HP 8/8 Fabric OS Administrator's Guide v6.4.0 (53-1001763-01, June 2010) - Page 565

FIPS mode configuration D 2. Configure the DNS on the switch by using the dnsConfig command. Example of setting the DNS switch:admin> dnsconfig Enter option 1 Display Domain Name Service (DNS) configuration 2 Set DNS configuration 3 Remove DNS configuration 4 Quit Select an item: (1..4) [4] 2 Enter Domain Name: [] domain.com Enter Name Server IP address in dot notation: [] 123.123.123.123 Enter Name Server IP address in dot notation: [] 123.123.123.124 DNS parameters saved successfully Enter option 1 Display Domain Name Service (DNS) configuration 2 Set DNS configuration 3 Remove DNS configuration 4 Quit Select an item: (1..4) [4] 4 Specify the DNS IP address using either IPv4 or IPv6. This is needed for the switch to resolve the domain name to the IP address because LDAP initiates a TCP session to connect to your Microsoft Active Directory server. A Fully Qualified Domain Name (FQDN) is needed to validate the server identity as mentioned in the common name of the server certificate. 3. Set up LDAP according to the instructions in "LDAP configuration and Microsoft Active Directory" on page 111 in Chapter 5, "Managing User Accounts". • Additional Microsoft Active Directory settings a. Set the following SCHANNEL settings listed in Table 105 to allow. To support FIPS-compliant TLS cipher suites on Microsoft's Active Directory server, allow the SCHANNEL settings listed in Table 105. Refer to www.microsoft.com for instructions on how to allow the SCHANNEL settings for the ciphers, hashes, key exchange and the TLS protocol. TABLE 105 Active Directory keys to modify Key Sub-key Ciphers 3DES Hashes SHA1 Key exchange algorithm PKCS Protocols TLSv1.0 b. Enable FIPS algorithm policy on the Microsoft Active Directory. Refer to www.microsoft.com for instructions. Fabric OS Administrator's Guide 525 53-1001763-01