Avaya Media Gateway G250, Руководство администратора, Страница: 709 / 840

Issue 5 June 2008 709
Operational environment
The FIPS 140-2 Area 6 Operational Environment requirements are not applicable because the
device does not support the loading and execution of un-trusted code. Avaya digitally signs
firmware images of the crypto module using RSA SHA1 digital signature. Through this
signature, the crypto module verifies the authenticity of any update to its firmware image.
Assumptions of roles
The cryptographic module supports eight distinct operator roles: Cryptographic-Officer, Read/
Write User, Read-only User, RADIUS Server, OSPF Router Peer, PPPoE Client, IKE Peer, and
Serial Number Peer.
The cryptographic module enforces the separation of roles using operator authentication. Refer
to
Table 170 for further information.
Table 170: Roles and required identification and authentication
Role Type of
authentication Authentication data Description
Cryptographic-
Officer
(Admin User) Identity-based operator
authentication Username and
Password. The module
stores user identity
information internally
through the use of an
external Radius Server
database. The owner of the
cryptographic module
who has full access to the
module’s services
User
(Read/Write User) Identity-based operator
authentication Username and
Password. The module
stores user identity
information internally
through the use of an
external Radius Server
database. An assistant to the Admin
User who has read/write
access to a subset of
configuration and status
indications
Read-only User Identity-based operator
authentication Username and
Password. The module
stores user identity
information internally
through the use of an
external Radius Server
database. An assistant to the Admin
User who has read-only
access to a subset of
module configuration and
status indications
1 of 2