Disabling Fips Mode - Dell Force10 Z9000 Configuration Manual

Hide thumbs Also See for Force10 Z9000:
Table of Contents

Advertisement

-- Unit 0 --
Unit Type
: Management Unit
Status
: online
Next Boot
: online
Required Type
: S4810 - 52-port GE/TE/FG (SE)
Current Type
: S4810 - 52-port GE/TE/FG (SE)
Master priority : 0
Hardware Rev
: 3.0
Num Ports
: 64
Up Time
: 7 hr, 3 min
Dell Networking OS Version
Jumbo Capable
: yes
POE Capable
: no
FIPS Mode
: enabled
Burned In MAC
: 00:01:e8:8a:ff:0c
No Of MACs
: 3
...

Disabling FIPS Mode

The following describes disabling FIPS mode.
When you disable FIPS mode, the following changes occur:
The SSH server disables.
All open SSH and Telnet sessions, as well as all SCP and FTP file transfers, close.
Any existing host keys (both RSA and RSA1) are deleted from system memory and NVRAM storage.
FIPS mode disables.
The SSH server re-enables.
The Telnet server re-enables (if it is present in the configuration).
New 1024–bit RSA and RSA1 host key-pairs are created.
To disable FIPS mode, use the following command.
To disable FIPS mode from a console port.
CONFIGURATION mode
no fips mode enable
The following Warning message displays:
WARNING: Disabling FIPS mode will close all SSH/Telnet connections, restart those
servers, and destroy
all configured host keys.
Proceed (y/n) ?
: 4810-8-3-7-1061
Enabling FIPS Cryptography
245

Advertisement

Table of Contents
loading

Table of Contents