JUNOS-FIPS defines a restricted set of user roles. Unlike the JUNOS software, which allows a wide range of capabilities to users, FIPS 140-2 defines specific types of users (Crypto Officer, User, and Maintenance). Crypto Officers and FIPS Users perform all FIPS-related configuration tasks and issue all FIPS-related commands. Crypto Officer and FIPS User configurations must follow FIPS 140-2 guidelines. Typically, no user besides a Crypto Officer can perform FIPS-related tasks. For more information, see the Secure Configuration Guide for Common Criteria and JUNOS-FIPS.
