Extranet Switch Owner's Manual


 3

1 Introduction
1.1 Purpose
Thisisanon-proprietarycryptographicmodulesecuritypolicyfortheContivity™
ExtranetSwitch4600.ThissecuritypolicydescribeshowtheContivity™Extranet
Switch4600meetsthesecurityrequirementsofFIPS140-1,andhowtooperatethe
Contivity™ExtranetSwitch4600inasecureFIPS140-1compliantmodeofoperation.
ThispolicywaspreparedaspartoftheFIPS140-1Level2multi-chipstandalone
certificationoftheContivity™ExtranetSwitch4600.

FIPS140-1(“FederalInformationProcessingStandardsPublication140-1--Security
RequirementsforCryptographicModules”)detailstheU.S.Governmentrequirements
forcryptographicmodules.MoreinformationabouttheFIPS140-1standardand
validationprogramisavailableontheNISTwebsiteat
http://csrc.nist.gov/cryptval/.
1.2 References
ThisdocumentdealsonlywithoperationsandcapabilitiesoftheContivity™Extranet
Switch4600inthetechnicaltermsofaFIPS140-1cryptographicmodulesecuritypolicy.
MoreinformationisavailableontheContivity™ExtranetSwitch4600andtheentireline
ofContivity™productsfromthefollowingsources:

• TheNortelNetworkswebsitecontainsinformationonthefulllineof
Contivityproductsat
www.nortelnetworks.com.

• Foranswerstotechnicalorsalesrelatedquestionspleaserefertothecontacts
listedontheNortelNetworkswebsiteat
www.nortelnetworks.com.
1.3 DocumentOrganization
ThisdocumentispartofthecompleteFIPS140-1submissionpackage.Inadditiontothis
document,thecompletesubmissionpackagecontainsthefollowing:

♦ Vendorevidencedocument
♦ Finitestatemachine
♦ Sourcecodelisting
♦ Othersupportingdocumentation

ThisdocumentprovidesanoverviewoftheContivity™Switchandexplainsthesecure
configurationandoperationofthemodule.Section1providesintroductorymaterial,
section2detailsthegeneralfeaturesandfunctionalityoftheContivity™Switchand
section3addressesconfigurationoftheswitchforFIPS-compliantmodeofoperation,
henceforthreferredtoasFIPSmode.

CorsecSecurity,Inc.producedthissecuritypolicyandothercertificationsubmission
documentationundercontracttoNortelNetworks.Withtheexceptionofthisnon-