How to Connect to the Key Bridge Test SAS Environment

The Key Bridge test SAS environment provides a safe, isolated space for vendors, integrators, and operators to validate CBSD or Domain Proxy implementations before moving to production. It follows the standard WinnForum SAS-CBSD protocol while incorporating realistic simulated protected entities for comprehensive testing.

This guide covers access, endpoints, key characteristics, and best practices for effective testing.

Purpose of the Test Environment

• Verify full SAS-CBSD protocol compliance (registration, spectrum inquiry, grant, heartbeat, relinquishment, deregistration).
• Test behavior under interference scenarios (DPA activations, grant terminations, power reductions).
• Validate PAL workflows in simulated protection zones (if applicable).
• Perform integration testing without risk to production networks or real incumbents.

The test environment is completely separate from production: configurations, User IDs, and grants do not carry over.

Requesting Access

1. Contact Key Bridge support at support@keybridgewireless.com or via your account portal.
2. Provide your organization details and testing scope (vendor certification, integration, training, etc.).
3. You will receive:
   • A dedicated test User ID
   • Access instructions for the test environment
   • Guidance on certificates (see below)

Access is typically provisioned within one business day.

Certificates for Testing

Key Bridge supports both options for maximum flexibility:

• Use your existing production certificates – they work perfectly in the test environment and cannot cause any interference or production impact.
• Request test certificates – we can issue harmless test certificates specifically for testing and training purposes.

Either choice is fully supported and safe; the test environment is isolated and cannot affect real-world operations.

Test SAS Endpoints

All requests use HTTPS with mutual TLS authentication (client certificate required).

Base URL: https://test.cbrs.keybridgewireless.com/cbsd/api/v1.2

Individual endpoints:

• Registration: https://test.cbrs.keybridgewireless.com/cbsd/api/v1.2/registration
• Spectrum Inquiry: https://test.cbrs.keybridgewireless.com/cbsd/api/v1.2/spectrumInquiry
• Grant: https://test.cbrs.keybridgewireless.com/cbsd/api/v1.2/grant
• Heartbeat: https://test.cbrs.keybridgewireless.com/cbsd/api/v1.2/heartbeat
• Relinquishment: https://test.cbrs.keybridgewireless.com/cbsd/api/v1.2/relinquishment
• Deregistration: https://test.cbrs.keybridgewireless.com/cbsd/api/v1.2/deregistration

Use your assigned test User ID and chosen certificates for all requests.

Key Characteristics and Simulated Entities

• Incumbent Protection
  Certain Dynamic Protection Areas (DPAs) are activated periodically or on-demand to simulate real-world suspensions and terminations (coastal and select inland zones).

• Grandfathered Wireless Protection Zone (GWPZ)
  A fixed GWPZ is always active in the 3650–3700 MHz range for consistent testing of exclusion behavior.

• Simulated ESC Triggers
  The environment can emulate radar detections, causing channel evacuation in affected areas.

• PAL Testing Zones
  Pre-defined PAL counties and PPAs available for grant protection and interference coordination tests.

• Relaxed Rules
  No real FCC ULS synchronization; manual overrides available upon request for specific scenarios.

Recommended Testing Workflow

1. Configure your CBSD or Domain Proxy to point to the test endpoints and load the appropriate certificates.
2. Execute the standard happy-path flow: registration → inquiry → grant → heartbeat.
3. Test edge cases:
   • Grant termination (simulated incumbent activity)
   • Power reduction after a CPAS-like event
   • Heartbeat failure recovery
   • Relinquishment and re-grant
4. Log all requests and responses for analysis.
5. Repeat with different locations (inside/outside protection zones) and parameters.

Best Practices

• Isolate test traffic on a dedicated network segment to avoid accidental production impact.
• Script automated test suites for regression testing.
• Use detailed logging to capture responseCodes, operationParam, and transmitExpireTime.
• Test both direct CBSD connection and Domain Proxy mediation if applicable.
• Clear test registrations periodically to start with a clean state.

Transitioning to Production

Once testing is complete:

1. Switch your CBSD/Domain Proxy configuration to production endpoints:
   https://sas.keybridgewireless.com/cbsd/api/v1.2
2. Use your production certificates and live User ID.
3. Re-register devices—previous test grants do not transfer.

Key Bridge support can assist with final validation or coordinated cutover if needed.

This test environment enables rapid, realistic validation—helping you achieve reliable, compliant CBRS deployments faster. Reach out with any questions or to schedule assisted test sessions.