The Nokia router must use Federal Information Processing Standard (FIPS) 140-3-approved algorithms for authentication to a cryptographic module.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-283774	NOKI-ND-000490	SV-283774r1223370_rule	CCI-000803	high
Description
Unapproved mechanisms that are used for authentication to the cryptographic module are not validated and therefore cannot be relied on to provide confidentiality or integrity, and DoW data may be compromised. Network devices using encryption are required to use FIPS-compliant mechanisms for authenticating to cryptographic modules. FIPS 140-3 is the current standard for validating that mechanisms used to access cryptographic modules use authentication that meets DoW requirements. However, authentication algorithms must configure security processes to use only FIPS-approved and National Institute of Standards and Technology (NIST)-recommended authentication algorithms. Satisfies: SRG-APP-000179-NDM-000265, SRG-APP-000224-NDM-000270
STIG			Date
Nokia Service Router OS 25.x Network Device Management Security Technical Implementation Guide			2026-06-15

Details

Check Text (C-283774r1223370_chk)

Verify FIPS has been enabled using the command below: - show bof | match fips fips-140 If the command does not return "fips-140" as shown above, this is a finding.

Fix Text (F-88244r1203366_fix)

Configure the Nokia router to use FIPS 140-3-approved algorithms for authentication to a cryptographic module using the commands below: - bof fips-140 - bof save - admin save - reboot