.TH REGISTER 8 mux.SH NAMEregister \- command to register set-top-box identity with signer.SH SYNOPSIS.B mux/register[.I signer].SH DESCRIPTION.I Registeris intended for use on a set top box (or similar device).It connects to.IR signer ,a machine configured to sign certificates,and obtains an authenticated certificate based on the contents of.L /nvfs/ID(the set top box ID in non-volatile memory).The certificate is saved in the file.L /nvfs/defaultfor later use.If no.I signeris named explicitly, the.B $SIGNERnamed in.IR db (6)is used instead..PPThere are several phases to obtaining the certificate..IP 1.The register command interacts with.IR signer (8)on the signing hostto construct the certificate. This certificate is `blinded' by a random bit mask, sent back to.I registerwhich displays it in textual or graphical form tothe user..IP 2.The user running.I registermust use an independent,secure mechanism (for example, an untapped telephone call)to communicate with a human agent at thesite acting as.IR signer .That agent runs.I verify(see.IR signer (8))to display the same `blinded' certificate that wasshown to.IR register 'suser at the client.Once the agent is convinced that the `blinded' certificate has been delivered to the correct party, the agent tells.I verifyto accept the identity of the caller..IP 3..I Registerthen connects to the.I countersignerprocess (see.IR signer (8))to obtain the bitmask needed to `unblind' the previously received certificate.This step can only validly be performed after the successfulcompletion of.I verifyon the.I signer..SH FILES.TF /services/cs/db.TP.B /nvfs/IDFile emulating set top box-id in ROM..TP.B /nvfs/defaultRepository of authenticated certificate..TP.B /services/cs/dbDefault definition of `signer' host..SH SOURCE.B /appl/mux/register.b.SH "SEE ALSO".IR db (6),.IR manufacture (8),.IR signer (8)