2
Catalyst 6509 Switch, Cisco 7606 Router, and Cisco 7609 Router with VPN Services Module Certification Note
OL-6334-01
Contents
Contents
This document contains the following sections:
• References, page 2
• Document Organization, page 2
• Catalyst 6509 Switch and Cisco 7606 and Cisco 7609 Routers, page 4
• Catalyst 6509/Cisco 7606/Cisco 7609 Cryptographic Module, page 6
• Roles and Services, page 10
• Installing the Opacity Shield on the Catalyst 6509 Switch, page 12
• Installing the Opacity Shield on the Cisco 7600 Series Routers, page 15
• Physical Security, page 18
• Cryptographic Key Management, page 21
• Key Zeroization, page 25
• Self-Tests, page 25
• Secure Operation of the Catalyst 6509 Switch and the Cisco 7606 and Cisco 7609 Routers, page 26
• Obtaining Documentation and Submitting a Service Request, page 28
References
This publication deals only with operations and capabilities of the Catalyst 6509 switch and the
Cisco 7606 and Cisco 7609 routers in the technical terms of a FIPS 140-2 Cryptographic Module
Security Policy. More information is available on the Catalyst 6509 switch and the Cisco 7606 and
Cisco 7609 routers and the entire Catalyst 6500 series switches and Cisco 7600 series routers from the
following sources:
• The Catalyst 6500 series switch product descriptions can be found at:
http://www.cisco.com/en/US/products/hw/switches/ps708/index.html
• The Cisco 7600 series router product descriptions can be found at:
http://www.cisco.com/en/US/products/hw/routers/ps368/index.html
• For answers to technical or sales related questions, refer to the contacts listed on the Cisco Systems
website at www.cisco.com.
• For answers to technical or sales-related questions for the module, refer to the NIST Validated
Modules website at http://csrc.nist.gov/cryptval.
Document Organization
The Security Policy document is part of the FIPS 140-2 Submission Package. The Submission Package
also contains the following documents:
• Vendor Evidence
• Finite State Machine
• Module Software Listing