Fips Self-Test - HP 5920 Command Reference Manual

Configure the password for password control to contain at least 15 characters.
c.
Add a local user, and configure the password, user role (network-admin), and service type.
d.
Delete the FIPS-incompatible local user service types including Telnet and FTP.
e.
Save the configuration file and specify it as the next startup configuration file, delete the
f.
original next startup configuration file in binary notation, and reboot the device.
HP recommends that you choose this method to log in to the device in FIPS mode through remote
login.
After the fips mode enable command is executed, the system prompts you to choose a startup method. If
you do not make a choice within 30 seconds, the system uses the manual reboot method by default.
To switch to non-FIPS mode, execute the undo fips mode enable command in system view, save the
configuration, and reboot the device.
Examples
# Enable FIPS mode, and choose the automatic reboot method to enter FIPS mode.
<Sysname> system-view
[Sysname] fips mode enable
Create a new start-up configuration file named fips-startup.cfg used for FIPS mode. After
setting the username and password for logging in the device of FIPS mode, the device will
be rebooted automatically. Are you sure? [Y/N]:y
Enter username(1~55 characters): root
Enter password(15~63 characters):
Confirm:
Waiting for reboot ...After reboot, the device will enter fips mode.
# Enable FIPS mode, and choose the manual reboot method to enter FIPS mode.
<Sysname> system-view
[Sysname] fips mode enable
Create a new start-up configuration file named fips-startup.cfg used for FIPS mode. After
setting the username and password for logging in the device of FIPS mode, the device will
be rebooted automatically. Are you sure? [Y/N]:n
[Sysname]
Related commands
display fips status

fips self-test

Use fips self-test to trigger a self-test on the cryptographic algorithms.
Syntax
fips self-test
Views
System view
Predefined user roles
network-admin
310