Home » HP Manuals » Storage Devices » HP StorageWorks 1606 » Manual Viewer

HP StorageWorks 1606 Brocade Fabric OS Command Reference v6.3.0 (53-1001337-01 - Page 332

fipsCfg, Con s FIPS Federal Information Processing Standards mode.

View all HP StorageWorks 1606 manuals

Add to My Manuals
Save this manual to your list of manuals

Page 332 highlights

2 fipsCfg fipsCfg Configures FIPS (Federal Information Processing Standards) mode. Synopsis fipscfg --enable [fips | selftests | bootprom] fipscfg --disable [fips | selftests | bootprom] fipscfg --zeroize fipscfg --show | --showall fipscfg --force fips fipscfg --verify fips Description Use this command to configure FIPS mode on the switch. In this mode, only FIPS-compliant algorithms are allowed. As part of FIPS 140-2 level 2 compliance, passwords, shared secrets and the private keys used in SSL/TLS, system login, etc., need to be zeroized. Power-up self tests are executed when the switch is powered on to check for the consistency of the algorithms implemented on the switch. Notes Certain services and functions, such as FTP, HTTP, remote procedure calls (RPC), root account, boot prom access, etc., must be blocked before the system can enter FIPS mode. LDAP should not be configured while FIPS is enabled. The system must be rebooted for FIPS mode changes to take effect. Refer to the Fabric OS Administrator's Guide for information on configuring your system for FIPS 140-2 level 2 compliance. FIPS mode cannot be modified through configDownload. FIPS is not supported on all platforms. For FIPS-compliant hardware, refer to the Fabric OS Administrator's Guide. In a Virtual Fabric environment, FIPS is treated as chassis-wide configuration and applies to all logical switches in the chassis. Chassis permissions are required to configure FIPS. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability" for details. Operands This command has the following operands: --disable [fips | selftests] Disables FIPS or Selftests mode. Selftests cannot be disabled when FIPS mode is enabled. --enable [fips | selftests] Enables FIPS or Selftests mode. Selftests must be enabled before FIPS mode is enabled. --zeroize Erases all passwords, shared secrets, private keys, etc. in the system. --show |--showall Displays the current FIPS configuration. 302 Fabric OS Command Reference 53-1001337-01

Section	Page
Contents	7
About This Document	21
In this chapter	21
How this document is organized	21
Supported hardware and software	21
What is new in this document	23
Document conventions	25
Text formatting	25
Command syntax conventions	26
Notes, cautions, and warnings	26
Key terms	27
Notice to the reader	27
Additional information	28
Brocade resources	28
Other industry resources	28
Getting technical help	28
Document feedback	29
Using Fabric OS Commands	31
In this chapter	31
Understanding role-based access control	31
Understanding Virtual Fabric restrictions	32
Understanding Admin Domain restrictions	33
Using the command line interface	33
Fabric OS Commands	35
aaaConfig	35
ad	40
ag	51
agAutoMapBalance	66
agshow	69
aliAdd	71
aliCreate	72
aliDelete	73
aliRemove	74
aliShow	75
aptPolicy	76
auditCfg	78
auditDump	80
authUtil	81
bannerSet	85
bannerShow	86
bcastShow	87
bladeCfgGeMode	88
bladeDisable	90
bladeEnable	92
bladeSwap	94
bootLunCfg	95
bottleneckMon	96
bpPortLoopbackTest	100
bpTurboRamTest	103
cfgActvShow	105
cfgAdd	106
cfgClear	107
cfgCreate	108
cfgDelete	109
cfgDisable	110
cfgEnable	111
cfgMcdtmode	112
cfgRemove	113
cfgSave	114
cfgSaveActiveToDefined	115
cfgShow	116
cfgSize	118
cfgTransAbort	120
cfgTransShow	121
chassisBeacon	122
chassisConfig	123
chassisDistribute	124
chassisEnable	126
chassisDisable	127
chassisName	128
chassisShow	129
cliHistory	131
cmsh	132
configDefault	134
configDownload	136
configList	141
configRemove	142
configShow	143
configUpload	147
configure	151
configureChassis	159
cryptoCfg	161
dataTypeShow	209
date	210
dbgShow	212
defZone	213
diagClearError	215
diagDisablePost	216
diagEnablePost	217
diagHelp	218
diagPost	219
diagRetry	220
diagShow	221
dbgShow	222
distribute	223
dlsReset	225
dlsSet	226
dlsShow	227
dnsConfig	228
enclosureShow	229
errClear	230
errDelimiterSet	231
errDump	232
errFilterSet	234
errModuleShow	235
errShow	236
exit	238
fabPortShow	239
fabRetryShow	242
fabricLog	243
fabricPrincipal	245
fabricShow	247
fabStatsShow	249
fabSwitchShow	251
fanDisable	252
fanEnable	253
fanShow	254
fastboot	255
fastWriteCfg	256
fcipChipTest	258
fcipHelp	260
fcipPathTest	261
fcLunQuery	263
FCoE	264
fcoeLoginCfg	268
fcoeLoginGroup	270
fcPing	272
fcpLogClear	276
fcpLogDisable	277
fcpLogEnable	278
fcpLogShow	279
fcpProbeShow	280
fcpRlsShow	281
fcrBcastConfig	282
fcrChipTest	284
fcrConfigure	286
fcrEdgeshow	287
fcrFabricShow	289
fcrlSan	291
fcrLsanCount	293
fcrLsanMatrix	294
fcrPathTest	299
fcrPhyDevShow	302
fcrProxyConfig	304
fcrProxyDevShow	306
fcrResourceShow	308
fcrRouterPortCost	310
fcrRouteShow	312
fcrXlateConfig	313
fddCfg	316
fdmiCacheShow	318
fdmiShow	319
ficonClear	320
ficonCupSet	321
ficonCupShow	323
ficonHelp	325
ficonShow	326
fipsCfg	332
firmwareCommit	335
firmwareDownload	336
firmwareDownloadStatus	341
firmwareKeyShow	344
firmwareKeyUpdate	345
firmwareRestore	347
firmwareShow	348
fosConfig	349
fruReplace	352
fspfShow	353
fwAlarmsFilterSet	355
fwAlarmsFilterShow	356
fwClassInit	357
fwConfigReload	358
fwConfigure	359
fwFruCfg	364
fwHelp	365
fwMailCfg	366
fwPortDetailShow	368
fwSamShow	371
fwSet	373
fwSetToCustom	374
fwSetToDefault	377
fwShow	380
h	383
haDisable	384
haDump	385
haEnable	387
haFailover	388
haShow	389
haSyncStart	391
haSyncStop	392
help	393
historyLastShow	395
historyMode	396
historyShow	397
httpCfgShow	399
i	400
iclCfg	402
ifModeSet	404
ifModeShow	406
interfaceShow	408
interopMode	412
iodDelayReset	416
iodDelayShow	417
iodReset	418
iodSet	419
iodShow	421
ipAddrSet	422
ipAddrShow	427
ipfilter	430
ipsecConfig	435
iscsiCfg	451
iscsiChipTest	459
iscsiHelp	460
iscsiPathTest	461
iscsiPortCfg	462
iscsiSessionCfg	465
iscsiSwCfg	467
islShow	468
isnscCfg	469
itemList	471
killTelnet	473
ldapCfg	474
lfCfg	476
licenseAdd	479
licenseHelp	480
licenseIdShow	481
licensePort	482
licenseRemove	484
licenseShow	486
licenseSlotCfg	488
linkCost	492
login	494
logout	495
lsanZoneShow	496
lsCfg	498
lsDbShow	503
fosExec	506
memShow	509
msCapabilityShow	510
msConfigure	511
msPlatShow	513
msPlatShowDBCB	514
msPlClearDB	515
msPlMgmtActivate	516
msPlMgmtDeactivate	517
msTdDisable	518
msTdEnable	519
msTdReadConfig	520
myId	521
nbrStateShow	522
nbrStatsClear	524
nodeFind	526
nsAliasShow	528
nsAllShow	532
nsCamShow	533
nsShow	535
nsZoneMember	538
passwd	541
passwdCfg	544
pathInfo	549
pdShow	555
perfAddEEMonitor	556
perfResourceShow	560
perfAddIPMonitor	564
perfAddReadMonitor	565
perfAddRWMonitor	566
perfAddSCSIMonitor	567
perfAddUserMonitor	568
perfAddWriteMonitor	570
perfCfgClear	571
perfCfgRestore	572
perfCfgSave	573
perfClearAlpaCrc	574
perfDelEEMonitor	575
perfDelFilterMonitor	576
perfHelp	577
perfMonitorClear	578
perfMonitorShow	580
perfSetPortEEMask	584
perfShowAlpaCrc	586
perfShowPortEEMask	587
perfTTmon	589
pkiCreate	592
pkiRemove	593
pkiShow	594
policy	595
portAddress	598
portAlpaShow	601
portBeacon	602
portBufferShow	603
portCamShow	605
portCfg	607
portCfgAlpa	628
portCfgAutoDisable	629
portCfgCreditRecovery	631
portCfgDefault	632
portCfgEport	633
portCfgEXPort	634
portCfgFillword	637
portCfgFportBuffers	638
portCfgGport	639
portCfgISLMode	640
portCfgLongDistance	642
portCfgLport	645
portcfgGeMediaType	647
portCfgNPIVPort	648
portCfgNPort	650
portCfgPersistentDisable	651
portCfgPersistentEnable	653
PortCfgQos	655
portCfgShow	657
portCfgSpeed	666
portCfgTrunkPort	667
portCfgVEXPort	668
portCmd	671
portDebug	678
portDisable	679
portEnable	681
portErrShow	683
portFencing	685
portFlagsShow	687
portLedTest	688
portLogClear	689
portLogConfigShow	690
portLogDisable	691
portLogDump	692
portLogDumpPort	693
portLogEnable	694
portLogEventShow	695
portLoginShow	696
portLogPdisc	697
portLogReset	698
portLogResize	699
portLogShow	700
portLogShowPort	705
portLogTypeDisable	706
portLogTypeEnable	707
portLoopbackTest	708
portMirror	711
portName	714
portPerfShow	715
portRouteShow	717
portShow	719
portStats64Show	755
portStatsClear	758
portStatsShow	759
portSwap	765
portSwapDisable	766
portSwapEnable	767
portSwapShow	768
portTest	769
portTestShow	771
portThConfig	772
portTrunkArea	780
portZoneShow	785
powerOffListSet	786
powerOffListShow	788
psShow	789
reboot	790
routeHelp	791
secActiveSize	792
secAuthSecret	793
secCertUtil	795
secDefineSize	801
secGlobalShow	802
secHelp	804
secPolicyAbort	805
secPolicyActivate	806
secPolicyAdd	807
secPolicyCreate	809
secPolicyDelete	812
secPolicyDump	814
secPolicyFCSMove	817
secPolicyRemove	819
secPolicySave	821
secPolicyShow	822
secStatsReset	824
secStatsShow	826
sensorShow	828
setContext	829
setDbg	830
setModem	831
setVerbose	832
sfpShow	833
shellFlowControlDisable	837
shellFlowControlEnable	838
slotPowerOff	839
slotPowerOn	840
slotShow	841
SnmpConfig	845
snmpTraps	854
spinFab	856
sshUtil	859
statsClear	863
stopPortTest	864
supportFfdc	865
supportFtp	866
supportSave	868
supportShow	871
supportShowCfgDisable	874
supportShowCfgEnable	875
supportShowCfgShow	876
switchBeacon	877
switchCfgPersistentDisable	878
switchCfgPersistentEnable	879
switchCfgSpeed	880
switchCfgTrunk	881
switchDisable	882
switchEnable	883
switchName	884
switchShow	885
switchStatusPolicySet	893
switchStatusPolicyShow	895
switchStatusShow	897
switchUptime	899
switchViolation	900
syslogdFacility	901
syslogdIpAdd	902
syslogdIpRemove	903
syslogdIpShow	904
sysMonitor	905
sysShutDown	907
tempShow	909
timeOut	910
topologyShow	911
traceDump	915
trackChangesHelp	917
trackChangesSet	918
trackChangesShow	919
trunkDebug	920
trunkShow	921
tsClockServer	924
tsTimeZone	926
turboRamTest	929
upTime	930
uRouteConfig	931
uRouteRemove	932
uRouteShow	933
usbStorage	935
userConfig	937
userRename	945
version	946
wwn	947
wwnAddress	948
zone	950
zoneAdd	959
zoneCreate	960
zoneDelete	962
zoneHelp	963
zoneObjectCopy	964
zoneObjectExpung	965
zoneObjectRename	966
zoneRemove	967
zoneShow	968
Primary FCS commands	969
Primary FCS commands	969
Appendix A: Command availability	971
In this appendix	971
Command validation checks	971
Encryption commands and permissions	972

Match case Limit results 1 per page

302

Fabric OS Command Reference

53-1001337-01

fipsCfg

Configures FIPS (Federal Information Processing Standards) mode.

Synopsis

fipscfg

enable

[fips | selftests | bootprom]

fipscfg

disable

[fips | selftests | bootprom]

fipscfg

zeroize

fipscfg

show

showall

fipscfg

force fips

fipscfg

verify fips

Description

Use this command to configure FIPS mode on the switch. In this mode, only FIPS-compliant

algorithms are allowed. As part of FIPS 140-2 level 2 compliance, passwords, shared secrets and

the private keys used in SSL/TLS, system login, etc., need to be zeroized. Power-up self tests are

executed when the switch is powered on to check for the consistency of the algorithms

implemented on the switch.

Notes

Certain services and functions, such as FTP, HTTP, remote procedure calls (RPC), root account,

boot prom access, etc., must be blocked before the system can enter FIPS mode.

LDAP should not be configured while FIPS is enabled.

The system must be rebooted for FIPS mode changes to take effect.

Refer to the

Fabric OS Administrator's Guide

for information on configuring your system for FIPS

140-2 level 2 compliance.

FIPS mode cannot be modified through

configDownload.

FIPS is not supported on all platforms. For FIPS-compliant hardware, refer to the

Fabric OS

Administrator's Guide.

In a Virtual Fabric environment, FIPS is treated as chassis-wide configuration and applies to all

logical switches in the chassis. Chassis permissions are required to configure FIPS.

The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may

be in place. Refer to chapter 1,

"Using Fabric OS commands"

and Appendix A,

"Command

Availability"

for details.

Operands

This command has the following operands:

disable

[fips | selftests]

Disables FIPS or Selftests mode. Selftests cannot be disabled when FIPS

mode is enabled.

enable

[fips | selftests]

Enables FIPS or Selftests mode. Selftests must be enabled before FIPS mode

is enabled.

zeroize

Erases all passwords, shared secrets, private keys, etc. in the system.

show

showall

Displays the current FIPS configuration.