550-06508 Enabling FIPS 140 Physical Security (Level2) for SBC Core Appliance

Contents

Physical Security

The 

and conform to FIPS 140-2 Level 2 physical security requirements. This document details how to place and maintain the licensed and in a FIPS 140-2 Level 2 approved operational state.

Tamper Evident Label Application and Management

The

and may be licensed to conform to FIPS 140-2 Level 2. The Crypto Officer is responsible for applying and inspecting tamper evident labels to the FIPS-licensed system to ensure that it maintains the approved mode of operation. The Crypto Officer must verify that all tamper evident labels are in place and undamaged on a regular basis; if a label is damaged or has been removed, then the CO must insure the label is replaced. Figure X-X illustrates a tamper evident label that has been tampered with. The Crypto Officer shall be present whenever the tamper evident labels are removed or installed and return the system to an approved FIPS 140-2 Level 2 state. If the tamper evident labels require replacement, you may purchase new replacement label kits (821-00535). 

Applying Labels

Ensure to clean the surface where to place the label with isopropyl alcohol and dry it thoroughly. Do not touch or blow on the surface after cleaning it to avoid contaminating the surface. Using finger/thumb pressure, slowly roll back the liner (backing material) to expose the adhesive side of the label. Do not touch the adhesive with your fingers or the label may become spoiled (i.e., tampered) Place the label in the specified location and apply very firm pressure across the entire label surface ensuring full coverage is achieved. Allow the label adhesive to cure for at least 30 minutes – full adhesion is achieved after 24 hours.

Label Kits

Only the Crypto Officer shall apply the Label kits using the label kit "821-00535" supplied by Ribbon Communications. Each label kit consists of a bag of six identical ½" x 2" labels for one

SBC appliance. All six labels are used on the . For the , only three labels are used –  the Crypto Officer must destroy the remaining three labels.

Inspect each label kit. If any of the following situations occur, reject the labels and notify

.

• The label bag has been opened.
• All labels are not identical and/or do not have matching serial numbers.
• The labels appear to be tampered with.

An example of a label that was tampered with is shown below.

Apply Labels to the SBC 5400

The

requires three tamper evident labels, 

• one on the left side of the front upper surface bridging the bezel and cover,
• one on the right side of the front bottom surface bridging the bezel and chassis base, and
• one on the upper surface of the rear of the cover bridging to the DSP2X subassembly.

Bezel and Cover

1. Remove the label from its liner.
2. Place label onto the bezel approximately where shown taking care not wrap the label around the front surface of the bezel. Using firm pressure, smooth out the label from one end to the other.
3. Confirm the label bridges the bezel and the cover.

Bezel and Chassis Base

1. Remove the label from its liner.
2. Place the label onto the bezel approximately where shown (below) taking care to NOT wrap the label around the front surface of the bezel. Using firm pressure, smooth out the label from one end to the other.
3. Confirm the label bridges the bezel and the chassis base.

Cover and DSP2X Tray

1. Remove the label from its liner.
2. Place label onto the cover approximately where shown, starting at the edge, wrap label around back surface. Using firm pressure, smooth out label from one end to the other.
3. Confirm label bridges the cover and the DSP2X tray.

Apply Labels to the SBC 7000

The

requires six tamper evident labels,

• one on the top surface that bridges the bezel and top surface of the chassis,
• one that bridges the top surface of the chassis and the cover,
• two that bridges the cover and sides of the chassis, one on each side, and
• two that to bridge each side of the CSC 100 to the chassis body.

Bezel and Top Surface of Chassis

1. Remove the label from its liner.
2. Place the label onto the bezel approximately where shown taking care to NOT wrap the label around the front edge of the bezel. Using firm pressure, smooth out the label from one end to the other.
3. Confirm the label bridges the bezel and the top surface of the chassis.

Cover and Top Surface of Chassis

1. Remove the label from its liner.
2. Place the label onto the chassis approximately where shown. Using firm pressure, smooth out the label from one end to the other.
3. Confirm the label bridges the cover and the top surface of the chassis.

Cover and First Side of Chassis

1. Remove the label from its liner.
2. Place the label onto the cover approximately where shown. Starting at the edge, wrap the label around the side surface. Using firm pressure, smooth out the label from one end to the other.
3. Confirm the label bridges the cover and the side of the chassis.

Cover and Second Side of Chassis

1. Remove the label from its liner.
2. Place the label onto the cover approximately where shown. Starting at the edge, wrap the label around the side surface. Using firm pressure, smooth out the label from one end to the other.
3. Confirm the label bridges the cover and the side of the chassis.

CSC 100 and First Side of Chassis

1. Remove the label from its liner.
2. Place the label onto the CSC 100 approximately where shown. Starting at the edge, wrap the label around the side surface. Using firm pressure, smooth out label from one end to the other.
3. Confirm the label bridges the CSC 100 and the side of the chassis.

CSC 100 and Second Side of Chassis

1. Remove the label from its liner.
2. Place the label onto the CSC 100 approximately where shown. Starting at the edge, wrap the label around the side surface. Using firm pressure, smooth out label from one end to the other.
3. Confirm the label bridges the CSC 100 and the side of the chassis.

Inspect Labels

The Crypto Officer is responsible to inspect the FIPS labels at regular intervals to ensure the

product maintains FIPS 140-2 Level 2 compliance. The Crypto Officer must verify that all of the tamper evident labels are in place and show no signs of tampering. The Crypto Officer shall inspect the following:

• Missing or misplaced labels – ensure labels are present and they are in the proper locations indicated in this document
• Labels match the
  Unable to show "metadata-from": No such page "_space_variables"
  label (shown below) for style, size and color
• Serial numbers on all labels are identical and match the recorded serial numbers
• Indication of tampering – if tampered with, reject the labels and notify
  Unable to show "metadata-from": No such page "_space_variables"