FIPSMODE

The FIPSMODE option specifies whether the Federal Information Processing Standards (FIPS) mode is in effect for non-Secure Sockets Layer (SSL) operations.

Syntax

Read syntax diagramSkip visual syntax diagramFIPSMODE=NoFIPSMODE=NoYes

Parameters

No
Specifies that FIPS mode is not enforced on the server for non-SSL operations. The default is NO.
Yes
A value of YES indicates that FIPS mode is enforced on the server. This setting restricts cryptographic operations that involve object data, authentication, and passwords to use FIPS-approved cipher suites. The value does not affect SSL session operations, which are controlled by using the SSLFIPSMODE option.

Example: Enable FIPS mode on the server

fipsmode yes

Example: Enable FIPS mode and SSLFIPS mode on the server

fipsmode yes
sslfipsmode yes