Documents
UTT Config Readme
Jul. 1 2015 — 9:52 a.m.

SECRETHRELTO USA, Fyer
(U) UTT Configuration
READ ME
Overview
The Unified Targeting Tool makes it possible to transition from today's selector?
centric mode of operation, where ea ch type of selector is entered into a different targeting tool, to a
target?centric system. In this system, selection management is conyerged and then streamlined and
automated, thereby facilitating analyst operation and collaboration. UTT, a mission critical component
of the TU RBU LENCE architecture, proyides a single point?of?seryice. enter all of their targeting
requests for intercept from global network communications as well as private networks that are
resident on or accessible using the global network infrastructure, regardless of the types of selectors or
access capabilities to be employed.
urr Dataflow
The UTT pushes selector targeting information to the Site Selection Distribution Manager
The SSDM manages selector tasking at the field site. The SSDM recei yes the loadfupdates that
were pushed from the It is responsible for any site?speci?c processing that must be performed
before forwarding the appropriate subset of information to site?local collection systems.
Once messages are processed, the SSDM sends selector targeting information via
MAILURDER to frontend collection systems at a field site The SSDM receiyes status
back from these systems indicating whether or not the selector tasking was accepted or rejected and
then returns status to the in the form of load and update responses. The SSDM may also request,
either automatically or manually by a local user, that the send a complete reload of all selectors
targeted for the site. Similarly, the field site?s frontend collection systems may also request, either
automatically or manually by a local user, that the SSDM send a complete reload of all selectors targeted
for the site.
1
SECRETHRELTO USA, Fyer

SECREWR EL To USA, FUEY
urr Dataflow
(Cl
UlTTasking
Response Messages hack to SSDM -
Selected Data
FISE Falsify"
SCISSU H3
funk?J;
I TRAFFIC
THIEF
. .-I
.- ..--
I. .I
J.
(Ci
This Readme file is intended as an aid for setting upthe appropriate configurations to load,
ingest, and scan data against tasking. It does NOT address forwarding selected trafficto PINWALE.
Configuring KKEYSCURE for UTT can be accomplish ed in three phases. First, you will address three pre?
configuration requirements. Next you will configure xkscon?'g and xks. advanced. con?g to enable UTT
tasking and appropriate MAILURDER routing. Last, you will execute a group of set?up processes to
ensure all configuration changes are fully implemented.
Pre-Configuratlon Requirements
The Unified Targeting Tool (UTT) works hand?in?hand with the Site Selection Distribution
Manager Therefore you must have:
an SSDM in place at the field site.
the routing trigraph so can send response messages back to the SSDM.
a routing trigraph for the KKEYSCURE Master.
2
SECREWR EL To USA, FUEY

SECRETHRELTO use, Fyer
Configu ring Selection In xks.config
(UHFOUO) Configuration for UTT selection and tasking can be accomplished in just seyen steps:
1.
2.
Logon as the user oper.
(UHFOUO) At the command line from within any directory, type vi config and then press
Enter. The xks.canfig file will open.
(UHFOUO) In the [dictionaries] section of xks.canfia, set the following configurations:
a . utt yes This enables UTT tasking. The default setting for this configuration is no .
1o. eedm_trigrapn [field eite trigrapn] Thisisthe SSDM?strigraph for
thefield site.The defaultis which will need to be changed.
(UHFOUO) In the JLavraaesses} section of xks.canfia confirm that the MAILORDER configuration
reads mailorder yea . The default is no . This o'eates the mailorder_proo process.
(UHFOUO) In the Maiiara'er inputs section of xics.canfia, type mai lorder_input
source :00 dir eedm. This is the input configuration for
oneok_mai lorde r_e ite .13 hp . This particular configuration indicates that all incoming files
in that have a Producer Designator Digraph of DO
and a source system digraph of AB will be moved to
(UHFOUO) In the Piagin Con?g section of xks.canfig is the following placemark:
Below this placemark, type your own forwarding domains routing trigraphs} like those
identi?ed in the Forwarding Domains chart. Forwarding Domains are in the form:
forwarding_domain key:value,key2
3
SECRETHRELTO use, Fyer

SECRETHRELTO USA,
(UHFOUO) The is an identifier (forwarding_dornain parameter} between 1 and 12. One
type of key is the fdi key. It indicates where to send collected data ofthe domain. The value
associated with this key is the routing trigra ph of the domain. The Forwarding Domains table
shown below identi?es the forwarding locations associated with each identifier
[forwa rding_domain parameter}.
Forwarding Domains
Routing Trigraph Forward Location
forwarding_domain fdi
forwarding_domain fdi PORN Only}
forwarding_domain fdi
forwarding_domain fdi NOFO RN
forwarding_domain fdi
forwarding_domain fdi NOFORN
forwarding_domain fdi
forwarding_domain fdi NOFDRN
forwarding_domain fdi
forwarding_domain[10] fdi:KFC
forwarding_domain [l l] fdi KFC 11?3rd Party
fdi KFC 12?Local Support
forw arding_domai [l 2]
i5}
Type :wa and then press Enter to exit irkscan?a.
4
SECRETHRELTO USA,

SECRETHRELTO USA, i=va
Additional Processes
(UHFOUO) In addition to editing configurations in xksconfig and xksodvoncedcon?g, it is
important to execute several set?up processes. As the oper user, execute the following commands only
after entering the SSDM configurations in xksconfig:
1.
(UHFOUO) At the command prompt, type xka setup pro CE 3 ea 3 and press Enter. This
creates the Che ck_rnailorder_aite . and mai lorde r_pro processes on the
Master server.
(UHFOUO) At the command prompt, type xka proc start and press Enter . This will
ensure all of the running processes pick up any configuration changes.
As a result of executing these commands, the following processes will begin:
The Che ck_rnailorder_aite .php process, which polls
input seem and moves the SSDM to the
input a adm directory, according to the [mai lorder_input]
rule in the xkscon?g file.
Note: If a MAILORDER input rule is changed in xkscon?'g, then type xka proc re start
cma to restart the check_rnailorder_aite .php process.
The rnai lorde r_pro process, which polls
directory and properly renames and moves
any l'v'lAl LURDER files to for pick?up by MAILORDER.
The strong aeleator targe ti rig process which
for any tas?ng updates or full loads. it receives a message frcim the SSDM
that updates are available, a response receipt is generated and sent to
Next, strong_ae 1e cto r_targeting
processes the UTT upd atesftasking files and writes the processed files to
.
(UHFOUO) Another receipt is generated after processing of an updateffull load is complete. The
message indicates success or failure and is also placed into
foutputsfmailorder_working.
Note: (UHFOUO) The atrong_aele:tor_targeting process will request a reload if it
receives SIGUSRZ, if it starts up and seesutt . ae 1e ctora is still there, or if it starts up
and has no targeting.
5
SECRETHRELTO USA, i=va