Opengear ACM5000, User Manual

Page: 233 / 335

Console Server & Router User Manual
233
Opengear advance console servers use an embedded OpenSSL cryptographic module that has been validated to
meet the FIPS 140-2 standards and has received Certificate #1051
When configured in FIPs mode all SSH, HTTPS and SDT Connector access to all services on the advanced console
servers will use the embedded FIPS compliant cryptographic module. To connect you must also be using cryptographic
algorithms that are FIPs approved in your browser or client or the connection will fail.

Select the System: Administration menu option

Check FIPS Mode to enable FIPS mode on boot, and check Reboot to safely reboot the console server

Click Apply and the console server will now reboot. It will take several minutes to reconnect as secure
communications with your browser are validated
, and when reconnected it will display “
FIPs mode: Enabled
” in
the banner
Note: To enable FIPS mode from the command line, login and run these commands:
config -s config.system.fips=on
touch /etc/config/FIPS
chmod 444 /etc/config/FIPS
flatfsd -b
The final command saves to flash and reboots the unit. The unit will take a few minutes to boot into FIPS mode.
To disable FIPS mode:
config -d config.system.fips
rm /etc/config/FIPS
flatfsd
–b