Placing the Device in FIPS Mode

Placing the device in FIPS mode is a multiple-step process that begins with enabling FIPS mode on the device.

This places the device administratively in FIPS mode. To operate the device in FIPS mode, save the configuration, and reboot the device. Always back up the desired configuration to ensure it is saved in the event of a system reset.

In this section:

  1. General Steps to Place the Device in FIPS Mode
    Perform the following steps to place the device in FIPS mode.
  2. Enabling FIPS Mode
    Perform the following steps to enable FIPS mode.
  3. Zeroizing Shared Secrets and Host Keys
    After you have reviewed the FIPS policy, use the fips zeroize command to zeroize the shared secrets and host keys used by various networking protocols.
  4. Configuring User Authentication
    RUCKUS FastIron devices support role-based authentication. A device can perform authentication and authorization (role selection) using RADIUS and local configuration database. FastIron devices also support multiple authentication methods for each service.
  5. Saving the Configuration
  6. Reloading the Device
  7. Performing a FIPS Self-test
    Use the FIPS self-test to verify the sanity of FIPS software.
  8. Modifying the FIPS Policy
    After the device is administratively in FIPS mode, you can modify the default FIPS policy.
Parent topic: FIPS Configuration