Tagged Questions
3
votes
2answers
101 views
What drives FIPS140-2 compliance?
I guess this questions is directed at Product Managers, but I would be very interested to learn what people in the know think.
What are the most common factors that drives FIPS140-2 compliance for ...
1
vote
1answer
59 views
Are there any FIPS140-2 requirements that apply when boot code is updated in the field?
FIPS140-2 standard specifies the following conditional test to be performed by the cryptographic module if software or firmware components can be externally loaded into a cryptographic module:
...
3
votes
2answers
180 views
A SW system constructed with Microsoft CNG can be FIPS 140-2 Level 2 Compliant?
We have to design and construct a system that signs files with sensible data, like evidences/proofs. The sign process is simple, basically calculate MD5 of the file content and encrypt the MD5 result ...
4
votes
2answers
493 views
What cryptographic module does Sql Server 2008 use to run in Fips 140-2 compliant mode by default?
One can configure Sql Server 2008 to run in FIPS 140-2 compliant mode, in the same manner as running Bitlocker in FIPS 140-2 compliant mode. Which is to activate FIPS 140-2 compliant mode in the ...
2
votes
2answers
166 views
What does “if the Crypto Officer performs this operation” mean in this BitLocker security policy?
In the document Windows Server 2008 R2 BitLocker™ Drive Encryption Security Policy For FIPS 140-2 Validation, in the section 6.1.2 FIPS 140-2 Security Rules bullet point 2 it says:
BitLocker™ will ...
6
votes
2answers
680 views
Is BitLocker on a virtual machine still FIPS 140-2 compliant?
BitLocker can be used as a cryptographic module to fulfill FIPS 140-2 security level 1 compliance.
In a common setup, USB thumb drives can be used to unlock drives encrypted by BitLocker on startup.
...
6
votes
2answers
801 views
Are TPM chips or the equiavlent required for FIPS 140-2 security level 1 compliance?
A 'TPM chip' is:
a secure cryptoprocessor that can store cryptographic keys that
protect information
FIPS 140-2 requires a cryptographic module, which can be hardware, software, or both that ...
10
votes
4answers
879 views
Question of importance of FIPS in security implementations
I am by far, no security expert but I experience on the subject working in Java (JCA,JCE and JSSE).
Anyway, recently there was a discussion about FIPS compliance.
I looked into this and SUN's ...
3
votes
1answer
575 views
How to apply FIPS to Microsoft Access database with custom VBA
As the software engineer on a project, I have been asked to make a Microsoft Access application, with custom interfaces running custom VBA. That part is going just fine. Recently though I was asked to ...
