Crypto Officer Guide

There are two categories of users in Junos-FIPS:

• Junos-FIPS User—Configures the system and performs all non-Junos-FIPS-related operations.
• Crypto Officer—Zeroizes the system, authorizes AS II FIPS PICs for operation, and displays the status of installed AS II FIPS PICs. Only the Crypto Officer can load the Junos-FIPS software and establish initial user profiles and IP Security (IPSec) parameters.

This chapter describes how a Crypto Officer configures a Juniper Networks router running Junos-FIPS and administers the system in a secure manner.

This chapter discusses the following topics:

• List of Algorithms
• Crypto Officer Responsibilities
• User Assumptions and Responsibilities
• Passwords and Supported Cipher Sets
• Remote Access
• Removing Old Passwords
• Zeroizing the System
• Crypto Officer and Junos-FIPS User Configurations
• Configuring Internal IPSec
• Example: Configuring IPSec