Mumbai Security and Compliance User Group

 View Only

Activating FIPS Mode in CCS-VM  

Dec 25, 2011 09:44 PM

What is FIPS

FIPS define rules, regulations, and standards for many aspects of handling of information by computers and by people.  They apply to all US government employees and personnel, including soldiers in the armed forces,  Generally speaking, any use of a computer by US government personnel must conform to all the relevant FIPS regulations.  If you're a US government worker, and you want to use a Mozilla software product such as Firefox, or any product that uses NSS, you will want to use it in a way that is fully conformant with all the relevant FIPS regulations.  Some other governments have also adopted many of the FIPS regulations, so their applicability is somewhat wider than just the US government's personnel.

What is FIPS Mode

 

FIPS mode is a configuration that uses FIPS-approved algorithms only. When CCS-VM is configured to operate in FIPS mode, it implements a FIPS-certified cryptographic library to encrypt communication between the Security Console and the user for both the browser and API interfaces.
 

Activating FIPS Mode in CCS-VM

If you want to enable FIPS mode in CCS-VM, Follow the below steps before starting CCS-VM. If your CCS-VM is already running then first stop his service then follow below steps.

1.       Go to the install directory and open nsc folder(c:\program files\symantec\ccsvm\nsc)

2.       Create a new text file with name CustomEnvironment.properties and enter the following line in this file.

          Fipsmode=1

          

3.       Now Save this file and Restart  the CCS-VM Security Console

4.       To ensure the FIPS mode has been successfully enabled, you can check the CCS-VM Security Console log files for the follow messages:

          ““FIPS 140-2 mode is enabled. Initializing crypto provider”

          

Statistics
0 Favorited
0 Views
0 Files
0 Shares
0 Downloads

Tags and Keywords

Comments

Apr 12, 2013 02:45 PM

Write some more articles on Vulnerability manager.

Related Entries and Links

No Related Resource entered.