Cisco LightStream 1010 Instruction Manual

Installation, Maintenance, and Upgrade
•Install the FIPS Opacity Shield , on page 1
Install the FIPS Opacity Shield
Because the FIPS opacity shield covers the serial number on the chassis, the CO should copy the serial number
and store it in a secure place. The serial number is needed when you call Cisco TAC. See Serial Number
Location for the location of the serial number.
Note
You can only install the FIPS opacity shield with the desktop mount or wall mount. The rack mount does not
support the FIPS shield. See Desktop-Mount the Chassis and Wall-Mount the Chassis for more information.
Note
Before you begin
This procedure should be performed only by the Crypto Officer (CO).
Caution
You need the following to install the FIPS opacity shield:
• #1 Phillips head screwdriver
• The following items from the FIPS kit (part number 69-100649-01):
• One FIPS opacity shield (part number 800-106088-01)
• Three M3 x 66 mm (part number 48-0384-01) screws used to attach the FIPS opacity shield to the
chassis
• Nine Tamper Evidence Labels (TELs) (part number 47-25553-01)
Installation, Maintenance, and Upgrade
1

The TELs are made of a special thin gauge vinyl with self-adhesive backing.
Once the CO attaches them on the chassis, any attempt to open the chassis damages
the TELs or the chassis cover. Because the TELs have nonrepeated serial numbers,
the CO can inspect them for damage and compare them against the applied serial
numbers to verify whether the chassis has been tampered with. TELs with curled
corners, rips, and slices indicate tampering. The word “FIPS” or “OPEN” may
appear if the label has been peeled back.
Note
Step 1 Copy the serial number and store in a secure place.
Step 2 If the chassis is mounted on a wall, uninstall it by following Steps 9-10 in Wall-Mount the Chassis.
Step 3 Install the FIPS cover by holding the chassis right-side up and sliding the chassis into the FIPS cover front panel first.
Figure 1: Install Chassis into FIPS Cover
Step 4 Turn the chassis with the FIPS cover installed over and install the three screws.
Installation, Maintenance, and Upgrade
2
Installation, Maintenance, and Upgrade
Install the FIPS Opacity Shield

Figure 2: Install Screws on the Bottom of the FIPS Cover
Three M3 x 66 mm Phillips screws2FIPS opacity shield1
Step 5 Before you attach the TELs, clean the chassis and FIPS cover of any grease, dirt, or oil with alcohol-based cleaning
pads.
Step 6 Attach four of the TELs, three on the bottom of the chassis over the screws and one on the front of the chassis. See the
figure below for the correct placement. The figure shows the bottom of the chassis where you place three of the TELs.
Allow the TELs to cure for a minimum of 12 hours.
Any deviation in the placement of the TELs means the chassis is not in FIPS mode.
Caution
Installation, Maintenance, and Upgrade
3
Installation, Maintenance, and Upgrade
Install the FIPS Opacity Shield

Figure 3: TELS Placement on the Rear Panel and Bottom of the FIPS Cover
TEL 2 on the bottom left of the FIPS cover over the
screw
2TEL 1 on the rear panel of the chassis1
TEL 4 on the bottom right of the FIPS cover over the
screw
4TEL 3 on the bottom center of the FIPS cover over
the screw
3
Step 7 Reinstall the chassis in the wall mount if you are using a mount. See Wall-Mount the Chassis for the procedure.
Step 8 Attach the power cable to the chassis and connect it to an electrical outlet.
Step 9 Press the power switch on the rear panel.
Step 10 Check the power LED on the front panel. See Status LEDs for a description of the power LED. Solid green indicates
that the chassis is powered on.
Step 11 Place the chassis in FIPS mode.
See the following procedures for how to place the chassis in FIPS mode:
• See the "Security Certifications Compliance" chapter in the Firepower Management Center Configuration Guide,
Version 6.7 for the procedure to enable FIPS mode.
Installation, Maintenance, and Upgrade
4
Installation, Maintenance, and Upgrade
Install the FIPS Opacity Shield

• See the fips enable command in the Cisco ASA Series Command Reference, A-H Commands for the ASA
procedure to enable FIPS mode.
What to do next
See the Cisco Firepower 1010 Getting Started Guide for further configuration information.
Installation, Maintenance, and Upgrade
5
Installation, Maintenance, and Upgrade
Install the FIPS Opacity Shield

Installation, Maintenance, and Upgrade
6
Installation, Maintenance, and Upgrade
Install the FIPS Opacity Shield