MKA Tester is a software solution for MACsec Key Agreement (MKA) in automotive Ethernet systems. It can be used in production environments for real MACsec operation, and in lab environments for testing and validation of ECU MKA/MACsec implementations. It handles MKA negotiation, connects the protocol runtime to MACsec-capable device control paths, and provides host-side tools for bring-up, monitoring, and validation.
MKA Tester is built on the same protocol runtime as MKA Stack. For embedded integration, custom platform adaptation, and core runtime details, see the MKA Stack product page.
Ideal for
- ECU and Ethernet switch developers integrating MKA and MACsec
- Test labs validating OPEN Alliance TC17 MKA behaviour
- Automotive Ethernet device manufacturers and integrators of MKA and MACsec
The MKA Tester is the validation component of the solution. It monitors operating status, executes supported test scenarios, and helps verify peer-device behaviour during MACsec/MKA negotiation and related control operations. It can be used to test and validate the MKA functionality of third-party automotive Ethernet devices.
Features
- Ready device control integration for supported MACH SYSTEMS devices
- Layered architecture for adaptation to custom or third-party devices
- Hardware abstraction layer for connection to MACsec-capable PHYs and platform drivers
- Public C runtime API for lifecycle control and runtime configuration
- Python wrapper for runtime control, configuration loading, observer events, and direct Python-based device integration
- Native C and Python-based control backends
- USB and CAN(/FD)-based control backend support
- Observer-based diagnostics for structured status and event reporting
- Support for Linux and Windows
- Example application and integration documentation
Usage
MKA on Top of Media Converters with MACsec support
The software can be used directly with our 100/1000BASE-T1 media converters with MACsec support, available in H-MTD and MATEnet variants. In this configuration, the software provides a ready-to-use integration path for realizing an MKA node. The host system runs the MKA logic and controls the MACsec-capable PHY of the media converter through the supported device control interface.
Peer Device Testing and Validation
The included tester application is used to observe runtime status, execute supported test scenarios, and verify peer behaviour during MACsec/MKA negotiation and related control operations.
Tester Scenarios
MKA Tester supports scenario-based validation of peer behaviour during MKA/MACsec operation. The scenarios cover positive bring-up cases, timing and rekey behaviour, peer restart handling, and selected fault checks.
Examples include:
- Local or foreign key server bring-up
- Peer restart / reappearance
- Wrong CKN or ICV failure detection
During a test run, the tester records milestones and evidence from runtime status, protocol events, and backend responses. This helps identify whether the peer reached the expected negotiation state, where a scenario failed, and which runtime event caused the failure.
Interactive Operation and Diagnostics
The GUI application provides an interactive interface for starting MKA/MACsec communication and monitoring runtime state. For programmatic use, the Python wrapper supports runtime control, configuration loading, backend selection, and observer events.
Host-side Capabilities
- Runtime configuration
- Interactive GUI-based bring-up and monitoring
- Runtime status and event observation
- USB and CAN(/FD) communication backends
- Scenario-driven peer device validation
- Python-based bring-up and test workflows
Screenshots
-
- Tester application for peer-device validation in supported MKA scenarios
-
- GUI application for MKA/MACsec bring-up and runtime monitoring
Platform Support
- Linux
- Windows
MKA Tester is intended for host-side operation. The underlying MKA Stack architecture also supports embedded integration, allowing the same core MKA logic to be used across PC and embedded environments.
Typical Applications
- Bring-up of MACsec-capable automotive Ethernet devices
- Use with our H-MTD or MATEnet media converters through the ready device control path
- Integration of IEEE 802.1X MKA into embedded platforms
- Debugging and testing of secure Ethernet communication
Ordering Information
P/N: MACH-MKASTACK
See also MKA Stack page.
Licensing
Perpetual, per-site license. One license is required for each company location where the software is used.
For integration support or project-specific customization, please contact us.
