User Guide for FibeAir® IP-20 All-Outdoor Products, CeraOS 10.5
Page 103 of 825
Ceragon Proprietary and Confidential
2.17
Operating in FIPS Mode
Notes
:
This feature is only relevant for IP-20C and IP-20S units.
FIPS 140-2 compliance is only available with the IP-20 Assured
platform. The IP-20 Assured platform is supported with CeraOS 8.3. It
is not supported with CeraOS 10.5.
FibeAir IP-20C and IP-20S can be configured to be FIPS 140-2-compliant in specific
hardware and software configurations, as described in this section.
2.17.1
Requirements for FIPS Compliance
For a full list of FIPS requirements, refer to the
Ceragon IP-20 FIPS 140-2 Security
Policy
, available upon request. It is the responsibility of the customer to ensure
that these requirements are met.
For an IP-20C or an IP-20S node to be FIPS-compliant, the unit must be FIPS-
compliant hardware. A FIPS-compliant IP-20C or IP-20S unit has a unique part
number ending in the letters AF, in the following format:
•
IP-20C-***-AF
•
IP-20S-***-AF
Note:
To display the part numbers of the hardware components of your IP-
20 unit, see
Special labels must be affixed to a FIPS-compliant IP-20C or IP-20S unit. These
labels are tamper-evident and must be applied in such a way that it is not possible
to open or tamper with the unit. Replacement labels can be ordered from
Ceragon Networks, part number BS-0341-0. Tamper-evident labels should be
inspected for integrity at least once every six months. For further details, refer to
the
FibeAir IP-20C Installation Guide
or the
FibeAir IP-20S Installation Guide
.
2.17.2
Enabling FIPS Mode
To set the unit to operate in FIPS mode:
1 Select
Platform > Security > General > Configuration
. The Security General
Configuration page opens.