Federal Information Processing Standards (FIPS) Compliance for Passwords

Federal Information Processing Standards (FIPS) is a collection of standards defined by the United States Federal Government for document process, encryption algorithms, personal identification and verification, as well as many other areas.

To enhance security, in ExtremeXOS 22.3, all passwords in configuration files are saved using AES-256-CBC FIPS-validated encryption.

All commands that use password with the keyword encrypted should use a valid, encrypted password. A password is considered a valid, encrypted password if it is generated in ExtremeXOS version 22.1 or later. Any password encrypted by ExtremeXOS 21.x or earlier is not considered a valid, encrypted password in 22.3. This restriction applies to commands executed through CLI and scripts. Any encrypted passwords saved in configuration files are automatically converted to valid, encrypted passwords when upgrading to ExtremeXOS 22.3.