise administrative, operational, and technical control over the CMIO for distribution of COMSEC equipment, in order to control, warehouse and distribute keying material for all Navy.

4. Monitor compliance with national standards of the

Protective Packaging Program for cryptographic keying material.

5. Coordinate fleet requirements for the acquisition of all COMSEC material and publications for DON commands.

6. Establish and disestablish DON EKMS numbered accounts.

7. Based on Combatant Commanders’ requirements, ensure distribution of COMSEC material to Vault Distribution Logistics

System (VDLS) components to ensure quantities are sufficient for

EKMS account requirements, exercises, and contingency operations.

8. Provide disposition instructions for excess, failed or obsolete COMSEC equipment or keying material for which NCMS is the Controlling Authority or Command Authority, as applicable.

9. As the COMSEC Incident Monitoring Activity (CIMA) for the DON; evaluate instances of loss, compromise, and procedural violations of COMSEC procedures to determine the adequacy of existing procedures as well as overall compliance with existing

1-7 policy as the DON COMSEC incident monitoring activity and the

DON COMSEC Inspection Program manager.

10. Establish standards for the COR Audit Program.

11. Manage the DON COMSEC Training Program and provide, via COR Audit Teams, worldwide COMSEC advice and assistance to customers.

12. As the DON Registration Authority, register and assign

EKMS IDs to Key Management Entities (KME), order initialization keys for KPs and for maintain registration data on its KMEs in the EKMS Directory Service.

13. Act as the FIREFLY Point of Contact for modern key privileges.

14. Resolve COMSEC related technical queries and conflicts with members of DON and the National COMSEC community.

15. Coordinate with Deputy CNO, Information Dominance (CNO

N2/N6), Director National Security Agency, and U.S. Fleet Cyber

Command regarding COMSEC equipment and associated infrastructure releasability to foreign governments and international organizations.

16. Review requests for and authorize the release of DON

COMSEC material to contractors and assist DIRNSA in the establishment of COMSEC accounts as necessary.

17. Serve as the final waiver authority for DON COMSEC policies and physical security requirements.

18. Act as the Requirements Sponsor for EKMS, CT3-DMD, KMI, and CWMS.

19. Act as the FORTEZZA Approving Authority.

20. Act as the Parent COMSEC Account for the Offices of the Chief of Naval Operations, the Secretary of the Navy, and others as directed.

e. COMSEC MATERIAL ISSUING OFFICE (CMIO): Receives, stores, and ships Ready for Issue (RFI) equipment and is the Physical

Material Handling Segment (PMHS) for Navy in the EKMS.

f. UNITED STATES NATIONAL DISTRIBUTION AUTHORITY (USNDA):

1-8

The consolidated (Air Force, Army, Navy and NSA) COMSEC distribution facility for keying material. The USNDA processes and automatically ships Reserve on Board (ROB) material to the

Defense Courier Station (DCS) based on the information reflected on the units U.S. Transportation Command Form-10.

125. CONTROLLING AUTHORITY (CONAUTH): In the context of the

CMCS, each item of traditional COMSEC material is controlled or managed by a designated official known as a CONAUTH. A CONAUTH is responsible for evaluating COMSEC incidents and authorizing the issue/destruction of COMSEC material under their control.

By definition, a CONAUTH is the command which has designated responsibility for directing the establishment and operation of a cryptonet/circuit and managing the operational use and control of keying material assigned to a cryptonet/circuit. CONAUTH responsibilities are detailed in Annex C. For modern

(asymmetric key), there is no Controlling Authority. The responsibilities are performed by a Command Authority.

126. SERVICE AUTHORITY:

The role of the Service Authority is defined within each Service and may be executed by more than one person or agency within that Service. Service Authority activities within each military service include oversight for COMSEC operations, policy, procedures, and training. Service Authority roles may include:

- Cryptographic hardware management, distribution and control, including Foreign Military Sales (FMS).

- Approving account establishments.

- Approving authority for Certification Approval

Authorities (CAAs).

- Implementing COMSEC Material Control System (CMCS)/Key

Management Infrastructure (KMI) policy and procedures.

- Direct operational support.

- Final adjudication authority for determining when reported COMSEC incidents result in COMSEC insecurities.

- Ensuring service compliance with COMSEC access program requirements.

- Standing membership on KMI working groups and the CT1

Joint Configuration Control Board (JCCB).

130. IMMEDIATE SUPERIOR IN COMMAND (ISIC): Responsible for the administrative oversight of all COMSEC matters for their subordinate commands. All COMSEC matters fall under the purview of the Administrative Command (ADCON). NCMS will refer to the following sources to determine ADCON:

http://www.ustranscom.mil/cmd/associated/dcd/?page=links.cfm

1-9

-USN: Standard Navy Distribution List (SNDL)

-USMC: EKMS ISIC and Inspectors Alignment for

Marine Corps EKMS Accounts (COMSEC Advisory)

-USCG: Commandant Notice 5440

135. STAFF CMS RESPONSIBILITY OFFICER (SCMSRO): A flag or general officer in command status, or the Deputy Commander or

Chief of Staff, may either assume personal responsibility for routine COMSEC matters or may designate the responsibility to a staff officer (O-4(or selectee)/GS-12, Pay Band 2, or above).

Officers not meeting the above requirement may not designate a

SCMSRO. A SCMSRO may exist at a command with an account or LE.

SCMSROs must have a security clearance equal to or higher than the highest classification of COMSEC material held by…