Dell AP-134, AP-135, W-AP134, W-AP135

Self-test results are written to the serial console.

In the event of a KATs failure, the AP logs different messages, depending on the error.

For an ArubaOS OpenSSL AP module and ArubaOS cryptographic module KAT failure:

AP rebooted [DATE][TIME] : Restarting System, SW FIPS KAT failed

For an AES Atheros hardware POST failure:

Starting HW SHA1 KAT ...Completed HW SHA1 AT

Starting HW HMAC-SHA1 KAT ...Completed HW HMAC-SHA1 KAT

Starting HW DES KAT ...Completed HW DES KAT

Starting HW AES KAT ...Restarting system.

Contents

Main FIPS 140-2 Non-Proprietary Security Policy for Aruba AP-134, AP-135 and Dell W-AP134, W-AP135 Wireless Access Points Page Page Page 1 Introduction 1.1 Aruba Dell Relationship 1.2 Acronyms and Abbreviations Page 2 Product Overview 2.1 AP-134 2.1.1 Physical Description Page 2.2 AP-135 2.2.1 Physical Description Page 3 Module Objectives 3.1 Security Levels 3.2 Physical Security 3.2.1 Applying TELs 3.2.2 AP-134 TEL Placement 3.2.3 AP-135 TEL Placement Page 3.2.4 Inspection/Testing of Physical Security Mechanisms 3.3 Modes of Operation 3.3.1 Configuring Remote AP FIPS Mode 3.3.2 Configuring Control Plane Security (CPSec) protected AP FIPS mode 3.3.3 Configuring Remote Mesh Portal FIPS Mode 3.3.4 Configuring Remote Mesh Point FIPS Mode 3.3.5 Verify that the module is in FIPS mode 3.4 Operational Environment 3.5 Logical Interfaces 4 Roles, Authentication and Services 4.1 Roles 4.1.1 Crypto Officer Authentication 4.1.2 User Authentication 4.1.3 Wireless Client Authentication 4.1.4 Strength of Authentication Mechanisms Page 4.2 Services 4.2.1 Crypto Officer Services Description Service CSPs Accessed Service Description CSPs Accessed 4.2.2 User Services Description Service CSPs Accessed Service Description Service CSPs Accessed 4.2.3 Wireless Client Services CSPs Accessed 4.2.4 Unauthenticated Services Page 5 Cryptographic Algorithms 6 Critical Security Parameters Page Page Page 7 Self Tests