Dell Brocade G620 Brocade 8.0.1 Fabric OS Command Reference - Page 354

fipsCfg --enable [fips | selftests] [-nowarn] Enables FIPS or selftests mode. Selftests must be enabled before FIPS mode is enabled. --zeroize [-nowarn] [-dp] Erases all passwords, shared secrets, private keys, etc. in the system. Specify the -dp option to zeroize both CP and dual-CP. --show | --showall Displays the current FIPS configuration. --force fips [-dp] This option enables FIPS mode even if prerequisites are not met, except under the following two conditions: • In a dual-CP system if HA is not in sync between the two CPs. • If selftests is in a disabled state. Specify the -dp option to enable FIPS mode on both CP and dual-CP. --verify fips [-dp] Scans the prerequisites for enabling FIPS and print the failure/success cases. Specify the -dp option to verify both CP and dual-CP. --disable | --enable bootprom [-nowarn] Disables or enables the Boot Programmable Read-Only Memory (Boot PROM) on the switch. Boot PROM access is blocked in FIPS mode. Disabling Boot PROM requires root permission. Enabling Boot PROM does not require root permission. --disable | --enable dh [-nowarn] Removes or configures all the Diffie hellman specific SSH configurations on both the SSH server and client configuration, and restarts the SSH server. This command is supported only in FIPS mode --disable | --enable sha256 [-nowarn] Configures the hash as SHA1 (for disable command) or SHA256 for signature generation and verification in both the SSH server and client configuration, and restarts the SSH server. This command is supported only in FIPS mode --disable | --enable selftests [-dp] [enable | disable] Disables or enables the selftests mode on dual-CP or both dual-CP and CP. Specify the -dp enable option to enable or disable selftests on both CP and dual-CP. Specify the -dp disable option to enable or disable selftests on DP only. Ignore the -dp option to enable or disable selftests on the CP only. Examples To display the current FIPS configuration: switch:admin> fipscfg --show FIPS mode is : Disabled FIPS Selftests mode/status is : Disabled/None To enable selftests: switch admin> fipscfg --enable selftests You are enabling selftests. Do you want to continue? (yes, y, no, n) [no] : yes FIPS Selftests mode/status has been set to : Enabled/None 330 Brocade Fabric OS Command Reference 53-1004112-02