Aruba AP-125 TEL Placement | Aruba Networks FIPS 140-2 specs

Figure 6: AP-124 Bottom view

3.2.3 Aruba AP-125 TEL Placement

This section displays all the TEL locations on the Aruba AP-125. The AP125 requires a minimum of 3 TELs to be applied as follows:

3.2.3.1To detect opening of the chassis cover:

1.Spanning the top and bottom covers on the left side

2.Spanning the top and bottom covers on the right

3.2.3.2To detect access to restricted ports

3.Spanning the serial port

The tamper-evident labels shall be installed for the module to operate in a FIPS approved mode of operation.

Following is the TEL placement for the Aruba AP-125:

13

Image 13

Aruba Networks FIPS 140-2 manual Aruba AP-125 TEL Placement, AP-124 Bottom view

Contents

Fips 140-2 Non-Proprietary Security Policy Page Aruba Dell Relationship Acronyms and Abbreviations ServicesAruba AP-120 Series Security Levels Physical SecurityPage Aruba Dell Relationship IntroductionAcronyms and Abbreviations GHz LAN Aruba AP-120 Series Product OverviewPhysical Description Aruba Part Number Dell Corresponding Part Number PWR Indicator LEDs Label Function Action StatusEnet Label Function Action Status Security Levels Module ObjectivesPhysical Security Applying TELs AP-124 Front view Aruba AP-124 TEL Placement AP-124 Back view AP-124 Bottom view Aruba AP-125 TEL Placement AP-125 Front view AP-125 Right view AP-125 Bottom view Inspection/Testing of Physical Security Mechanisms Modes of Operation Configuring Remote AP Fips Mode Enable Fips mode on the AP. This accomplished by going to Configuring Remote Mesh Portal Fips Mode Configuring Remote Mesh Point Fips Mode Operational Environment Verify that the module is in Fips mode Fips 140-2 Logical Interfaces Module Physical Interface Logical Interfaces Crypto Officer Authentication Roles, Authentication and ServicesRoles Wireless Client Authentication User AuthenticationStrength of Authentication Mechanisms Authentication Mechanism Strength WPA2-PSK Crypto Officer Services ServicesService Description CSPs Accessed see section WPA2 PSK Service Description CSPs User ServicesService Wireless Client Services ∙ FTP ∙ Tftp ∙ NTP Unauthenticated Services Non-FIPS Approved Algorithms Cryptographic Algorithms Hmac Critical Security Parameters RNG PTK PSKAES-CCM GTK GMK Self Tests For an AES Cavium hardware Post failure