Juniper SSG-350M-SH User Manual

Juniper Networks SSG 320M and 350M Security Policy
19
Below is a list of the public keys utilized by the module:
 Firmware Authentication Key: Used by the device to verify DSA signatures over
firmware images.
 CA DSA/RSA Public Key: Used by IKE to authenticate a peer’s certificate.
 Local DSA/RSA/ECDSA Public Key: Used by the IKE peer to verify digital signatures.
 SSH Server/Host DSA Public Key: Used by the SSH client to verify digital signatures.
 SSH Client DSA Public Key: Used by the device to verify digital signatures.
 Diffie Hellman Public Key Components: Used by the DH Key Agreement protocol.
Matrix Creation of Critical Security Parameter (CSP) versus the
Services (Roles & Identity)
The following matrices define the set of services to the CSP of the module, providing information on
generation, destruction and usage. They also correlate the User roles and the Crypto-Officer roles to
the set of services to which they have privileges.
The matrices use the following convention:
 G: Generate
 D: Delete
 U: Usage
 N/A: Not Available
Table A: Crypto-Officer
CSP \ Services
Configure
Status
Zeroize
Manage
Self-test
IPSEC HMAC SHA-1
Key
GD
U
D
N/A
N/A
IPSEC ESP Key
GD
U
D
N/A
N/A
IKE Pre-shared Key
GD
U
D
N/A
N/A
IKE Encryption Key
D
N/A
D
N/A
N/A
IKE HMAC SHA-1 Key
D
N/A
D
N/A
N/A
Password
G
1
D
2
U
D
GD
N/A
SSH Server/Host DSA
Private Key
GD
U
D
N/A
N/A
SSH Encryption Key
D
N/A
D
N/A
N/A
SSH HMAC SHA-1 Key
D
N/A
D
N/A
N/A
HA Key
GD
N/A
D
N/A
N/A
IKE RSA/DSA/ECDSA
Private Key
GD
N/A
D
N/A
N/A
PRNG Seed and Seed
Key
G
N/A
D
N/A
N/A
Diffie Hellman Private
Key Components
G
N/A
D
N/A
N/A
RADIUS Secret Key
GD
U
G
N/A
N/A

Juniper SSG-350M-SH Specifications

General

Brand	Juniper
Model	SSG-350M-SH
Category	Server
Language	English