Carrier Access 1750 user manual Shell Commands Fips Mode, Fipsmode, Selftest

Security Management (FIPS Mode)

Shell Commands (FIPS Mode)

Shell Commands (FIPS Mode)

fipsmode ... 11-34selftest ... 11-34settimeout ... 11-35 sshdShow ... 11-35 sshdSessionShow ... 11-37 scp ... 11-38 resetSecurID ... 11-39 zeroize ... 11-40

Authorized Access to Shell Commands ... 11-41

Shell commands are UNIX-like commands provided by the embedded operating system. Command syntax is available using the “help” command. Authorized Access to each command is based on the user privilege level.

fipsmode

NOTE: The procedure for using this command is given in “Enabling FIPS Mode” on page 11-18.

The FIPS mode can only be changed by a SuperUser (Crypto Officer). At the Broadmore prompt, type fipsmode (to see current value) or fipsmode on (to enable) or fipsmode off (to disable). After executing this command, the Broadmore must be rebooted for the change to take effect.

selftest

Self-tests of the FIPS algorithms are performed automatically during power-up. A SuperUser (Crypto Officer) can perform a manual self-test at any time. At the Broadmore prompt, type selftest. The following message will be displayed if all tests pass.

AES Passed

DES Passed

TDES Passed

11-34 Broadmore 1750 - Release 4.6