Meeting the InCommon Assurance profile criteria using Active Directory

["Rank, Mark" <>]

+1

 

Mark Rank
Project Manager - Identity & Access Mgt

UCSF Information Technology Services (ITS)
email:

phn:414-331-1476

---

From: [] on behalf of Ann West []
Sent: Friday, March 01, 2013 10:29 AM
To:
Subject: Re: [AD-Assurance] Various links of interest

All,

To help with the sharing bit, should we be adding the background to the AD Cookbook page in the wiki?

https://spaces.internet2.edu/display/InCAssurance/AD+Silver+Cookbook

I can add another page under this one called something like AD Alternative Means - 2013 and we can start posting the resources there for now. Thoughts?

Best,

Ann

From: Brian Arkills <>
Reply-To: "" <>
Date: Friday, March 1, 2013 1:00 PM
To: "" <>
Subject: [AD-Assurance] Various links of interest

Incommon IAP

http://www.incommon.org/docs/assurance/IAP.pdf

 

AD Silver cookbook

https://spaces.internet2.edu/display/InCAssurance/InCommon+Silver+with+Active+Directory+Domain+Services+Cookbook

 

FIPS 140-2

http://csrc.nist.gov/publications/fips/fips140-2/fips1402.pdf

 

Example of specific Microsoft library that is FIPS approved:

http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/1401val2010.htm#1335

 

Note: All of these have at the end of the "Operational Environment:" the parenthetical "(single-user mode)".

 

Enabling FIPS approved mode on Windows:

http://support.microsoft.com/kb/811833

 

-B