Show Table of Contents
Chapter 11. Managing FIPS Mode Support
Red Hat Directory Server fully supports the Federal Information Processing Standard (FIPS) 140-2. When Directory Server runs in FIPS mode, security-related settings change. For example, SSL is automatically disabled and only TLS 1.1 and 1.2 encryption is used.
For general details about FIPS, see Federal Information Processing Standard (FIPS) in the Red Hat Enterprise Linux Security Guide.
Enabling FIPS Mode Support
To enable FIPS mode support for Directory Server:
- Optionally, enable FIPS mode in Red Hat Enterprise Linux. For details, see the corresponding section in the Red Hat Enterprise Linux Security Guide.
- Enable FIPS mode for the network security services (NSS) database:
# modutil -dbdir /etc/dirsrv/slapd-instance_name/ -fips true
- Restart the Directory Server instance:
# systemctl restart dirsrv@instance_name
Disabling FIPS Mode Support
To disable FIPS mode support for Directory Server:
- Disable FIPS mode for the network security services (NSS) database:
# modutil -dbdir /etc/dirsrv/slapd-instance_name/ -fips false
- Restart the Directory Server instance:
# systemctl restart dirsrv@instance_name
- Optionally, disable FIPS mode in Red Hat Enterprise Linux. For details, see the corresponding section in the Red Hat Enterprise Linux Security Guide.
Where did the comment section go?
Red Hat's documentation publication system recently went through an upgrade to enable speedier, more mobile-friendly content. We decided to re-evaluate our commenting platform to ensure that it meets your expectations and serves as an optimal feedback mechanism. During this redesign, we invite your input on providing feedback on Red Hat documentation via the discussion platform.