FIPS Integrity Check Fails on Boot after dracut -f invoked

Latest response

We have recently been trying to implement LUKS auto unlocking in our environment. Currently, we are trying to use clevis tpm2. We have to comply with DISA STIG items, so FIPS=1 is a must.

Whenever I implement the clevis bind to slot 5 of all of my partitions,do a dracut -f on my initramfs, and reboot, I get a:

"FIPS Integrity Check Failed
Halting System"

Research is telling me to ensure the kernel_cmdline is including boot=/dev/nvme0n1x, and it is. I have to boot into the old kernel and uninstall/reinstall the new one to get back to normal, or restore from a backup of my initramfs.img. How do I go about figuring out the root cause of this failure?

JT

Responses