Warning

If you are operating in the FIPS-140-3 mode, refer to FIPS Mode Security Restrictions to see the complete list of restrictions applicable for the upgrade from any pre-10.1.3 SBC version.

In the section:

Modified: for 10.1.3



The SBC 10.1.3 complies with the FIPS-140-3 standard. This feature enhances the SBC's FIPS Object Module and introduces known answer tests for cryptographic algorithms FFC (Diffie-Hellman), SSH-KDF, and TLS-KDF for the new FIPS standard FIPS-140-3 to perform as known answer tests during the Power-On Self Tests (POSTs). These tests are added to the OpenSSL FIPS object module implementation.

Command Syntax

% set system admin <SYSTEM NAME> fips-140-3 mode <disabled | enabled>


Command Parameters

Parameter

Description

fips-140-3 mode

Use this object to enable FIPS-140-3 mode.

  • disabled (default)
  • enabled 

NOTE: Once fips-140-3 mode is enabled, it cannot be 'disabled' through the configuration. A fresh software installation is required to set the FIPS-140-3 mode back to 'disabled'.

Configuration Example

set system admin vsbcSystem fips-140-3 mode enabled