Configure Tenable Core FIPS Mode

You can enable the Federal Information Processing Standard (FIPS) mode at the operating system level in Tenable Core.

Note: For information about enabling FIPS on product-specific deployments, consult the related Tenable product documentation. For more information about FIPS mode, refer to the FIPS 140-2 Compliance in Oracle Linux 8 topic in the Oracle documentation.

Note: Tenable recommends that you discuss with your institution's system auditor any further questions about FIPS mode operation and/or compliance.

Prerequisites:

  • Tenable Core on Oracle Linux 8

To enable FIPS mode for Tenable Core:

  1. Run the following command:

    sudo fips-mode-setup --enable

  2. Reboot your system

Check the FIPS status

The following commands can be used to check the FIPS status of the system:

Primary Checks:

  • sudo fips-mode-setup --check

    Output should be:

    FIPS mode is enabled

  • The following command can be used to check the current cryptographic policy configured on the system:

    sudo update-crypto-policies --show

    Output should be:

    FIPS