Cisco 1841 - User Manual

Corporate Headquarters:
© 2005 Cisco Systems, Inc. All rights reserved.
Cisco Systems, Inc., 170 West Tasman Drive, San Jose, CA 95134-1706 USA
Cisco 1841 Integrated Services Router with
AIM-VPN/BPII-Plus and Cisco 2801
Integrated Services Router with
AIM-VPN/EPII-Plus FIPS 140-2 Non
Proprietary Security Policy
Level 2 Validation
Version 1.3
December 14, 2005
Introduction
This document is the non-proprietary Cryptographic Module Security Policy for the Cisco 1841
Integrated Services Routers with AIM-VPN/BPII-Plus and Cisco 2801 Integrated Services Routers with
AIM-VPN/EPII-Plus. This security policy describes how the Cisco 1841 and Cisco 2801 Integrated
Services Routers (Hardware Version: 1841 or 2801; AIM-VPN/BPII-Plus Version: 1.0, Board Version:
C1; AIM-VPN/EPII-Plus Version: 1.0, Board Version: D0; Firmware Version: 12.3(11)T03) meet the
security requirements of FIPS 140-2, and how to operate the router in a secure FIPS 140-2 mode. This
policy was prepared as part of the Level 2 FIPS 140-2 validation of the Cisco 1841 and Cisco 2801
Integrated Services Routers.
FIPS 140-2 (Federal Information Processing Standards Publication 140-2—Security Requirements for
Cryptographic Modules) details the U.S. Government requirements for cryptographic modules. More
information about the FIPS 140-2 standard and validation program is available on the NIST website at
http://csrc.nist.gov/cryptval/.
This document contains the following sections:
• Introduction, page 1
• Cisco 1841 and Cisco 2801 Routers, page 3
• Secure Operation of the Cisco 1841 or Cisco 2801 router, page 21
• Related Documentation, page 22

Summary

Roles and Services

Crypto Officer Services

Physical Security

Cryptographic Key Management

Key Zeroization

Details the methods for securely erasing cryptographic keys from the router.

Self-Tests

IOS Self Tests

Lists the self-tests conducted on the Cisco IOS software image.

FPGA and AIM Self Tests

Secure Operation of the Cisco 1841 or Cisco 2801 router

Initial Setup

Covers initial setup steps, including tamper labels and disabling password recovery.

System Initialization and Configuration

Details system initialization, including IOS image, boot field, and password configuration.

IPSec Requirements and Cryptographic Algorithms

Cisco 1841 Specifications