FIPS Integrity Test Failed after Installing RT Kernel

Latest response

Hi all. I encountered an odd issue that I'm having trouble resolving. I have a client who is requesting the Real Time Kernel to be installed on RHEL 6. However, due to our work requirements, the system must be in accordance to the DISA STIG. I tested the installation of the RT kernel on a hardened RHEL 6.10 VM that has FIPS enabled according to this documentation: (https://access.redhat.com/solutions/137833)

After installing the kernel and its dependencies, I ran the following to regenerate GRUB:

dracut
grubby --update-kernel=$(grubby --default-kernel) --args=fips=1
uuid=$(findmnt -no uuid /boot)
[[ -n $uuid ]] && grubby --update-kernel=$(grubby --default-kernel) --args=boot=UUID=${uuid}

However, upon rebooting, I was prompted with a kernel panic, indicating a FIPS Integrity Test had failed.

Is FIPs supported on the Real Time Kernel? Has anyone else encountered this before? Any help would be greatly provided. Thank you.

System:
RHEL 6.10 (Santiago)
Real time - 3.10.0-693.43.1.rt56.630.el6rt.x86_64
Previous kernel - 2.6.32-754.el6.x86_64

EDIT: I should also mention that upon disabling FIPS, I was able to proceed with the boot normally.

RP

Responses