Module Name
Aruba Virtual and Hardware Mobility Master Appliances with ArubaOS FIPS Firmware
Caveat
When operated in FIPS mode. When installed, initialized and configured as specified in Section 9 of the Security Policy
Security Level Exceptions
- Roles, Services, and Authentication: Level 2
- Mitigation of Other Attacks: N/A
Embodiment
Multi-Chip Stand Alone
Description
Aruba's family of Mobility Masters simplify the management of multiple Aruba controllers running ArubaOS. Key features include a centralized dashboard to easily see and manage controllers, configuration hierarchy to customize deployments for various sites, and live firmware and feature upgrades to improve network reliability during active user sessions. The addition of licensing pools simplifies the transfer of licenses between different controllers to quickly address expanded deployment needs.
Tested Configuration(s)
- Aruba Mobility Master 10K - F1 Hardware Appliance (JZ398A) with ArubaOS 8.10.0.2-FIPS with an Intel Xeon Silver with PAA
- Aruba Mobility Master 1K - F1 Hardware Appliance (JZ396A) with ArubaOS 8.10.0.2-FIPS with an Intel Xeon Silver with PAA
- Aruba Mobility Master 5K - F1 Hardware Appliance (JZ397A) with ArubaOS 8.10.0.2-FIPS with an Intel Xeon Silver with PAA
- ArubaOS 8.10.0.2-FIPS on ESXi 6.5 running on an HPE ProLiant ML110 Gen10 with an Intel Xeon Silver with PAA
- ArubaOS 8.10.0.2-FIPS on ESXi 6.5 running on an HPE ProLiant ML110 Gen10 with an Intel Xeon Silver without PAA
Approved Algorithms
| AES |
Certs. #A2689 and #A2690 |
| CVL |
Certs. #A2689 and #A2690 |
| DRBG |
Cert. #A2690 |
| DSA |
Certs. #A2689 and #A2690 |
| ECDSA |
Certs. #A2689 and #A2690 |
| HMAC |
Certs. #A2689 and #A2690 |
| KAS |
KAS-SSC Cert. #A2689, CVL Cert. #A2689 |
| KAS |
KAS-SSC Cert. #A2690, CVL Cert. #A2690 |
| KAS |
KAS-SSC Cert. #A2690, KDA Cert. #A2690 |
| KAS-SSC |
Certs. #A2689 and #A2690 |
| KDA |
Cert. #A2690 |
| KTS |
AES Cert. #A2689 and HMAC Cert. #A2689; key establishment methodology provides between 128 and 256 bits of encryption strength |
| KTS |
AES Cert. #A2689; key establishment methodology provides 128 or 256 bits of encryption strength |
| KTS |
AES Cert. #A2690 and HMAC Cert. #A2690; key establishment methodology provides between 128 and 256 bits of encryption strength |
| KTS |
AES Cert. #A2690; key establishment methodology provides 128 or 256 bits of encryption strength |
| RSA |
Certs. #A2688, #A2689 and #A2690 |
| SHS |
Certs. #A2688, #A2689 and #A2690 |
Allowed Algorithms
MD5; NDRNG; RSA (key wrapping; key establishment methodology provides 112 bits of encryption strength)
Firmware Versions
ArubaOS 8.10.0.2-FIPS
