update-crypto-policies command

Last Updated : Dec 01, 2021 |

The update-crypto-policies is a standard Linux command to provide additional functionality like enable or disable FIPS.

Syntax

update-crypto-policies [-h] [--set POLICY] [--show ] [-i, --id] [--is-applied] [--no-reload]
-h
Displays help for the command and also displays the required and optional parameters.
--set [POLICY]
The policy to change to (LEGACY / DEFAULT / FIPS). The FUTURE policy is not supported by Session Manager.
--show

Displays the current policy from the configuration

-i, --id

Return the internal deployment option name contained in the OVF for example, 2000 devices.

--is-applied

Checks whether the current policy is applied.

--no-reload

Does not run the reload script when setting a crypto policy.

Example

To change the crypto policy to DEFAULT:

$ update-crypto-policies --set DEFAULT

A reboot is required after changing crypto policies.
For encrypted systems, this may require entering the encryption
passphrase from the console.

Do you want to continue? [yes/no]:yes

Setting system policy to DEFAULT
Note: System-wide crypto policies are applied on application start-up.
It is recommended to restart the system for the change of policies
to fully take place.
Rebooting to activate new policy: DEFAULT