NetApp Volume Encryption (NVE) and the Onboard Key Manager (OKM) are FIPS 140-2 Compliant

Here's an early Christmas present:  NVE is now FIPS 140-2 compliant!

NetApp CryptMod

This is the cryptographic module that is used by both NVE and OKM.  This is the module that was taken through the FIPS-140-2 level 1 validation and completed the validation.  CryptoMod is FIPS 140-2 validated.

Where is this module used?

This module is for NVE and OKM in all flavors: AFF, FAS, ONTAP Select, and ONTAP Cloud.

Is there any specific version of ONTAP that I need to run?

You need to have at least ONTAP 9.2 to run FIPS validated NVE.

What do I need to do to turn on FIPS for NVE/OKM?

Nothing - just make sure you are running at least ONTAP 9.2.



Yes, it is that easy.

Comments