Fips Compliance; General Configuration Restrictions And Guidelines; Enabling Configuration Encryption - HP 10500 Series Configuration Manual
Hide thumbs
Also See for 10500 Series:
- Security configuration manual (596 pages) ,
- Configuration manual (512 pages) ,
- Specifications (42 pages)
Table of Contents
Advertisement
password hash
$h$6$Twd73mLrN8O2vvD5$Cz1vgdpR4KoTiRQNE9pg33gU14Br2p1VguczLSVyJLO2huV5Syx/LfDIf8ROLtV
ErJ/C31oq2rFtmNuyZf4STw==
service-type ssh telnet terminal
authorization-attribute user-role network-admin
authorization-attribute user-role network-operator
#
interface GigabitEthernet1/0/1
port link-mode route
ip address 1.1.1.1 255.255.255.0
#
FIPS compliance
The device supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for features,
commands, and parameters might differ in FIPS mode and non-FIPS mode. For more information about
FIPS mode, see Security Configuration Guide.
General configuration restrictions and guidelines
When you manage the next-startup configuration files, follow these restrictions and guidelines:
Save the next-startup configuration files to the root directory of the default storage medium. The
•
device loads startup configuration files only from the default storage medium. You can access the
BootWare menus to specify the built-in flash memory or the USB disk as the default storage
medium.
In standalone mode, make sure both the active and standby MPUs use the same type of storage
•
medium as the default storage medium.
In IRF mode, make sure all MPUs use the same type of storage medium as the default storage
•
medium.
If the USB disk is used to store the startup configuration files, do not remove the USB disk during the
•
startup process. If you remove the USB disk on a device, one of the following consequences occurs:
In standalone mode, the device starts up with the factory defaults.
In IRF mode, the device leaves the IRF fabric at startup and runs the factory defaults.
Enabling configuration encryption
Configuration encryption enables the device to encrypt a startup configuration file automatically when it
saves the running configuration. All HP devices running Comware V7 software use the same private key
or public key to encrypt configuration files.
NOTE:
Only HP devices running Comware V7 software can decrypt the encrypted configuration files.
To enable configuration encryption:
102
Advertisement
Table of Contents
Troubleshooting
