Fips Compliance; Enabling Configuration Encryption; Saving The Running Configuration - HP FlexFabric 7900 Series Configuration Manual

interface FortyGigE1/0/1
port link-mode route
ip address 1.1.1.1 255.255.255.0
#

FIPS compliance

The device supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for features,
commands, and parameters might differ in FIPS mode and non-FIPS mode. For more information about
FIPS mode, see Security Configuration Guide.

Enabling configuration encryption

Configuration encryption enables the device to encrypt a startup configuration file automatically when
saving the running configuration. This function provides the following methods:
• Private key method—Any HP device running Comware V7 software can decrypt the encrypted
configuration file.
Public key method—Any HP device can decrypt the encrypted configuration file.
•
To enable configuration encryption:
Step
1. Enter system view.
2. Enable configuration
encryption.

Saving the running configuration

When saving the running configuration to a configuration file, you can specify the file as the next-startup
configuration file.
If you are specifying the file as the next-startup configuration file, use one of the following methods to
save the configuration:
Fast mode—Use the save command without the safely keyword. In this mode, the device directly
•
overwrites the target next-startup configuration file. If a reboot or power failure occurs during this
process, the next-startup configuration file is lost. You must specify a new startup configuration file
after the device reboots (see
• Safe mode—Use the save command with the safely keyword. Safe mode is slower than fast mode,
but more secure. In safe mode, the system saves configuration in a temporary file and starts
overwriting the target next-startup configuration file after the save operation is complete. If a reboot
or power failure occurs during the save operation, the next-startup configuration file is still retained.
HP recommends that you use the safe mode if the power source is not reliable or you are remotely
configuring the device.
To save the running configuration, perform either of the following tasks in any view:
Command
system-view
configuration encrypt { private-key |
public-key }
"Specifying a next-startup configuration
90
Remarks
N/A
By default, configuration
encryption is disabled.
Configuration is saved
unencrypted.
file").