Page 15
FIPS Policy
case the modules are physically tampered with. Tamper evident seals must be applied by the Cryptographic Officer to operate as FIPS
140-2 Approved modules. Seals are available for order from Juniper using part number JNPR-FIPS-TAMPER-LBLS.
The Cryptographic Officer is responsible for securing and having control at all times of any unused seals and the direct control and
observation of any changes to the module such as reconfigurations where the tamper evident seals or security appliances are removed
or installed to ensure the security of the module is maintained during such changes and the module is returned to a FIPS Approved
state.
Tamper seals are applied in the same fashion regardless of the part number of the device.
Inspection/Testing of Physical Security Mechanisms
Physical Security Mechanisms
Recommended Frequency of
Inspection/Test
Inspection/Test Guidance Details
Tamper labels, opaque metal enclosure.
Upon receipt of the module and per
security policy by the Cryptographic
Officer.
Labels should be free of any tamper
evidence.
Tamper Seal Placement
Seal Application Instructions
For all seal applications, the Cryptographic Officer should observe the following instructions.
·
Handle the seals with care. Do not touch the adhesive side.
·
All surfaces to which the seals will be applied must be clean and dry. Ensure all surfaces are clean and clear of any residue.
·
Apply with firm pressure across the seal to ensure adhesion. Allow at least 1 hour for the adhesive to cure.
SRX3400 (13 seals)
A tamper evident seal shall be applied to the following location (see highlighted pointers):
·
Front:
o
Three overlapping seals, vertically across the each of the installed interface cards or slot cover plates on the left side
of the module (see Fig. 2 below), extending on to the top and bottom of the chassis of the module.
o
Three overlapping seals, vertically across the each of the installed interface cards or slot cover plates on the right
side of the module (see Fig. 2 below), extending on to the top and bottom of the chassis of the module.
·
Rear:
o
Three overlapping seals, vertically across the each of the installed interface cards or slot cover plates on the left side
of the module (see Fig. 3 below), extending on to the top and bottom of the chassis of the module.
o
Three overlapping seals, vertically across the each of the installed interface cards or slot cover plates on the right
side of the module (see Fig. 3 below), extending on to the top and bottom of the chassis of the module.
o
One seal vertically from the top of the chassis extending on the access panel on the right side of the module.