2. EL 9
  3. crypto-policies-scripts
  4. fips-finish-install(8)

Scroll to navigation

FIPS-FINISH-INSTAL(8)   FIPS-FINISH-INSTAL(8)

NAME

fips-finish-install - complete the installation of FIPS modules.

SYNOPSIS

fips-finish-install [--complete|--undo]

DESCRIPTION

fips-finish-install(8) is used by the fips-mode-setup(8) command to complete the installation of the system FIPS modules. The tool is not supposed to be called directly by the system administrator, but it is possible to do so.

OPTIONS

The only recognized and mandatory option is:

--complete: The command completes the FIPS module installation and calls dracut -f to regenerate the initramfs.

--undo: The command undoes some of the FIPS module installation steps. Please note that module installation cannot be undone without reformatting of and overwriting, at least once, the platform’s hard drive or other permanent storage media. This option is not meant to be used in production, is not supported, and is implemented for testing purposes only.

FILES

/etc/system-fips

The presence of the file used to indicate that the installation of FIPS modules has been completed. Support for indicating FIPS mode through the /etc/system-fips file has been removed, and the file will not be included in future versions of RHEL. Please inspect the contents of /proc/sys/crypto/fips_enabled instead.

SEE ALSO

fips-mode-setup(8)

AUTHOR

Written by Tomáš Mráz.

02/02/2024 fips-finish-install