Configure FIPS Mode

You can enable or disable the Federal Information Processing Standard (FIPS) mode on Tenable Sensor Proxy from the command line. Tenable Sensor Proxy mirrors the FIPS mode setting of the underlying operating system.

For more information about FIPS mode, refer to the FIPS 140-2 Compliance in Oracle Linux 8 topic in the Oracle documentation.

Note: Tenable recommends that you discuss with your organization's system auditor any further questions about FIPS mode operation or compliance.

Note: Tenable Sensor Proxy versions earlier than 1.2.0 do not support FIPS mode. FIPS mode is not supported in Enterprise Linux 7 environments.

To enable or disable FIPS mode:

1. Open your command line tool of choice.

2. (Optional) View the current state of FIPS mode by running the following command:

   fips-mode-setup --check

3. Run one of the following commands to enable or disable FIPS mode:

   • To enable FIPS mode, run:

     fips-mode-setup --enable

     reboot

   • To disable FIPS mode, run:

     fips-mode-setup --disable

     reboot

   Tenable Sensor Proxy updates according to the new FIPS mode setting.