Enabling Common Criteria Mode

When you enable Common Criteria mode on the device, it enters the Common Criteria Administrative mode. Similar to FIPS, Common Criteria also has administrative and operational modes:
  • Common Criteria Administrative mode: Log in to the device console and enable the Common Criteria mode. You can optionally modify the default Common Criteria security policy in this mode.
    Note: When you execute the command to reload the device, the validation of the software image with the signature file is triggered. If signature verification fails, the device continuously reboots after device reload.
  • Common Criteria Operational mode: Transition to Common Criteria operational mode from Common Criteria Administrative mode. After you transition the device to the Operational mode, you must save the configuration and reboot the device.

In this section:

  1. Entering Common Criteria Administrative Mode
  2. SSH Rekey Exchange
  3. CLI Banner Configuration
  4. Entering Common Criteria Operational Mode
    When the device is in Common Criteria Administrative mode, perform the following steps to place the device into Common Criteria Operational mode.
  5. Displaying Common Criteria Information
    After you have enabled Common Criteria Administrative mode on the device, you can display the information with the fips show command.
Parent topic: Common Criteria Certification