FIPS 140-2, LX Series Version 3.6.0

FIPS 140-1 and its successor FIPS 140-2 are U.S. Government standards that provide a benchmark for implementing cryptographic products. They specify best practices for implementing cryptographic algorithms, handling key material and data buffers, and working with the operating system. The FIPS 140-2 standards are accompanied by a strict evaluation process in which the key aspects of the complete FIPS produts are specified and tested. These include the FIPS 140-2 cryptographic algorithms, FIPS loading methods, FIPS operating systems, FIPS documentation, the FIPS software and hardware.

The objectives of the FIPS 140-2 standard were designed to ensure the integrity of the cryptographic implementation by protecting it against unauthorized use, modification and unauthorized disclosure of the contents of the FIPS 140-2 cryptographic products. The FIPS 140-2 cryptographic implementation must ensure proper operation of the FIPS products and detect errors in its operation.

LX Console Management Version 3.6.0 and FIPS 140-2 Console Server

The FIPS 140-2 Console Server support FIPS 140-2 security standard. The effects of supporting FIPS 140-2 are very significant in the operation of the FIPS 140-2 Console Server. Less secure features, protocols, and encryption support are disabled, while higher FIPS encryption options are set. AES encryption is used on every FIPS Graphical User Interface (GUI) connections and the clustering features. AES is one of the approved secret key algorithms that is accepted and validated by NIST. It uses a single secret key for both encryption and decryption. MD5 password encryption is used for firmware access. FIPS 140-2 mode is enabled or disabled only by accessing the firmware based menu via local access connections. To increase security, FIPS mode may not be turned off from the GUI, CLI, SNMP or server.

The FIPS 140-2 Console server provides ironclad secure access to server systems and network device serial consoles, enabling real-time visibility of remote management system, device and network health. The LX console management line of FIPS 140-2 products allow for easy, cost-effective management of globally distributed networks and systems by enabling administrators to take immediate action from anywhere.

Version 3.6.0 of the console management software supports a new FIPS 140-2 mode of operation. With this release, MRV is the first major vendor of FIPS 140-2 console server solutions to support the high FIPS 140-2 standards set by the NIST standard. MRV continues to provide the most secure console management available today.

Many changes were required to meet the security requirements for FIPS 140-2 certification for even MRV's highly secure implementation of the console server. MRV worked closely with the certifying FIPS agency to ensure successful FIPS 140-2 certification. Many FIPS products required changes are invisible to users, and are based on direct FIPS 140-2 code review and feedback by the FIPS agency.

Security concerns are growing as more organizations recognize risks and are driven by government initiatives such as Sarbanes-Oxley and HIPPA to improve management controls. The FIPS 140-2 is a key component of an effective management strategy. FIPS140-2 provides an independent standard for this application, which is being adopted by government and commercial enterprises. MRV is the first major vendor of FIPS 140-2 console server solutions to meet this FIPS 140-2 standard, demonstrating our ongoing commitment to the highest FIPS 140-2 security standards.

• LinuxDevices: "Most secure" console servers comply with FIPS-140-2, run Linux
  http://www.linuxdevices.com/news/NS6197664308.html


• Interlink: MRV Boosts Network Security With Support of FIPS 140-2 in LX Series Console Servers
  http://www.interlinkweb.com/systemics/email/MRV-FIPS.asp


• SysAdmin: MRV's LX Series Console Servers Supports FIPS 140-2 Security Standard
  http://www.samag.com/documents/s=9894/sam0511prod/0511prod.htm