PowerSNMP for .NET
FIPS Compliance



Federal Information Processing Standard 140 (FIPS 140) defines approved cryptographic algorithms for computer systems used by the U.S. federal government. The current version of the standard is FIPS 140-2. Cryptographic algorithms can be validated as FIPS certified through the Cryptographic Module Validation Program (CMVP).

Applications using PowerSNMP for .NET can be made FIPS 140-2 compliant by using SnmpVersion.Three with AuthenticationProtocol.Sha, and PrivacyProtocol.TripleDes, Aes128, Aes192, or Aes256. DTLS usage defaults to FIPS-compliance, but Agent/Manager.DTLSCipherSuites can be modified as desired to add non-FIPS-compliant ciphers. Agent/Manager.FipsMode can be set to True to only allow use of FIPS-compliant ciphers and algorithms (when encoding SNMP messages manually, see Encode(bool) for more information). Dart offers Subscriptions which include source code for users who wish to obtain FIPS validation through a CMVP vendor.

The following registry settings are used to inform applications to only use cryptographic algorithms that are FIPS 140 compliant. To enable these settings, set their values to 1.

For Windows 2008 and Vista:

HKLM\System\CurrentControlSet\Control\Lsa\FIPSAlgorithmPolicy\Enabled

For Windows Server 2003 and XP:

HKLM\System\CurrentControlSet\Control\Lsa\FIPSAlgorithmPolicy
See Also

PowerSNMP for .NET Documentation Version 8.0
© 2024 Dart Communications. All Rights Reserved.
Send comments on this topic