update-crypto-policies command

Last Updated : Dec 01, 2021 |
The update-crypto-policies is a standard Linux command to provide additional functionality like enable or disable FIPS.
Prolog information
Metadata
Keywords:

Syntax

update-crypto-policies [-h] [--set POLICY] [--show ] [-i, --id] [--is-applied] [--no-reload]
-h
Displays help for the command and also displays the required and optional parameters.
--set [POLICY]
The policy to change to (LEGACY / DEFAULT / FIPS). The FUTURE policy is not supported by Session Manager.
--show
Displays the current policy from the configuration
-i, --id
Return the internal deployment option name contained in the OVF for example, 2000 devices.
--is-applied
Checks whether the current policy is applied.
--no-reload
Does not run the reload script when setting a crypto policy.

Example

To change the crypto policy to DEFAULT:
$ update-crypto-policies --set DEFAULT

A reboot is required after changing crypto policies.
For encrypted systems, this may require entering the encryption
passphrase from the console.

Do you want to continue? [yes/no]:yes

Setting system policy to DEFAULT
Note: System-wide crypto policies are applied on application start-up.
It is recommended to restart the system for the change of policies
to fully take place.
Rebooting to activate new policy: DEFAULT