VMware Aria
Operations for Networks and FIPS
VMware Aria
Operations for Networks
and FIPSIn
VMware Aria
Operations for Networks
, you can use FIPS validated cryptographic
modules for internal and external connections.FIPS 140-2 is a U.S. and Canadian government
standard that specifies security requirements for cryptographic modules.
VMware Aria
Operations for Networks
uses FIPS-validated
cryptographic modules to match those cryptographic modules that are specified by the
FIPS 140-2 standard.The objective of introducing FIPS support in
VMware Aria
Operations for Networks
is to ease
compliance and security activities in various regulated environments.VMware Aria
Operations for Networks
uses the following validated modules:FIPS Object Module | Version | Certificate |
|---|---|---|
You can find more information about the
cryptographic modules that VMware has validated against the FIPS 140-2 standard from
here: https://www.vmware.com/security/certifications/fips.html.
Using FIPS Validated
Cryptographic Modules for Internal Connections
By default,
VMware Aria
Operations for Networks
uses FIPS validated cryptographic
modules for internal connections.Using FIPS Validated Cryptographic
Modules for External Connections
By default, the use of FIPS validated
cryptographic modules are deactivated for external connections. However, by enabling
FIPS mode for external connections, you can restrict the use of cryptographic
modules to FIPS validated cryptographic modules.
- Go to .
- Switch theFIPS Mode For External Connectionstoggle to true.
Enabling
FIPS Mode For
External Connections
will restrict the use of cryptographic
modules to the BC-FJA module.For third-party devices such as switches,
routers, and firewalls,
VMware Aria
Operations for Networks
uses SSH connections for fetching the configuration data.
To learn about supported algorithms for such SSH connections, see Encryption Algorithms and Ciphers.