Kernel used by redhat-upgrade-tool will not boot if FIPS is enabled
Issue
- The upgrade of a system configured with FIPS enabled leads to a non bootable kernel during the upgrade process with this message:
FIPS integrity test failed
:
...
[ OK ] Reached target Initrd File Systems.
[ OK ] Reached target Initrd Default Target.
Starting dracut pre-pivot and cleanup hook...
[ 45.091997] dracut: FATAL: FIPS integrity test failed
[ 44.609452] dracut-pre-pivot[626]: Warning: /boot/.vmlinuz-3.10.0-862.el7.x86_64.hmac does not exist
[ 45.095147] dracut: Refusing to continue
...
Environment
- RHEL 6
- RHEL 7
- FIPS enabled
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.