Physical Security
The
and
conform to FIPS 140-2 Level 2 physical security requirements. This document details how to place and maintain the
licensed and
in a FIPS 140-2 Level 2 approved operational state.
Tamper Evident Label Application and Management
The
and
must get fitted with tamper evident labels to provide physical evidence of attempts to gain access to the system in order to may be licensed to conform to FIPS 140-2 Level 2. The Crypto Officer is responsible for applying and inspecting tamper evident labels to the
FIPS-licensed system to ensure that it maintains the approved mode of operation. The Crypto Officer must verify that all tamper evident labels are in place and undamaged on a regular basis; if a label is damaged or has been removed, then the CO must insure the label is replaced. Figure X-X illustrates a tamper evident label that has been tampered with. The Crypto Officer shall be present whenever the tamper evident labels are removed or installed and return the system to an approved FIPS 140-2 Level 2 state. If the tamper evident labels require replacement, you may purchase new replacement label kits (
821-00535).
Info |
---|
|
The Crypto Officer is responsible to store the label kits at room temperature with less than 50% humidity for up to one year. |
Applying Labels
Ensure to clean the surface where to place the label with isopropyl alcohol and dry it thoroughly. Do not touch or blow on the surface after cleaning it to avoid contaminating the surface. Using finger/thumb pressure, slowly roll back the liner (backing material) to expose the adhesive side of the label. Do not touch the adhesive with your fingers or the label may become spoiled (i.e., tampered) Place the label in the specified location and apply very firm pressure across the entire label surface ensuring full coverage is achieved. Allow the label adhesive to cure for at least 30 minutes – full adhesion is achieved after 24 hours.
Label Kits
Only the Crypto Officer shall apply the Label kits using the label kit "821-00535" supplied by Ribbon Communications. Each label kit consists of a bag of six identical ½" x 2" labels for one
SBC appliance.
All six labels are used on the . For the , only three labels are used – the Crypto Officer must destroy the remaining three labels.Inspect each label kit. If any of the following situations occur, reject the labels and notify
.
- The label bag has been opened.
- All labels are not identical and/or do not have matching serial numbers.
- The labels appear to be tampered with.
An example of a label that was tampered with is shown below.
Caption |
---|
0 | Figure |
---|
1 | Example of Tampering a Label |
---|
|
|
Apply Labels to the SBC 5400
The
requires three tamper evident labels,
- one on the left side of the front upper surface bridging the bezel and cover,
- one on the right side of the front bottom surface bridging the bezel and chassis base, and
- one on the upper surface of the rear of the cover bridging to the DSP2X subassembly.
Bezel and Cover
Caption |
---|
|
|
- Remove the label from its liner.
- Place label onto the bezel approximately where shown taking care not wrap the label around the front surface of the bezel. Using firm pressure, smooth out the label from one end to the other.
- Confirm the label bridges the bezel and the cover.
Bezel and Chassis Base
Caption |
---|
0 | Figure |
---|
1 | Bezel and Chassis Base |
---|
|
|
- Remove the label from its liner.
- Place the label onto the bezel approximately where shown (below) taking care to NOT wrap the label around the front surface of the bezel. Using firm pressure, smooth out the label from one end to the other.
- Confirm the label bridges the bezel and the chassis base.
Cover and DSP2X Tray
Caption |
---|
0 | Figure |
---|
1 | Cover and DSP2X Tray |
---|
|
|
- Remove the label from its liner.
- Place label onto the cover approximately where shown, starting at the edge, wrap label around back surface. Using firm pressure, smooth out label from one end to the other.
- Confirm label bridges the cover and the DSP2X tray.
Apply Labels to the SBC 7000
The
requires six tamper evident labels,
- one on the top surface that bridges the bezel and top surface of the chassis,
- one that bridges the top surface of the chassis and the cover,
- two that bridges the cover and sides of the chassis, one on each side, and
- two that to bridge each side of the CSC 100 to the chassis body.
Bezel and Top Surface of Chassis
Caption |
---|
0 | Figure |
---|
1 | Bezel and Top Surface of Chassis |
---|
|
|
- Remove the label from its liner.
- Place the label onto the bezel approximately where shown taking care to NOT wrap the label around the front edge of the bezel. Using firm pressure, smooth out the label from one end to the other.
- Confirm the label bridges the bezel and the top surface of the chassis.
Cover and Top Surface of Chassis
Caption |
---|
0 | Figure |
---|
1 | Cover and Top Surface of Chassis |
---|
|
|
- Remove the label from its liner.
- Place the label onto the chassis approximately where shown. Using firm pressure, smooth out the label from one end to the other.
- Confirm the label bridges the cover and the top surface of the chassis.
Cover and First Side of Chassis
Caption |
---|
0 | Figure |
---|
1 | Cover and First Side of Chassis |
---|
|
|
- Remove the label from its liner.
- Place the label onto the cover approximately where shown. Starting at the edge, wrap the label around the side surface. Using firm pressure, smooth out the label from one end to the other.
- Confirm the label bridges the cover and the side of the chassis.
Cover and Second Side of Chassis
Caption |
---|
0 | Figure |
---|
1 | Cover and Second Side of Chassis |
---|
|
|
- Remove the label from its liner.
- Place the label onto the cover approximately where shown. Starting at the edge, wrap the label around the side surface. Using firm pressure, smooth out the label from one end to the other.
- Confirm the label bridges the cover and the side of the chassis.
CSC 100 and First Side of Chassis
Caption |
---|
0 | Figure |
---|
1 | CSC 100 and First Side of Chassis |
---|
|
|
- Remove the label from its liner.
- Place the label onto the CSC 100 approximately where shown. Starting at the edge, wrap the label around the side surface. Using firm pressure, smooth out label from one end to the other.
- Confirm the label bridges the CSC 100 and the side of the chassis.
CSC 100 and Second Side of Chassis
Caption |
---|
0 | Figure |
---|
1 | CSC 100 and Second Side of Chassis |
---|
|
|
- Remove the label from its liner.
- Place the label onto the CSC 100 approximately where shown. Starting at the edge, wrap the label around the side surface. Using firm pressure, smooth out label from one end to the other.
- Confirm the label bridges the CSC 100 and the side of the chassis.
Inspect Labels
The Crypto Officer is responsible to inspect the FIPS labels at regular intervals to ensure the
product maintains FIPS 140-2 Level 2 compliance. The Crypto Officer must verify that all of the tamper evident labels are in place and show no signs of tampering. The Crypto Officer shall inspect the following:
- Missing or misplaced labels – ensure labels are present and they are in the proper locations indicated in this document
- Labels match the label (shown below) for style, size and color
- Serial numbers on all labels are identical and match the recorded serial numbers
- Indication of tampering – if tampered with, reject the labels and notify
Caption |
---|
0 | Figure |
---|
1 | Ribbon Tamper-Evident Label Example |
---|
|
|