Commit version 24.12.13800
This commit is contained in:
186
mibs/aricent/ARICENT-FIPS-MIB
Normal file
186
mibs/aricent/ARICENT-FIPS-MIB
Normal file
@ -0,0 +1,186 @@
|
||||
-- Copyright (C) 2011-2012 Aricent Group . All Rights Reserved
|
||||
|
||||
--*************************************************************************
|
||||
--$Id: fsfips.mib,v 1.6 2012/09/07 09:52:05 siva Exp $
|
||||
--
|
||||
--Description : This file contains MIB definitions for FIPS feature.
|
||||
--
|
||||
--*************************************************************************/
|
||||
|
||||
-- This document explains the proprietary MIB implemented for FIPS
|
||||
-- PUB 140-2 Features
|
||||
|
||||
-- The standard defines the security requirements that must be satisfied by
|
||||
-- a cryptographic module used in a security system protecting unclassified
|
||||
-- formation within IT systems. There are four levels of security: from
|
||||
-- Level 1 (lowest) to Level 4 (highest). These levels are intended to cover
|
||||
-- the wide range of potential applications and environments in which
|
||||
-- cryptographic modules may be deployed. The security requirements cover
|
||||
-- areas related to the secure design and implementation of a cryptographic
|
||||
-- module. These areas include basic design and documentation, module
|
||||
-- interfaces, authorised roles and services, physical security, software
|
||||
-- security, operating system security, key management, cryptographic
|
||||
-- algorithms, electromagnetic interference/electromagnetic compatibility
|
||||
-- (EMI/EMC), and self-testing.
|
||||
--
|
||||
|
||||
ARICENT-FIPS-MIB DEFINITIONS ::= BEGIN
|
||||
|
||||
-- ************************************************************************
|
||||
-- IMPORTS
|
||||
-- ************************************************************************
|
||||
IMPORTS
|
||||
MODULE-IDENTITY, OBJECT-TYPE, Integer32, enterprises FROM SNMPv2-SMI
|
||||
TruthValue FROM SNMPv2-TC;
|
||||
|
||||
-- ************************************************************************
|
||||
-- START OF THE MODULE
|
||||
-- ************************************************************************
|
||||
fsFips MODULE-IDENTITY
|
||||
LAST-UPDATED "201209050000Z"
|
||||
ORGANIZATION "ARICENT COMMUNICATIONS SOFTWARE"
|
||||
|
||||
CONTACT-INFO "support@aricent.com"
|
||||
|
||||
DESCRIPTION
|
||||
"The Proprietary MIB for FIPS module"
|
||||
|
||||
REVISION "201209050000Z"
|
||||
|
||||
DESCRIPTION
|
||||
"Initial Creation"
|
||||
::= { enterprises aricent-communication-holding-ltd(29601) iss(2) 63}
|
||||
|
||||
|
||||
-- ----------------------------------------------------------------- --
|
||||
-- groups in the MIB
|
||||
-- ----------------------------------------------------------------- --
|
||||
|
||||
fsFipsConfigurations OBJECT IDENTIFIER ::= { fsFips 1 }
|
||||
|
||||
-- ---------------------------------------------------------------- --
|
||||
|
||||
-- Operational Mode Configuration Group
|
||||
|
||||
fsFipsOperMode OBJECT-TYPE
|
||||
SYNTAX INTEGER { fips(1), nonfips(2) }
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This object tells whether the current operational mode is FIPS
|
||||
mode or NON-FIPS mode"
|
||||
|
||||
DEFVAL { nonfips }
|
||||
::= { fsFipsConfigurations 1 }
|
||||
|
||||
fsFipsTestAlgo OBJECT-TYPE
|
||||
SYNTAX Integer32
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This object is used to trigger FIPS Known Answer Test for the
|
||||
below mentioned algorithms. The bit positions to run specific
|
||||
algorithm are as shown below :
|
||||
|
||||
Bit 0 - SHA-1
|
||||
Bit 1 - SHA-2
|
||||
Bit 2 - HMAC-SHA
|
||||
Bit 3 - AES
|
||||
Bit 4 - DES
|
||||
Bit 5 - RAND
|
||||
Bit 6 - RSA
|
||||
Bit 7 - DSA"
|
||||
|
||||
DEFVAL { 0 }
|
||||
::= { fsFipsConfigurations 2 }
|
||||
|
||||
fsfipsZeroizeCryptoKeys OBJECT-TYPE
|
||||
SYNTAX TruthValue
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Setting this value to true will delete all cryptographic
|
||||
keys present in ipsecv4, ipsecv6, ike, radius, ssh and ssl modules."
|
||||
DEFVAL { false }
|
||||
::= { fsFipsConfigurations 3 }
|
||||
|
||||
fsFipsTraceLevel OBJECT-TYPE
|
||||
SYNTAX Integer32
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This object is used to store the trace options that are enabled
|
||||
by the user. The bit positions to enable specific traces are as
|
||||
shown below :
|
||||
|
||||
Bit 0 - init-shut
|
||||
Bit 1 - mgmt
|
||||
Bit 2 - data
|
||||
Bit 3 - ctrl
|
||||
Bit 4 - pkt-dump
|
||||
Bit 5 - resource
|
||||
Bit 6 - all-fail
|
||||
Bit 7 - buf
|
||||
|
||||
A value of zero(0) indicates traces are disabled and a value with
|
||||
all bits set to one indicates all traces are enabled.
|
||||
By default traces are disabled."
|
||||
DEFVAL { '00000000'H }
|
||||
::= { fsFipsConfigurations 4 }
|
||||
|
||||
fsFipsTestExecutionResult OBJECT-TYPE
|
||||
SYNTAX Integer32
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This object is used to store the results of last run FIPS Known
|
||||
Answer Test. The bit positions specifies the result of the execution
|
||||
of the corresponding algorithm. If the bit is set the
|
||||
corresponding algorithm test is successful. Otherwise test is not
|
||||
executed or failed.
|
||||
|
||||
Bit 0 - SHA-1
|
||||
Bit 1 - SHA-2
|
||||
Bit 2 - HMAC-SHA
|
||||
Bit 3 - AES
|
||||
Bit 4 - DES
|
||||
Bit 5 - RAND
|
||||
Bit 6 - RSA
|
||||
Bit 7 - DSA"
|
||||
|
||||
DEFVAL { 0 }
|
||||
::= { fsFipsConfigurations 5 }
|
||||
|
||||
fsFipsFailedAlgorithm OBJECT-TYPE
|
||||
SYNTAX Integer32
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This object is used to store the failed algorithm in the last run
|
||||
FIPS Known Answer Test. If the bit is set the corresponding algorithm
|
||||
test failed in the last execution. The bit positions to the
|
||||
corresponding algorithm are as shown below :
|
||||
|
||||
Bit 0 - SHA-1
|
||||
Bit 1 - SHA-2
|
||||
Bit 2 - HMAC-SHA
|
||||
Bit 3 - AES
|
||||
Bit 4 - DES
|
||||
Bit 5 - RAND
|
||||
Bit 6 - RSA
|
||||
Bit 7 - DSA"
|
||||
|
||||
DEFVAL { 0 }
|
||||
::= { fsFipsConfigurations 6 }
|
||||
|
||||
fsFipsBypassCapability OBJECT-TYPE
|
||||
SYNTAX INTEGER { bypassCapability(1), noBypassCapability(2) }
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This object is used to enable/disable the crypto bypass capability.
|
||||
The default value for this object is 'no bypass-capability' (2)."
|
||||
|
||||
DEFVAL { noBypassCapability }
|
||||
::= { fsFipsConfigurations 7 }
|
||||
END
|
Reference in New Issue
Block a user