On Thu, Oct 2, 2008 at 11:11 PM, Subrata Mazumdar
<[EMAIL PROTECTED]> wrote:
> Hi,
> I am using Firefox 3.0.3. I have FIPS enabled the software security
> device using "Secuirty Devices" dialog window in PSM.
> This step forced me to add password protect the internal Key token
> (Software security device).
> Then, I tried to change the password of the "internal key" token using
> the "Change Password" button which popsup the
> password change dialog window. When type in the old password and new
> passwords, it fails to change the password.
> Is this the correct behavior?

Hi Subrata,

In the FIPS mode, NSS has a stricter requirement on password quality.
See the NSS FIPS Security Policy, Section "Strength of Authentication
Mechanism", on page 14:
http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140sp/140sp814.pdf

- The password must be at least seven characters long.
- The password must consist of characters from three or more character
  classes (uppercase, lowercase, digits, etc.).

Does your new password not meet either of these requirements?

Wan-Teh
_______________________________________________
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to