Workflow for FIPS-enabled NFM-P discovery of a new device
Description
The following are the high-level steps required to commission and discover a device for NFM-P management using FIPS security.
Note: In order to use the workflow, the following must be true:
FIPS is enabled on a main server using a parameter in the top-level section of samconfig, as described in the NFM-P system installation procedures.
Stages
1 |
Manually enable FIPS mode on the device; see the device documentation for information. Note: You cannot use the NFM-P to enable FIPS mode on a device. |
2 |
Manually create a FIPS-compliant SNMPv3 user account on the device Note: You cannot use the NFM-P to create an SNMPv3 user account on a device. |
3 |
Create an NFM-P SNMPv3 user account that matches the device user account. |
4 |
Create a FIPS-compliant NFM-P discovery rule for the device, and specify the NFM-P SNMPv3 user in the associated mediation policy. In accordance with the NFM-P polling policy, the NFM-P discovers and manages the device using FIPS security during the next discovery-rule scan. |