How does ISE handle local credential encryption?

[bobcook1]

Hi all,

My office is in the middle of a security audit.  One of the questions that has come up is how the ISE encrypts credentials that are stored locally on the device.  

I know Cisco does a Certification process for FIPS 140-2 and has certified ISE 2.2 (2.4 isn't listed).  The admin guide for ISE 2.2 also says "Cisco Identity Services Engine uses embedded FIPS 140-2 validated cryptographic modules."   

Does anyone know if the embedded FIPS modules in ISE are used to encrypt locally stored username/passwords?  

Many thanks in advance!

[Timothy Abbott · Accepted solution]

Hi,

Please see the FAQ section of the ISE Security Best Practices (Hardening) guide.

Regards,

-Tim

[bobcook1]

Exactly what I was looking for.  Thank you so much!