Setup Guide

Examples of the show fips status and show system Commands
The following example shows the show fips status command.
DellEMC#show fips status
FIPS Mode : Enabled
for the system using the show system command.
The following example shows the show system command.
DellEMC#show system
Stack MAC : f8:b1:56:82:de:6e
Reload-Type : normal-reload [Next boot : normal-reload]
-- Unit 1 --
Unit Type : Management Unit
Status : online
Next Boot : online
Required Type : S3124P - 28-port GE/TE (S3100)
Current Type : S3124P - 28-port GE/TE (S3100)
Master priority : 14
Hardware Rev : 5.0
Num Ports : 30
Up Time : 1 wk, 5 day, 21 hr, 40 min
Dell Networking OS Version : 9-8(2-126)
Jumbo Capable : yes
POE Capable : yes
FIPS Mode : enabled
Burned In MAC : f8:b1:56:82:de:6e
No Of MACs : 3
...
Disabling FIPS Mode
When you disable FIPS mode, the following changes occur:
• The SSH server disables.
• All open SSH and Telnet sessions, as well as all SCP and FTP le transfers, close.
• Any existing host keys (both RSA and RSA1) are deleted from system memory and NVRAM storage.
• FIPS mode disables.
• The SSH server re-enables.
• The Telnet server re-enables (if it is present in the conguration).
• New 1024–bit RSA and RSA1 host key-pairs are created.
To disable FIPS mode, use the following command.
• To disable FIPS mode from a console port.
CONFIGURATION mode
no fips mode enable
The following Warning message displays:
WARNING: Disabling FIPS mode will close all SSH/Telnet connections, restart those servers,
and destroy
all configured host keys.
Proceed (y/n) ?
FIPS Cryptography
303