How do I enable FIPS-CC mode on my Fortigate? The instructions mention that I should run the following commands:
# config system fips-cc (fips-cc) # set status enable (fips-cc) # end
But "status" isn't there and I get an error when I try to set it.
How do I enable FIPS-CC mode on my Fortigate? The instructions mention that I should run the following commands:
# config system fips-cc (fips-cc) # set status enable (fips-cc) # end
But "status" isn't there and I get an error when I try to set it.
In order to see the "status" option, you must use a serial console connected to the FGT. The FGT will drop most configuration settings and restart, so it's recommended to backup before you continue.
You might also need to disable the entropy token in the fips-cc config if your device fails to boot:
set entropy-token disable
This statement "You might also need to disable the entropy token in the fips-cc config if your device fails to boot:" Should read "You will need to disable the entropy token in the fips-cc config if your device doesn't have an entropy token or your device will fail to boot:" The fix action is re-image.
