NetApp AltaVault AVA400 - Configuring AltaVault appliances for FIPS-compliant cryptography

NetApp AltaVault Cloud Integrated Storage Administration Guide 103
Beta Draft
CHAPTER 8 Configuring AltaVault appliances for
FIPS-compliant cryptography
This chapter includes the following sections:
 “What is FIPS?” on page 103
 “Understanding FIPS on AltaVault” on page 103
 “Configuring AltaVault for FIPS compliance” on page 105
 “Configuring AltaVault appliances for FIPS-compliant cryptography” on page 105
 “Disabling FIPS mode” on page 111
 “Verifying FIPS mode in system logs” on page 111
 “FIPS CLI” on page 112
You configure and manage FIPS mode through the Command-Line Interface (CLI). For detailed information about the
CLI, see the NetApp AltaVault Cloud Integrated Storage Command-Line Reference Guide.
What is FIPS?
Federal Information Processing Standard (FIPS) is a publicly announced set of validation standards developed by the
United States National Institute of Standards and Technology (NIST) for use by government agencies and by
government contractors.
FIPS 140-2 details the U.S. and Canadian Government requirements for cryptographic modules. Protection of a
cryptographic module within a security system is necessary to maintain the confidentiality and integrity of the
information protected by the module.
This standard specifies the security requirements satisfied by a cryptographic module utilized within a security system
protecting sensitive but unclassified data.
Understanding FIPS on AltaVault
This section describes the NetApp Cryptographic Security Module as well as the system features that are FIPS
compliant and those that are not.
AltaVault offers end-to-end security for data at rest and in flight using FIPS 140-2 level 1-compliant encryption with
the NetApp Cryptographic Security Module.