Implementing a NIST 800-131A compliant environment

Use this information to understand the how you can set up products in the Lenovo Flex System product family to comply with the NIST 800-131A standard.

For information about setting up a NIST 800-131A compliant environment using the Lenovo XClarity Administrator, see Implementing NIST 800-131 compliance using the Lenovo XClarity Administrator.

Overview of NIST 800-131A
The National Institute of Standards and Technology (NIST) Special Publication 800-131A (SP800-131A) specifies the way that secure communications should be handled. The standard strengthens algorithms and increases key lengths to improve security. The SP800-131A standard requires that users be configured for strict enforcement of the standard.
Supported devices
Use this information to understand the cryptographic modes that are provided by Lenovo Flex System components and the functions that might need to be disabled, are not supported, or do not comply with the standard, depending on the cryptographic mode that you implement.
Functional limitations
As a secure environment, there are some functional limitations related to implementing NIST 800-131A compliance for Lenovo Flex System components. These limitations are not in the Lenovo Flex System. Instead, these limitations are related to communications between the Lenovo Flex System components and the back end infrastructure required to support the functions.
Cryptography modes and IBM Flex System Manager management modes
When you manage a chassis, you can choose to manage it in centralized mode or in decentralized mode. The cryptography modes and ciphers that you choose for the IBM Flex System Manager management node and the CMM will affect which management mode you choose for chassis management. It will also determine whether you can switch between decentralized mode and centralized mode.
Flex Version 1.3.2
The process for implementing NIST 800-131A compliance for the Lenovo Flex System differs depending on whether you are using the IBM Flex System Manager or the Chassis Management Module to manage a chassis.
Flex Version 1.3.1
To implement an environment compatible with NIST 800-131A, you must be running Flex Version 1.3.2.