Select a FIPS-Compliant Algorithm for SNMPv3 Communication

If you configured NNMi to discover devices by using the SNMPv3 protocol, make sure NNMi is configured to use one of the following FIPS-compliant algorithms for discovering SNMPv3 information:

• Authentication protocol:

  • SHA-1

• Privacy protocol:

  • Triple-DES
  • AES-128
  • AES-192
  • AES-256

If you use weaker algorithms after following the instructions in Configure Secure SNMPv3 Communication, NNMi's communication with devices will fail.

If you did not select one of the algorithms listed above while configuring discovery and communication, do the following:

1. Log on to the NNMi console as an administrator.

2. From the Configuration workspace, launch the Communication Configuration form.

   Note See the Configuring Communication Protocol section in NNMi Help for Administrators.

3. Launch the SNMPv3 Settings form from the Communication Configuration form.
4. Set Authentication Protocol to SHA-1.
5. Set Privacy Protocol to Triple-DES, AES-128, AES-192, or AES-256.
6. Save the configuration.

Alternatively, you can use the nnmcommunication.ovpl command to select these protocols. The -authProtocol and -privProtocol parameters help you select the authentication and privacy protocols. For more information, see the reference page (from the NNMi help menu, click Help > NNMi Documentation Library > Reference Pages) or Linux man page of nnmcommunication.ovpl.