Red Hat NETWORK PROXY 5.3.0 - Guida Utente Scaricare il pdf (Pagina 17)

For UNIX/Linux, each UNIX/Linux installation package is targeted for one or more supported platforms.

To install the UNIX/Linux Agent using a provisioning system, extract the installation package as

appropriate and then deploy the extracted file with the provisioning system. The Enterprise Certificate is

embedded in the installation package on the collector.

For more information about Installing the Agent on UNIX/Linux Machines and UNIX/Linux packages and

platforms, refer to section Installing the VCM Agent on UNIX/Linux Machines.

Understanding VCM's Use of FIPS Cryptography

Federal Information Processing Standards (FIPS) are developed by the US National Institute of Standards

(NIST) and the Canadian Communications Security Establishment (CSE). VCM incorporates cryptography

as set forth in the FIPS standards. Components of VCM use cryptography to protect the confidentiality,

integrity, availability, and authenticity of customer data. The FIPS standards require adherence by VCM to

the following standards:

FIPS 46-3: Data Encryption Standard (DES)

FIPS 81: DES Modes of Operation

FIPS 113: Computer Data Authentication

FIPS 171: Key Management

FIPS 180-1: Secure Hash Standard (SHA-1)

FIPS 186-2: Digital Signature Standard (DSA) and Random Number Generation (RNG)

FIPS 198: Message Authentication Codes (MACs) using SHA-1

FIPS 197: Advanced Encryption Standard (AES) Cipher

FIPS 200: Federal Information Security Management Act (FISMA)

SP 800-2: Public Key Cryptography (including RSA)

SP 800-20: Triple DES Encryption (3DES) Cipher

VCM’s Use of Microsoft Cryptographic Service Providers (CSPs) for

Windows Machines

On Windows machines, VCM uses cryptography by way of the Microsoft CryptoAPI, which is a

framework that dispatches to Microsoft Cryptographic Service Providers (CSPs). CSPs are not shipped

with VCM or installed by VCM, but instead are part of the security environment included with Microsoft

Windows. In the configurations supported by VCM, these CSPs are FIPS 140-2 validated.

Cryptography for UNIX/Linux Platforms

On UNIX/Linux platforms, the VCM Agent uses the cryptography of the OpenSSL v0.9.7 module. This

cryptographic library is installed with the VCM Agent.

Preparing for Installation

VMware, Inc. 17

1 2 ... 12 13 14 15 16 17 18 19 20 21 22 ... 273 274

Nessun commento

Red Hat NETWORK PROXY 5.3.0 - Guida Utente Pagina 17