Enabling FIPS mode

Last Updated : Jul 22, 2021 |

About this task

Federal Information Processing Standard (FIPS) is a cryptographic security standard. Use this procedure if your enterprise requires FIPS compliance.

Warning:

Performing this procedure causes a service outage. FIPS mode may also cause outages if components communicating with Session Manager do not use FIPS-approved algorithms.

Procedure

  1. From the System Manager web console, put the Session Manager instance in the Deny New Service mode.
  2. Log in to Session Manager CLI with root credentials.
  3. Run the fips_mode.sh enable command to enable FIPS mode as shown below:
    [root@ASM ~]# /opt/Avaya/bin/fips_mode.sh enable
    A reboot will take place in order for the changes to take effect
    Would you like to continue?
    1) Yes
    2) No
    Choose 1 or 2:
  4. Type 1 to enable FIPS mode.
  5. After reboot, log in to Session Manager CLI with root credentials.
  6. Run the following command to ensure that the FIPS mode is enabled:

    fips_mode.sh

  7. From the System Manager web console, put the Session Manager instance in the Accept New Service mode.