Getting started with Cryptographic Key Management System (CKMS)

The Cryptographic Key Management System keeps the record of keying material for radios, weapon systems and other end cryptographic units: where each key came from, who holds it, which devices it was loaded into, and when it was superseded or destroyed. It runs the requests, hand receipts, loading records and destruction reports that COMSEC accounts work through every day. When a key is reported compromised, it shows every holder and device affected and drives the emergency supersession steps your controlling authority directs.

What it is for

COMSEC custodians often keep track of keying material across the government key management infrastructure, local inventories, paper hand receipts and spreadsheets of which device holds which key. Supersession dates are watched by hand, destruction is recorded on forms that are filed and hard to search, and inventories take days of reconciliation. When a key is suspected compromised, working out which units and devices hold it, and confirming that each one has moved to replacement key, depends on calls, emails and the custodian's memory.

• Holdings, hand receipts and device loads are tracked in separate places
• Supersession and destruction deadlines are watched by hand
• Inventories and audits mean days of reconciling paper with systems
• After a compromise it is slow to confirm who holds the key and who has rekeyed

Who uses it

• COMSEC account managers and their alternates
• Hand receipt holders and key operators in units and on platforms
• Controlling authorities who direct key use, supersession and emergency rekey
• Information system security managers responsible for cryptographic equipment
• Inspectors and auditors who review COMSEC accounts

Before you start

• Your organization licenses Cryptographic Key Management System (CKMS) from Moraph.
• A Moraph client account in that organization, signed in.
• Access to Cryptographic Key Management System (CKMS) in Moraph Apps, given by an administrator in the Moraph Portal under People and access.
• For setup: the product administrator role.

Steps to get started

1. Sign in at app.moraph.com with your Moraph account.

2. Open Cryptographic Key Management System (CKMS) from the launcher. The first time anyone opens it, its workspace is created from the default described in Workspace reference.

3. Check your role: what you can see and do depends on it. See Roles and permissions.

4. Product administrators: work through Set up Cryptographic Key Management System (CKMS) before your team starts.

5. Everyone else: start with Everyday tasks.

Where to go next

• Set up Cryptographic Key Management System (CKMS)
• Everyday tasks
• Connect your systems
• Security, data and compliance
• Troubleshooting and the support guide
• Product overview on moraph.com