About FIPS Mode
When FIPS mode is enabled, the video system will operate
according to NIST FIPS 140-2 Level 1 requirements. This means
that only services and cryptographic algorithms that are accepted
according to this standard will be used. Options and menu items
which is not approved will be grayed out and/or not be selectable
in the menus.
Certificate management
NIST issues certificates to products that has been verified and
tested to comply with this standard, as of this writing TANDBERG
is in the process of obtaining such a certificate.
How to activate FIPS Mode
1.
Enter the Security Settings menu and set the FIPS mode to
ON
.
2.
A warning box will appear:
“You are about to activate FIPS mode. The system
will be restarted when saving this page.”
•
Press the
CANCEL
button to leave without any changes.
•
Press the
SAVE AND RESTART
button for the changes to take
effect.
How to deactivate FIPS Mode
1.
Enter the Security Settings menu and set the FIPS mode to
OFF
.
2.
A warning box will appear:
“
You are about to deactivate FIPS mode. The system
will be restarted when saving this page.
“
•
Press the
CANCEL
button to leave without any changes.
•
Press the
OK
button to proceed and press the
SAVE AND RESTART
button for the changes to take effect.
Menus disabled in FIPS mode
•
Main Menu > Presentation > VNC
•
Control Panel > Diagnostics > View Administrator Settings > Video
quality > VNC
•
Control Panel > Diagnostics > View Administrator Settings > Video
name > VNC
•
Control Panel > General > Permissions > Far End ISDN System
Upgrade
•
Control Panel > Call Quality > Video quality > VNC
•
Control Panel > Security > Encryption Mode > DES
•
Control Panel > Security > VNC Password
•
Control Panel > Presentation Settings > Call Video Source > VNC
•
Control Panel > Presentation Settings > Presentation Source > VNC
•
Control Panel > Presentation Settings > Snapshot Source > VNC
•
Control Panel > Video > Video Name > VNC
•
Control Panel > Security > Streaming Password
•
Control Panel > Menu Settings > Icons > Encryption (possible to turn
off the security icon)
•
Control Panel > Network > LAN Settings > SIP Settings > Autentication
•
Control Panel > Network > LAN Settings > Wireless LAN Settings (and
all sub menus)
•
Control Panel > Network > LAN Settings > IEEE802.1x
•
FIPS - Federal Information Processing Standards.
•
NIST - National Institute of Standards and Technology, the
issuer of validation certificates.
•
Certificate - Text file which indicates a trusted third party
(issuer or CA) verifying the authenticity of the unit (in this
context).
•
CA - Certificate authority, issuer of (root) certificates.
D14033.06—AUGUST 2010
325
MXP
Administrator Guide
Contents
Introduction
Getting started
The menu structure
The settings library
Using the system
Physical interfaces
Peripheral equipment
Contact us
Appendices
Appendices
