Click Apply to run the systemsettings configurator
The Commit Config button will no longer be displayed in the top right-hand corner of the screen and
configurations will no longer be queued.
11.6 FIPS Mode
The Advanced Console Servers (LES1208A-R2, LES1216A-R2, LES1232A, LES1248A-R2) all use an
embedded cryptographic module that has been validated to meet the FIPS 140-2 standards.
Note The US National Instit ute of Standards and Technology (NIS T ) publishes the FIPS (Federal
Information Processing Standard) series of standards. FIPS 140-1 and FIPS 140-2 are both
technical standards and worldwide de-f acto standards for the implementation of cryptographic
modules. These standards and guidelines are issued by NIST for use gov ernment-wide. NIST
develops FIPS when there are compelling F ederal government re qui rements such as for security
and interoperabili t y and there are no acceptable industry standards or solutions.
Advanced Console S erv ers (LES1408A, LES1416A, LES1432A , LES1448A, LES1308A,
LES1316A, LES1332A, LES1348A, LES1208A-R2, LES1216A-R2, LE S1232A, LES1248A-R2)
use an embedded OpenSSL cryptographic module that has been validated to meet the FI P S 140-
2 standards and has received Certificat e #1051
When configured in FIPs mode all SSH, HTTPS and SDT Connector access to all services on the advanced
console servers will use the embedded FIPS compliant cryptographic module. To connect you must also
be using cryptographic algorithms that are FIPs approved in your browser or client or the connection will
fail.
Select the System: Administration menu option
Check FIPS Mode to enable FIPS mode on boot, and check Reboot to safely reboot the console
server
Click Apply and the console server will now reboot. It will take several minutes to reconnect as
secure communications with your browser are validated, and when reconnected it will display
“FIPs mode: Enabled” in the banner
Not To enable FIPS mode from the command line, login and run these commands:
config -s config.system.fips=on
touch /etc/config/FIPS
chmod 444 /etc/config/FIPS
flatfsd -b
The final command saves to flash and reboots the unit. The unit will take a few minutes
to boot into FIPS mode. To disable FIPS mode:
config -d config.system.fips
rm /etc/config/FIPS
flatfsd –b
_____________________________________________________________________
724-746-5500 | blackbox.com Page 202