Authenticated channel for encryption management

A method of a local modem, comprising:

• establishing a local authenticated channel with a first control processor (CP) via a management interface of the local modem;
• managing a trusted channel over a link interface communicatively coupling the local modem to a remote modem based on encryption parameters received from the first CP;
• detecting that the first CP has become unavailable;
• communicating an alarm message via the trusted channel based on the first CP becoming unavailable;
• receiving a reauthentication command via the trusted channel;
• and
• reestablishing the local authenticated channel with a second CP via the management interface based on the reauthentication command.

A control processor (CP), comprising:

• a management interface having a local authenticated channel to a local modem;
• and
• a processor configured to:
• provide encryption parameters to the local modem via the local authenticated channel to enable the local modem to manage a trusted channel between the local modem and a remote modem,
• receive an alarm message from the local modem via the local authenticated channel, wherein the alarm message indicates that the remote modem is in an unmanaged state due to failure of a remote authenticated channel between the remote modem and a first remote CP, and
• communicate a reauthentication command to the remote modem via the local authenticated channel, the local modem, and the trusted channel, wherein the reauthentication command is configured to cause the remote modem to reestablish the remote authenticated channel with a second remote CP.