Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

"Back from FIPS disabled CPPM cannot be restored on FIPS enabled CPPM"

This thread has been viewed 2 times

  • 1.  "Back from FIPS disabled CPPM cannot be restored on FIPS enabled CPPM"

    Posted Mar 01, 2016 10:41 AM
      |   view attached

    I get this error while restoring the backup of CPPM. can any one help.



  • 2.  RE: "Back from FIPS disabled CPPM cannot be restored on FIPS enabled CPPM"
    Best Answer

    EMPLOYEE
    Posted Mar 04, 2016 03:39 PM

    http://www.arubanetworks.com/techdocs/ClearPass/Aruba_CPPMOnlineHelp/index.htm#CPPM_UserGuide/Admin/ServerConfig_FIPS_tab.htm

     

    "Configuration backup file from the ClearPass Policy Manager in the non-FIPS mode cannot be restored on ClearPass Policy Manager in FIPS mode. However, configuration backup file from the ClearPass Policy Manager in FIPS mode can be restored on the ClearPass Policy Manager in non-FIPS mode."

     



  • 3.  RE: "Back from FIPS disabled CPPM cannot be restored on FIPS enabled CPPM"

    Posted Oct 11, 2017 10:42 AM

    Hi,  

     

    I'm fightying with my ClearPass Guest 6.6.8.34923 and the restore/backup features.

     

    I have a backup file exported from a clearpass in FIPS mode enabled and I'm trying to import the file into a Clearpass guest NON-FIPS, but it fails.
    The server returns the following error message: "Invalid backup file (no private key found for decryption)".

     

    Already tried to import the backup file (exported from a server in the FIPS mode) into a server with FIPS mode enabled, same error message.

     

    I can succesful import a backup file only from NON-FIPS server into a NON-FIPS server.


    So, seems that the FIPS mode doesn't allow the restore/bacukup features on clearpass Guest.

     

    Any suggestion?