Dell PowerConnect W-Series FIPS Manual

Also see for PowerConnect W-AP105: Manual Installation guide Specifications Specifications Specifications

Dell PowerConnect W-Series FIPS Manual Manual pdf 16 page image

163 Module ObjectivesThis section describes the assurance levels for each of the areas described in the FIPS 140-2 Standard. Inaddition, it provides information on placing the module in a FIPS 140-2 approved configuration.3.1 Security LevelsSection Section Title Level1 Cryptographic Module Specification 22 Cryptographic Module Ports and Interfaces 23 Roles, Services, and Authentication 24 Finite State Model 25 Physical Security 26 Operational Environment N/A7 Cryptographic Key Management 28 EMI/EMC 29 Self-tests 210 Design Assurance 211 Mitigation of Other Attacks N/A3.2 Physical SecurityThe Aruba Wireless AP is a scalable, multi-processor standalone network device and is enclosed in a robustplastic housing. The AP enclosure is resistant to probing (please note that this feature has not been tested aspart of the FIPS 140-2 validation) and is opaque within the visible spectrum. The enclosure of the AP hasbeen designed to satisfy FIPS 140-2 Level 2 physical security requirements.3.2.1 Applying TELsThe Crypto Officer is responsible for securing and having control at all times of any unused tamper evidentlabels. The Crypto Officer should employ TELs as follows: Before applying a TEL, make sure the target surfaces are clean and dry. Do not cut, trim, punch, or otherwise alter the TEL. Apply the wholly intact TEL firmly and completely to the target surfaces. Ensure that TEL placement is not defeated by simultaneous removal of multiple modules. Allow 24 hours for the TEL adhesive seal to completely cure. Record the position and serial number of each applied TEL in a security log.For physical security, the AP requires Tamper-Evident Labels (TELs) to allow detection of the opening ofthe device, and to block the serial console port (on the bottom of the device). The tamper-evident labelsshall be installed for the module to operate in a FIPS approved mode of operation. To protect the devicefrom tampering, TELs should be applied by the Crypto Officer as pictured below: