Versions Compared

Old Version 8

changes.mady.by.user Ribbon Communications

Saved on

compared with

New Version Current

changes.mady.by.user Ribbon Communications

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.


Metadata list
hiddentrue
||Product on coverpage|SBC Core|
||Product Release|10.1.x|
||Document Title|Enabling FIPS 140 Physical Security (Level2) for SBC Core Appliance|
||Document Number|550-06508|
||Document Revision|01.01|
||Filename|550-06508_01.01_SBC_Core_10.1.x_FIPS_140_Physical_Security_Lvl2|


Add_workflow_for_techpubs
AUTH2UserResourceIdentifier{userKey=8a00a02355cd1c2f0155cd26cb8305e9, userName='null'}
AUTH1UserResourceIdentifier{userKey=8a00a02355cd1c2f0155cd26cd5909df8a00a02355cd1c2f0155cd26cb8305e9, userName='null'}
JIRAIDAUTHSBX-130920
REV5UserResourceIdentifier{userKey=8a00a02355cd1c2f0155cd26cb8305e9, userName='null'}
REV6UserResourceIdentifier{userKey=8a00a02355cd1c2f0155cd26cd5909df8a00a02355cd1c2f0155cd26cb8305e9, userName='null'}
REV3UserResourceIdentifier{userKey=8a00a02355cd1c2f0155cd26cbbf066c8a00a02355cd1c2f0155cd26ca7e0466, userName='null'}
REV1UserResourceIdentifier{userKey=8a00a02355cd1c2f0155cd26ca7e04668a00a02355cd1c2f0155cd26cbbf066c, userName='null'}


Panel
borderColor#3B6AB0
bgColor#FFFFFF
titleBGColor#C7E1FB
borderStylesolid
titleTable of Contents

Table of Contents
maxLevel4
minLevel2


Noprint


Panel
bgColorwhite
borderWidth2

Document ID: 550-06508

Software Release: 10.01R004

Document Version: 01.01

Published:  


Click here to download a PDF copy of this document.


Physical Security

FIPS Level 2 requires labels for the The 

Spacevars
0longcompany
Spacevars
0model5
and
Spacevars
0series2
conform to FIPS 140 Level 2 physical security requirements. This document details how to place and maintain the FIPS-licensed
Spacevars
0model5
and
Spacevars
0series2
into a FIPS 140 Level 2 approved operational state.

Tamper Evident Label Application and Management

The

Spacevars
0model5
and
Spacevars
0series2
may be licensed to conform to FIPS 140 Level 2. The Crypto Officer is responsible for applying and inspecting tamper-evident labels to the FIPS-licensed
Spacevars
0company
system to ensure that it maintains the approved mode of operation. The Crypto Officer must verify that all tamper-evident labels are in place and undamaged on a regular basisregularly; if a label is damaged or has been removed, then the CO must insure ensure the label is replaced. The figure figure Example of Tampering a Label illustrates a tamper-evident label that has been tampered with. The Crypto Officer shall be present whenever When the tamper-evident labels are removed or installed and , the Crypto Officer must be present and return the system to an approved FIPS 140 Level 2 state. If the tamper-evident labels require replacement, you may purchase new replacement label kits (821-00535). 

Info
titleNote

The Crypto Officer is responsible to store for storing the label kits at room temperature with less than 50% humidity for up to one year.

Applying Labels

Ensure to clean Clean the surface where to place the label is placed with isopropyl alcohol and dry it thoroughly. Do not touch or blow on the surface after cleaning it to avoid contaminating the surfaceit. Using finger/thumb pressure, slowly roll back the liner (backing material) to expose the adhesive side of the label. Do not touch the adhesive with your fingers or ; the label may become spoiled (i.e., tampered). Place the label in the specified location and apply very firm substantial pressure across the entire label surface, ensuring full complete coverage is achieved. Allow the label adhesive to cure for at least 30 minutes – full adhesion is achieved after 24 hours.

Pagebreak

Label Kits

Only the Crypto Officer shall should apply the Label kits using the label kit "821-00535" supplied by Ribbon Communications. Each label kit consists of a bag of six identical ½" x 2" labels for one

Spacevars
0company
SBC appliance. All six labels are used on the
Spacevars
0series2
. For the
Spacevars
0model5
, only three labels are used –  the Crypto Officer must destroy the remaining three labels.

Inspect each label kit. If any of the following situations occur, reject the labels and notify

Spacevars
0longcompany
.

  • The label bag has been opened.
  • All labels are not identical and /or do not have matching serial numbers.
  • The labels appear to be tampered with.

An example of a label that was tampered with is shown below.

Caption
0Figure
1Example of Tampering a Label
3Example of Tampering a Label

Apply Labels to the SBC 5400

The

Spacevars
0model5
requires three tamper evident labels, 

  • one on the left side of the front upper surface bridging the bezel and cover,
  • one on the right side of the front bottom surface bridging the bezel and chassis base , and
  • one on the upper surface of the rear of the cover bridging to the DSP2X subassembly.

Bezel and Cover

Caption
0Figure
1Bezel and Cover

  1. Remove the label from its liner.
  2. Place the label onto the bezel approximately where shown, taking care not to wrap the label around the front surface of the bezel. Using firm pressure, smooth out the label from one end to the other.
  3. Confirm the label bridges the bezel and the cover.

Pagebreak

Bezel and Chassis Base

Caption
0Figure
1Bezel and Chassis Base

  1. Remove the label from its liner.
  2. Place the label onto the bezel approximately where shown (below) taking care to NOT wrap the , not wrapping the label around the front surface of the bezel. Using firm pressure, smooth out the label from one end to the other.
  3. Confirm the label bridges the bezel and the chassis base.

Cover and DSP2X Tray

Caption
0Figure
1Cover and DSP2X Tray

  1. Remove the label from its liner.
  2. Place the label onto the cover approximately where shown, starting at the edge, and wrap the label around the back surface. Using firm pressure, smooth out a label from one end to the other.
  3. Confirm the label bridges, the cover, and the DSP2X tray.

Pagebreak

Apply Labels to the SBC 7000

The

Spacevars
0series2
requires six tamper evident labels,

  • one on the top surface that bridges the bezel and top surface of the chassis,
  • one that bridges the top surface of the chassis and the cover,
  • two that bridges the cover and sides of the chassis, one on each side, and
  • two that to bridge each side of the CSC 100 to the chassis body.
Bezel

The bezel and Top Surface of the Chassis

Caption
0Figure
1Bezel and Top Surface of Chassis

  1. Remove the label from its liner.
  2. Place the label onto the bezel approximately where shown, taking care not to NOT wrap wrap the label around the front edge of the bezel. Using firm pressure, smooth out the label from one end to the other.
  3. Confirm the label bridges the bezel and the top surface of the chassis.

Cover and Top Surface of Chassis

Caption
0Figure
1Cover and Top Surface of Chassis

  1. Remove the label from its liner.
  2. Place the label onto the chassis approximately where shown. Using firm pressure, smooth out the label from one end to the other.
  3. Confirm the label bridges the cover and the top surface of the chassis.

Pagebreak

Cover and First Side of Chassis

Caption
0Figure
1Cover and First Side of Chassis

  1. Remove the label from its liner.
  2. Place the label onto the cover approximately where shown. Starting at the edge, wrap the label around the side surface. Using firm pressure, smooth out the label from one end to the other.
  3. Confirm the label bridges the cover and the side of the chassis.

Cover and Second Side of Chassis

Caption
0Figure
1Cover and Second Side of Chassis

  1. Remove the label from its liner.
  2. Place the label onto the cover approximately where shown. Starting at the edge, wrap the label around the side surface. Using firm pressure, smooth out the label from one end to the other.
  3. Confirm the label bridges the cover and the side of the chassis.

Pagebreak

CSC 100 and First Side of Chassis

Caption
0Figure
1CSC 100 and First Side of Chassis

  1. Remove the label from its liner.
  2. Place the label onto the CSC 100 approximately where shown. Starting at the edge, wrap the label around the side surface. Using firm pressure, smooth out the label from one end to the other.
  3. Confirm the label bridges the CSC 100 and the side of the chassis.

CSC 100 and Second Side of Chassis

Caption
0Figure
1CSC 100 and Second Side of Chassis

  1. Remove the label from its liner.
  2. Place the label onto the CSC 100 approximately where shown. Starting at the edge, wrap the label around the side surface. Using firm pressure, smooth out the label from one end to the other.
  3. Confirm the label bridges the CSC 100 and the side of the chassis.

Pagebreak

Inspect Labels

The Crypto Officer is responsible to inspect for inspecting the FIPS labels at regular intervals regularly to ensure the

Spacevars
0company
product maintains FIPS 140 Level 2 compliance. The Crypto Officer must verify that all of the tamper-evident labels are in place and show no signs of tampering. The Crypto Officer shall must inspect the following:

  • Missing or misplaced labels – ensure labels are present and they are in the proper locations indicated in this document
  • Labels match the
    Spacevars
    0company
    label (shown below) for style, size and color
  • Serial numbers on all labels are identical and match the recorded serial numbers
  • Indication of tampering – if tampered with, reject the labels and notify
    Spacevars
    0company
caption
0Figure1Ribbon Tamper-Evident Label Example


3Ribbon
  • Tamper-Evident Label Example
  • Image Modified