how to create an ISO which install a FIPS mode machine

1. dracut-fips & hmaccalc are included in config/ks comps.xml & platform_packages_list
2. fips=1 is included in args_add in config/ks/ks.config

When installing with the ISO created with that configuration the machine fails the "fips integrity" test.

What step is missing or incorrect?