Reference Guide

2 Preface
RSA BSAFE Crypto-C Micro Edition 4.1.4 Security Policy Level 1
with Level 2 Roles, Services and Authentication
Preface
This security policy describes how Crypto-C ME meets the relevant Level 2 security
requirements of FIPS 140-2 and describes how to securely operate Crypto-C ME in a
FIPS 140-2-compliant manner.
Federal Information Processing Standards Publication 140-2 - Security Requirements
for Cryptographic Modules (FIPS 140-2) details the United States Government
requirements for cryptographic modules. For more information about the FIPS 140-2
standard and validation program, see the FIPS 140-2 page on the NIST Web site.
References
This document deals only with operations and capabilities of the Crypto-C ME
cryptographic module in the technical terms of a FIPS 140-2 cryptographic module
security policy. More information about Crypto-C ME and the entire RSA product line
is available at:
• RSA Security Solutions, for Information on the full line of RSA products and
services
• RSA Link > RSA BSAFE for product overviews, technical information, and
answers to sales-related questions.
Document Organization
This Security Policy explains the cryptographic module features and functionality
relevant to FIPS 140-2, and comprises the following sections:
• This section, provides an overview and introduction to the Security Policy.
• Crypto-C ME Cryptographic Toolkit describes Crypto-C ME and how it meets
FIPS 140-2 requirements.
• Secure Operation of Crypto-C ME specifically addresses the required
configuration for the FIPS 140-2 mode of operation.
• Services lists the functions of Crypto-C ME.
• Acronyms and Definitions lists the acronyms and definitions used in this
document.
Terminology
In this document, the term cryptographic module, refers to the Crypto-C ME FIPS
140-2validated cryptographic module for Overall Security Level 1 with Level 2 Roles,
Services and Authentication, and Level 3 Design Assurance.