2.2. Installing the system with FIPS mode enabled
To enable the cryptographic module self-checks mandated by the Federal Information Processing Standard (FIPS) Publication 140-3, enable FIPS mode during the system installation.
Red Hat recommends installing RHEL with FIPS mode enabled, as opposed to enabling FIPS mode later. Enabling FIPS mode during the installation ensures that the system generates all keys with FIPS-approved algorithms and continuous monitoring tests in place.
Procédure
Add the
fips=1option to the kernel command line during the system installation.During the software selection stage, do not install any third-party software.
After the installation, the system starts in FIPS mode automatically.
Vérification
After the system starts, check that FIPS mode is enabled:
$ fips-mode-setup --check FIPS mode is enabled.
Ressources supplémentaires
- Editing boot options section in the Boot options for RHEL Installer document
