HP Server Console Switch G2 User Manual page 8

IMPORTANT:
IMPORTANT:
KVM switches use an embedded FIPS 140-2 validated cryptographic module (Cerificate #1051) running on
a Linux PPC platform per FIPS 140-2 Implementation Guidance section G.5 guidelines
(http://csrc.nist.gov/groups/STM/cmvp/documents/fips140-2/FIPS1402IG.pdf).
The FIPS mode can be enabled or disabled via the OBWI, Local Port, or DSView plug-in. A reboot is required
to enable or disable the FIPS mode. A firmware upgrade to this version or setting the state to the default state
(Setup Port menu) disables the FIPS mode.
In FIPS mode, encryption ciphers are restricted to AES or 3DES. When FIPS is enabled, if the keyboard,
mouse, or video encryption is set to 128-bit SSL or DES, the encryption level is automatically changed to AES.
With FIPS enabled, the files are saved, or restored, using AES, a FIPS compatible algorithm. When FIPS is
disabled, the User Database and Appliance Configuration files saved from or restored to the appliance as
external files are encrypted, or decrypted, using DES.
The external files are encrypted even when the user does not fill in the Password parameter in the Save (or
Load) dialog on the OBWI, in which case a default OEM password is used for encryption or decryption.
One result of enabling the FIPS module is to render previously saved User Database and Appliance
Configuration files incompatible. In this case, temporarily disable the FIPS module.
To disable the FIPS module:
Reboot the appliance.
1.
Restore the previously saved database or configuration file.
2.
Re-enable the FIPS module.
3.
Reboot the appliance.
4.
Save the file externally again while the FIPS module is enabled.
5.
The new saved external file is compatible with the appliance as long as the appliance is running with the FIPS
mode enabled. Database and configuration files saved with the FIPS module enabled are not compatible for
restoring a database or configuration file to an appliance without the FIPS module enabled or to an
appliance with older firmware not supporting the FIPS module.
The FIPS mode of operation is initially disabled and must be enabled to operate.
The Setup port factory default setting automatically disables the FIPS module.
Product features 8