FibeAir IP-20C/S/E
User Guide
Ceragon Proprietary and Confidential
Page 55 of 597
2.13
Operating in FIPS Mode
Note:
This feature is only relevant for IP-20C and IP-20S units.
From CeraOS version 8.3, FibeAir IP-20C and IP-20S can be configured to be
FIPS 140-2-compliant in specific hardware and software configurations, as
described in this section.
2.13.1
Requirements for FIPS Compliance
For a full list of FIPS requirements, refer to the Ceragon IP-20 FIPS 140-2
Security Policy, available upon request. It is the responsibility of the customer
to ensure that these requirements are met.
For an IP-20C or an IP-20S node to be FIPS-compliant, the unit must be FIPS-
compliant hardware. A FIPS-compliant IP-20C or IP-20S unit has a unique part
number ending in the letters AF, in the following format:
IP-20C-***-AF
IP-20S-***-AF
Note:
To display the part numbers of the hardware components of
your IP-20 unit, see Displaying Unit Inventory.
Special labels must be affixed to a FIPS-compliant IP-20C or IP-20S unit. These
labels are tamper-evident and must be applied in such a way that it is not
possible to open or tamper with the unit. Replacement labels can be ordered
from Ceragon Networks, part number BS-0341-0. Tamper-evident labels
should be inspected for integrity at least once every six months. For further
details, refer to the FibeAir IP-20C Installation Guide or the FibeAir IP-20S
Installation Guide.