User`s guide

n
FIPS 140-2: Security Requirements for Cryptographic Modules
n
FIPS 46-3: Data Encryption Standard (DES)
n
FIPS 81: DES Modes of Operation
n
FIPS 113: Computer Data Authentication
n
FIPS 171: Key Management
n
FIPS 180-1: Secure Hash Standard (SHA-1)
n
FIPS 186-2: Digital Signature Standard (DSA) and Random Number Generation (RNG)
n
FIPS 198: Message Authentication Codes (MACs) using SHA-1
n
FIPS 197: Advanced Encryption Standard (AES) Cipher
n
FIPS 200: Federal Information Security Management Act (FISMA)
n
SP 800-2: Public Key Cryptography (including RSA)
n
SP 800-20: Triple DES Encryption (3DES) Cipher
VCM Uses Microsoft Cryptographic Service Providers for Windows
Machines
On Windows machines, VCM uses cryptography using the Microsoft CryptoAPI, which is a framework
that dispatches to Microsoft Cryptographic Service Providers (CSPs). CSPs are not shipped with VCM or
installed by VCM, but instead are part of the security environment that is included with Microsoft
Windows. In the configurations supported by VCM, these CSPs are FIPS 140-2 validated.
For a current table of FIPS certificate numbers, see the FIPS 140 Evaluation in the online Microsoft Library.
Cryptography for UNIX/Linux Platforms
On UNIX/Linux platforms, the VCM Agent uses the cryptography of the OpenSSL v0.9.7 module. This
cryptographic library is installed with the VCM Agent.
Cryptography used in VCM Software Components
VCM uses software components that also use cryptography.
n
Microsoft IIS, Internet Explorer, and SChannel (SSL/TLS) systems call the CryptoAPI, and therefore use
the Windows FIPS-validated modules.
n
VCM for Virtualization uses ActiveX COM components from WeOnlyDo! Software (WOD) for SSH and
SFTP services.
n
WOD uses the FIPS 140-2 compliant OpenSSL library.
System
Platform
Open
SSLFIPS 1.1.2
Open
SSLFIPS 1.1.1
Open
SSLCrypt 0.9.7
Crypto++ Crypto
API
UI Windows Used
VCMServer Windows Installed Used
Virt Proxy Windows Installed Used
AD Agent Windows Used
Win Agent Windows Used
Table 1–1. Installed or Used Crytography Modules
Preparing for Installation
VMware, Inc. 17