Brocade Communications Systems A7533A - Brocade 4Gb SAN Switch Base Command Reference Manual page 230

2
fipsCfg
--force fips
--verify fips
--disable | --enable bootprom
--help
Examples To display current FIPS configuration:
To enable selftests:
To verify FIPS prerequisites:
To attempt enabling FIPS when prerequisites are not met:
switch:admin> fipscfg --enable fips
204
This option enables FIPS mode even if prerequisites are not met, except
under the following two conditions:
1. In a dual-CP system if HA is not in sync between the two CPs.
2. If selftests is in a disabled state.
This option runs through the prerequisites for enabling FIPS and print the
failure/success cases.
Disables or enables the Boot Programmable Read-Only Memory (Boot PROM)
on the switch. Boot PROM access is blocked in FIPS mode. Disabling Boot
PROM requires root permission. Enabling Boot PROM does not require root
permission.
Print command usage.
switch:admin> fipscfg --show
FIPS mode is :
FIPS Selftests mode/status is :
switch admin> fipscfg --enable selftests
FIPS Selftests mode/status has been set to :
switch:admin>fipscfg --verify fips
Standby firmware supports FIPS
SELF tests check has passed
Root account is enabled.
Radius check has passed
Authentication check has passed
SNMP is in read only mode.
Bootprom access is disabled.
Firmwaredownload signature verification is enabled.
cfgload.secure parameter value is 1.
SelfTests mode is not enabled.
Root account is enabled.
Authentication uses MD5 hash algorithm.
Authentication uses DH group 0.
Telnet port number <23> for the policy <default_ipv4> is in permit state.
HTTP port number <80> for the policy <default_ipv4> is in permit state.
RPC port number <898> for the policy <default_ipv4> is in permit state.
Telnet port number <23> for the policy <default_ipv6> is in permit state.
HTTP port number <80> for the policy <default_ipv6> is in permit state.
RPC port number <898> for the policy <default_ipv6> is in permit state.
SNMP is not in read only mode.
Bootprom access is enabled.
FIPS mode cannot be configured at this time
Disabled
Disabled/None
Enabled/None
Fabric OS Command Reference
53-1000599-02