Black Box LES1508A - FIPS Mode

_____________________________________________________________________
724-746-5500 | blackbox.com Page 232
!!#X% ZIB&%G36'%%
C6(* @)B-4.()* ?04#0,(* 3(%B(%#* NF73JULb@; =U<* F73JUJc@;=U<* F73J U V U @ <* F73JUdb@;=UO* -,,* '#(* -4* (M&())()*
.%D:$09%-:6".*M0)',(*$6-$*6-#*&((4*B-,")-$()*$0*M(($*$6(*^Q>3*JdL;U*#$-4)-%)#2*
Note The US National Institute of Standards and Technology (NIST) publishes the FIPS (Federal Information
Processing Standard) series of standards. FIPS 140-1 and FIPS 140-2 are both technical standards and
worldwide de-facto standards for the implementation of cryptographic modules. These standards and guidelines
are issued by NIST for use government-wide. NIST develops FIPS when there are compelling Federal
government requirements such as for security and interoperability and there are no acceptable industry standards
or solutions.
Advanced Console Servers (LES1408A, LES1416A, LES1432A, LES1448A, LES1308A, LES1316A, LES1332A,
LES1348A, LES1208A-R2, LES1216A-R2, LES1232A, LES1248A-R2) use an embedded OpenSSL
cryptographic module that has been validated to meet the FIPS 140-2 standards and has received Certificate
#1051
E6(4*.04A"9'%()*"4*^Q>#*M0)(<*-,,*33]<*]CC>3<*-4) *3!C* ?044(.$0%*-..(##* $0*-,,*#(%B".(#*04*$6(*-)B-4.()*.04#0,(*$&()&($*
5",,* '#(* $6(* (M&())()* ^Q>3* .0M:,"-4$* .%D:$09%-:6".* M0)',(2* C0* .044(.$<* D0 '* M '#$* -,#0* &(* '#"49* .%D:$09%-:6 ".*
-,90%"$6M#*$6-$*-%(*^Q>#*-::%0B()*"4*D0'%*&%05#(%*0%*.,"(4$*0%*$6(*.044(.$"04*5",,*A-",2**
 3(,(.$*$6(%&84('9:%=692,24(-.(23,*M(4'*0:$"042*
 ?6(./*ZIB&%G36'%$0*(4-&,(*^Q>3*M0) (*0 4*&0 0 $<%-4)*.6(./*D'733(%$0*#-A(,D*%(&00$*$6(*.0 4# 0,(*#( %B(%2*
 ?,"./%=**/8*-4)*$6(*.04#0,(*#(%B(%*5 ",,*405*%(&00$2*Q$*5",,*$-/(*#(B(%-,*M"4'$(#*$0*%(.044(.$*-#*#(.'%(*
.0MM'4".-$"04#*5"$6*D0'%*&%05#(%*-%(*B-,")-$()<*-4)*56(4*%(.044(.$()*"$*5",,*)"#:,-D*lUGQ$'@"9&g'T#5:%&9m*"4*
$6(*&-44(%2*
*
Note* To enable FIPS mode from the command line, login and run these commands:
config -s config.system.fips=on
touch /etc/config/FIPS
chmod 444 /etc/config/FIPS
flatfsd -b
The final command saves to flash and reboots the unit. The unit will take a few minutes to boot into FIPS mode.
To disable FIPS mode:
config -d config.system.fips
rm /etc/config/FIPS
flatfsd –b
*