SafeNet Encryptor Model 600 FIPS 140-2 Level 3 Security Policy

SafeNet Encryptor Model 600 is a secure device produced by SafeNet, Inc. It supports FIPS 140-2 - Level 3 security standard.

SafeNet Encryptor Model 600 FIPS 140-2 Level 3 Security Policy - cover page
Brand
SafeNet
Category
Other Electronics
Document type
Other
Language
English
Pages
24
File format
PDF
File size
528 KB
Published
15 February, 2012
Updated
30 September, 2023
MD5 checksum
241E7A5C6A4FA0B03759A4673858778A
PDF
SafeNet Encryptor Model 600 FIPS 140-2 Level 3 Security Policy PDF

About this manual

This Security Policy describes the SafeNet Encryptor Model 600, its compliance with FIPS 140‑2 Level 3, and the security rules operators must follow. It provides a functional overview, module description, and details on physical security and self‑tests.

The document lists supported interface speeds, front‑panel connectors, power specifications, and management options, and includes tables of security requirements, algorithms, and self‑test procedures.

What's inside

  • Introduction
  • Functional Overview
  • Module Description
  • Enclosure Indicators, Connectors and Controls
  • Security Functions
  • FIPS Approved Mode of Operation
  • Identification and Authentication
  • Physical Security
  • Self Tests
  • Glossary of Acronyms

Specifications

FIPS Validation LevelLevel 3
Supported Interface Speeds155/622 MB (OC‑3/12), 1.0 GB, 2.4 GB (OC‑48)
Power Input100‑250 V, 1.5‑0.75 A, 50‑60 Hz
Front Panel PortsNetwork management, console, USB, LCD display, LEDs, keypad
Tamper ProtectionCover removal erases all sensitive information

Frequently asked questions

What FIPS validation level does the SafeNet Encryptor Model 600 have?

It is validated to FIPS 140‑2 Level 3.

What does the real‑time clock self‑test do if it fails?

If the clock test fails, the date and time are reset to 01‑Jan‑2000 00:00.

How does the encryptor detect tampering?

Any attempt to remove the steel cover automatically erases all stored sensitive information.

What out‑of‑band management interfaces are provided?

A dedicated Ethernet port or a console port can be used for out‑of‑band management.

Download PDF (528 KB)