Polycom VSX 3000 Manual

Non-proprietary cryptographic module security policy
Hide thumbs Also See for VSX 3000:

Advertisement

Polycom, Inc.
VSX 3000, VSX 5000, and VSX 7000s
(Firmware version: 8.5.0.2)
FIPS 140-2
Non-Proprietary Security Policy
Level 1 Validation
Document Version 1.0
Prepared for:
Prepared by:
Polycom, Inc.
Corsec Security, Inc.
4750 Willow Road
10340 Democracy Lane, Suite 201
Pleasanton, CA 94588-2708
Fairfax, VA 22030
Phone: 1.800.POLYCOM
Phone: (703) 267-6050
Fax: (925) 924-6100
Fax: (703) 267-6810
http://www.polycom.com
http://www.corsec.com
© 2007 Polycom, Inc. –
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.

Advertisement

Table of Contents
loading

Summary of Contents for Polycom VSX 3000

  • Page 1 Polycom, Inc. VSX 3000, VSX 5000, and VSX 7000s (Firmware version: 8.5.0.2) FIPS 140-2 Non-Proprietary Security Policy Level 1 Validation Document Version 1.0 Prepared for: Prepared by: Polycom, Inc. Corsec Security, Inc. 4750 Willow Road 10340 Democracy Lane, Suite 201...
  • Page 2 Non-Proprietary Security Policy, Version 1.0 Revision History Version Modification Date 2007-06-15 Polycom VSX 3000, VSX 5000, and VSX 7000s © 2007 Polycom, Inc. - This document may be freely reproduced and distributed whole and intact including this Copyright Notice. Modified By Description of Changes Xiaoyu Ruan Release version.
  • Page 3: Table Of Contents

    APPING OF 3 - M FIPS 140-2 L ABLE APPING OF Polycom VSX 3000, VSX 5000, and VSX 7000s © 2007 Polycom, Inc. - This document may be freely reproduced and distributed whole and intact including this Copyright Notice..5 ...6 ...17...
  • Page 4 ABLE 14 - A ...23 ABLE CRONYMS Polycom VSX 3000, VSX 5000, and VSX 7000s © 2007 Polycom, Inc. - This document may be freely reproduced and distributed whole and intact including this Copyright Notice. VSX 7000 OGICAL NTERFACES TO...
  • Page 5: Introduction

    FIPS 140-2 standard and validation program is available on the National Institute of Standards and Technology (NIST) Cryptographic Module Validation Program (CMVP) website at: The VSX 3000, VSX 5000, and VSX 7000s are referred to in this document as the VSX systems, the hardware modules, the cryptographic modules, or the modules.
  • Page 6: Vsx 3000, Vsx 5000, And Vsx 7000S

    Founded in 1990, Polycom is the only company delivering end-to-end rich media collaborative applications for voice, video, data and the web. Polycom has a wide range of products from desktop and mobile personal systems to room systems to the network core. Polycom’s full range of high-quality voice and video communications endpoints, video management software, web conferencing software, and multipoint conferencing enable organizations of all sizes to increase productivity and agility.
  • Page 7: Figure 2 - Vsx 5000

    8000 models provide connections for external audio input and output, LAN ports, telephone jacks, and power supplies. There is an internal slot in the chassis to support ISDN, V.35, RS-499 or RS-530 interfaces. Polycom VSX 3000, VSX 5000, and VSX 7000s © 2007 Polycom, Inc. - This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
  • Page 8: Module Interfaces

    Control Input interface Status Output Interface Ports and interfaces of the VSX 3000 system are shown in Figure 6 below. The ports on the module’s connector panel are listed below, and mapped to logical interfaces in Table 2 below. BRI connectors – For ISDN calls Stereo connector –...
  • Page 9: Vsx 3000 Connector Panel

    LED – LEDs indicate system status The VSX 3000 physical interfaces are located under the system as depicted in Section 2 of the Administrator’s Guide for the VSX Series, which lists on page one and two the connection cables required for the system. The...
  • Page 10: Vsx 5000 Back Panel

    Data Output Control Input Status Output Polycom VSX 3000, VSX 5000, and VSX 7000s © 2007 Polycom, Inc. - This document may be freely reproduced and distributed whole and intact including this Copyright Notice. Figure 7 - VSX 5000 Back Panel...
  • Page 11 LED – LEDs indicate system status Power connector – For power cord Polycom VSX 3000, VSX 5000, and VSX 7000s © 2007 Polycom, Inc. - This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
  • Page 12: Figure 8 - Vsx 7000E Back Panel

    The following table maps VSX 7000e interfaces with FIPS 140-2 logical interfaces. Table 4 - Mapping of FIPS 140-2 Logical Interfaces to VSX 7000e Interfaces FIPS 140-2 Logical Interface VSX 3000, VSX 5000, and VSX 7000se Port/Interface Data Input Network interface bay, VCR/DVD connector, Audio connector, Serial ports, S-Video...
  • Page 13: Figure 9 - Vsx 7000S Back Panel

    VSX 7000s interfaces with FIPS 140-2 logical interfaces. Table 5 - Mapping of FIPS 140-2 Logical Interfaces to VSX 7000s Interfaces FIPS 140-2 Logical Interface VSX 3000, VSX 5000, and VSX 7000ss Port/Interface Data Input LAN connector, Conference link connector, VCR/DVD connector, Serial port, S-Video...
  • Page 14 LED – LEDs indicate system status Power connector – For power cord Polycom VSX 3000, VSX 5000, and VSX 7000s © 2007 Polycom, Inc. - This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
  • Page 15: Vsx 8000 Back Panel

    VSX 8000 interfaces with FIPS 140-2 logical interfaces. Table 6 - Mapping of FIPS 140-2 Logical Interfaces to VSX 8000 Interfaces FIPS 140-2 Logical Interface VSX 3000, VSX 5000, and VSX 7000s Port/Interface Data Input Network interface bay, Balanaced Audio connector, VCR/DVD connector, Serial port, S-Video...
  • Page 16: Roles And Services

    Table 8 - Mapping of User’s Services to Inputs, Outputs, CSPs, and Access Control Service Description Polycom VSX 3000, VSX 5000, and VSX 7000s © 2007 Polycom, Inc. - This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
  • Page 17: Authentication

    Unintentional Radiators, Digital Devices, Class A (i.e., for business use). 1.6 Operational Environment The operational environment requirements do not apply to the VSX 3000, VSX 5000, and VSX 7000s. The modules do not provide a general purpose Operating System (OS) and only allow the updating of image components after checking a Digital Signature Algorithm (DSA) signature on new software images.
  • Page 18: Key Generation

    Key and ISDN Encryption Key are never output from the module. Other CSPs and keys, such as the Integrity Check Key and PRNG seed are never output from the modules. Polycom VSX 3000, VSX 5000, and VSX 7000s © 2007 Polycom, Inc. - This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
  • Page 19: Key Storage

    These ephemeral keys and CSP are zeroized after the session is closed or whenever power is cycled. 1.8 Self-Tests The VSX 3000, VSX 5000, and VSX 7000s perform the following self-tests at power-up: Software integrity check using a DSA signature verification Known Answer Tests (KATs)
  • Page 20: Secure Operation

    Non-Proprietary Security Policy, Version 1.0 2 Secure Operation The VSX 3000, VSX 5000, and VSX 7000s meet Level 1 requirements for FIPS 140-2. The sections below describe how to place and keep the module in FIPS-approved mode of operation. 2.1 Crypto-Officer Guidance The Crypto-Officer is responsible for initialization and security-relevant configuration and management of the module through the web management interface, serial port from a non networked PC, or secure Telnet over TLS.
  • Page 21: User Guidance

    On VSX 5000, VSX 7000e, VSX 7000s, and VSX 8000 systems, the BRI network interface lights are located on the network interface module. On the VSX 3000 system, the lights are located on the back of the system near the BRI connectors.
  • Page 22: Bri Network Interface

    Yellow and green indicators are on The system is in a call. Polycom VSX 3000, VSX 5000, and VSX 7000s © 2007 Polycom, Inc. - This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
  • Page 23: Acronyms

    Acronym CMVP FIPS ISDN NIST Polycom VSX 3000, VSX 5000, and VSX 7000s © 2007 Polycom, Inc. - This document may be freely reproduced and distributed whole and intact including this Copyright Notice. Table 14 - Acronyms Definition Application Programming Interface...

This manual is also suitable for:

Vsx 5000Vsx 7000s series

Table of Contents