Chapter 6: SX II Administration
170
Enable FIPS 140-2
For government and other high security environments, enabling FIPS
140-2 mode may be required.
The SX II uses an embedded FIPS 140-2-validated cryptographic
module running on a Linux
®
platform per FIPS 140-2 Implementation
Guidance section G.5 guidelines.
Once this mode is enabled, the private key used to generate the SSL
certificates must be internally generated; it cannot be downloaded or
exported.
Note that performance may be impacted once FIPS 140-2 mode is
enabled.
To enable FIPS 140-2:
1. Access the Security Settings page.
2. Enable FIPS 140-2 Mode by selecting the Enable FIPS 140-2
checkbox in the Encryption & Share section of the Security Settings
page.
You will utilize FIPS 140-2 approved algorithms for external
communications once in FIPS 140-2 mode.
The FIPS cryptographic module is used for encryption of session
traffic.
3. Reboot the SX II.
Required
Once FIPS mode is activated, 'FIPS Mode: Enabled' will be displayed
in the Device Information section in the left panel of the screen.
For additional security, you can also create a new Certificate Signing
Request once FIPS mode is activated. This will be created using the
required key ciphers. Upload the certificate after it is signed or create
a self-signed certificate. The SSL Certificate status will update from
'Not FIPS Mode Compliant' to 'FIPS Mode Compliant'.
When FIPS mode is activated, key files cannot be downloaded or
uploaded. The most recently created CSR will be associated
internally with the key file. Further, the SSL Certificate from the CA
and its private key are not included in the full restore of the backed-
up file. The key cannot be exported from SX II.
Summary of Contents for Dominion SX II
Page 75: ...Chapter 5 Raritan Serial Console RSC Help 68 2 Click Yes when prompted to confirm...
Page 130: ...Chapter 6 SX II Administration 123 6 Click OK...
Page 165: ...Chapter 6 SX II Administration 158 17 Click OK Apply Settings to Other Ports...
Page 260: ...253 Dominion SX II Overview Appendix C FAQs...
Page 267: ...Appendix C FAQs 260 Installation Management Configuration...
