Veritas NetBackup™ Flex Scale Administrator's Guide
- Product overview
- Viewing information about the NetBackup Flex Scale cluster environment
- NetBackup Flex Scale infrastructure management
- User management
- Node and disk management
- License management
- NetBackup Flex Scale network management
- Bonding operations
- Data network configurations
- NetBackup Flex Scale infrastructure monitoring
- Resiliency in NetBackup Flex Scale
- Site-based disaster recovery in NetBackup Flex Scale
- NetBackup Flex Scale security
- Troubleshooting
- Appendix A. Configuring NetBackup optimized duplication
- Appendix B. Disaster recovery terminologies
FIPS overview for NetBackup Flex Scale
The Federal Information Processing Standards (FIPS) define U.S. and Canadian Government security and interoperability requirements for computer systems. The National Institute of Standards and Technology (NIST) issued the FIPS 140 Publication Series to coordinate the requirements and standards for validating cryptography modules. The FIPS 140-2 standard specifies the security requirements for cryptographic modules and applies to both the hardware and the software components. It also describes the approved security functions for symmetric and asymmetric key encryption, message authentication, and hashing.
For more information about the FIPS 140-2 standard and its validation program, see the following links:
https://csrc.nist.gov/csrc/media/publications/fips/140/2/final/documents/fips1402.pdf
https://csrc.nist.gov/projects/cryptographic-module-validation-program
The NetBackup Flex Scale Cryptographic Module is FIPS validated. Starting with NetBackup Flex Scale 1.3, FIPS 140-2 standard is enabled with the default factory settings for the Veritas Operating System (VxOS). After FIPS for VxOS is enabled, the sshd uses the following FIPS approved ciphers:
aes128-ctr
aes192-ctr
aes256-ctr
The FIPS 140-2 standard is enabled for NetBackup MSDP when you create a NetBackup Flex Scale cluster.
Note:
You cannot disable the FIPS option for VxOS or for NetBackup MSDP.