Security Mode Configuration Example

This security mode configuration example:

• Enables FIPS mode on the device, restricting the authentication and encryption algorithms to the FIPS approved SHA1 algorithm
• Sets the device security profile to C2:
  • Changing command parameter defaults as specified in Security Profile Mode Command Parameter Default Setting Changes
  • Changing command parameter ranges as specified in Security Profile Mode Command Parameter Range Changes
  • Changing command access as specified in Security Profile mode Command Access Changes
  • Denying read-write access to commands specified in Read-Write Functionality Not Accessible in C2 Security Profile Mode
  • Denying read-only access to commands specified in Read-Only Functionality Not Accessible in C2 Security Profile Mode
• Disables access to the boot menu during bootup on the device

  System(su)->set security fips mode enable
  This command will reset the system.  Are you sure you want to continue? (y/n) [n]y
  Resetting system ...
  System(su)->set security profile c2
  This command will reset the system.  Are you sure you want to continue? (y/n) [n]y
  Resetting system ...
  System(su)->set security boot-access disable