Building a kernel with FIPS mode support

6.18 LPAR mode z/VM guest KVM guest

Kernel builders: This information is intended for those who want to build their own kernel. Be aware that both compiling your own kernel or recompiling an existing distribution usually means that you have to maintain your kernel yourself.

Select the common code kernel configuration option CONFIG_CRYPTO_FIPS to build a kernel that supports the FIPS mode.

Figure 1. Kernel configuration menu option for FIPS subchannel device driver

 Cryptographic API --->
    *** Crypto core or helper ***
    FIPS 200 compliance                          (CONFIG_CRYPTO_FIPS)

CONFIG_CRYPTO_FIPS has complex dependencies and might be hidden in the menu. See the help for the configuration menu option for details.

Tip: In the menu, press the

key to display hidden options.