Enabling FIPS mode for B3000 badges

Configure an SSID on your wireless network for WPA2-PSK, WPA2-PEAP, or WPA2-TLS, the security settings required for running the badge in FIPS mode.

Start the Badge Properties Editor on the badge configuration computer.

In the Badge Type list, select B3000.

On the General tab, select the SSID that has been configured for WPA-PSK, WPA-PEAP, or EAP-TLS authentication and AES-CCMP encryption.

Click the Security tab.

Ensure that the checkbox next to Enable FIPS is selected.

Specify one of the following security profiles:

To enable WPA2-PSK for Vocera badges:
- Select WPA-PSK authentication in combination with AES-CCMP encryption
- Specify the PreShared Key value
- Select other badge properties as appropriate
To enable WPA2-PEAP for Vocera badges:
- Select WPA-PEAP authentication in combination with AES-CCMP encryption
- Specify the User Name and Password values. Each badge must use the same user name and password.
- Select other badge properties as appropriate
To enable WPA2-TLS for Vocera badges:
- Select EAP-TLS authentication in combination with AES-CCMP encryption
- Configure the certificates as described in Configuring Badges for EAP-TLS Authentication
- Select other badge properties as appropriate

Click OK to save these values and close the Badge Properties Editor.

Configure a test badge to make sure it can connect to your network. See Configuring a Test Badge.

If the test badge connected successfully, copy the badge.properties file to the \vocera\config folder of the active Vocera Server computer.

Use the Vocera Control Panel to stop and start the active Vocera Server. When the Vocera Server restarts, it pushes the updated badge properties to the badges.

Note: To see whether FIPS mode is currently enabled on a B3000 badge, select the Info menu, and then select FIPS Mode.