Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Add_workflow_for_techpubs
AUTH1UserResourceIdentifier{userKey=8a00a0c86820e56901685f374974002d, userName='null'}
JIRAIDAUTHSBX-125024
REV5UserResourceIdentifier{userKey=8a00a02355cd1c2f0155cd26cb8305e9, userName='null'}
REV6UserResourceIdentifier{userKey=8a00a02355cd1c2f0155cd26cb8305e9, userName='null'}
REV3UserResourceIdentifier{userKey=8a00a02355cd1c2f0155cd26cb870607, userName='null'}
REV1UserResourceIdentifier{userKey=8a00a0c86573c09001659db4327e0018, userName='null'}

Include Page
_FIPS_140_3_security_restrictions
_FIPS_140_3_security_restrictions


Panel

In the section:

Table of Contents
maxLevel4



Info
iconfalse

Related articles:children


The SBC supports the FIPS-140-3 mode. This feature enhances the FIPS Object Module of the SBC. It introduces known answer tests for cryptographic algorithms FFC (Diffie-Hellman), SSH-KDF, and TLS-KDF for the new FIPS standard FIPS-140-3 to perform known answer tests during the Power-On Self Tests (POSTs). These tests are added to the OpenSSL FIPS object module implementation.

Command Syntax

Code Block
% set system admin <SYSTEM NAME> fips-140-3 mode <disabled | enabled>

Command Parameters

Parameter

Description

fips-140-3 mode

Use this object to enable FIPS-140-3 mode.

  • disabled (default)
  • enabled 

NOTE: Once you enable the fips-140-3 mode, you cannot manually disable it. A fresh software installation is required to set the FIPS-140-3 mode back to 'disabled'.

Configuration Example

Code Block
set system admin vsbcSystem fips-140-3 mode enabled