Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-91929

[RHEL-10] Add a menu entry to the boot.iso to boot with fips=1

Linking RHIVOS CVEs to...Migration: Automation ...SWIFT: Generate New Ti...SWIFT: POC ConversionSync from "Extern...XMLWordPrintable

    • lorax-templates-rhel-10.1-1.el10
    • No
    • Low
    • image-builder-1
    • 14
    • None
    • False
    • False
    • Hide

      None

      Show
      None
    • Yes
    • None
    • Enhancement
    • Hide
      .New boot menu entry for `fips=1` added to ISO installations

      With this update, the DVD and Boot ISO image installations provide a new boot menu entry for setting the `fips=1` kernel boot option. This simplifies the process, as enabling FIPS mode during the RHEL installation ensures that the system generates all keys with FIPS-approved algorithms and continuous monitoring tests in place. By using this boot option, you start the installation with the `fips=1` kernel parameter and you can target the system's compliance with Federal Information Processing Standards (FIPS) 140 requirements.
      Show
      .New boot menu entry for `fips=1` added to ISO installations With this update, the DVD and Boot ISO image installations provide a new boot menu entry for setting the `fips=1` kernel boot option. This simplifies the process, as enabling FIPS mode during the RHEL installation ensures that the system generates all keys with FIPS-approved algorithms and continuous monitoring tests in place. By using this boot option, you start the installation with the `fips=1` kernel parameter and you can target the system's compliance with Federal Information Processing Standards (FIPS) 140 requirements.
    • Done
    • Unspecified
    • Unspecified
    • Unspecified
    • None

      In RHEL10 it is no longer possible to switch an installed system to FIPS, it needs to be done during install with fips=1 set on the kernel cmdline when booting the installer from the boot.iso – this is documented, but to make it easier and more visible to users we should add a new boot menu entry to the boot.iso menu.

        1. rhel10.1-fips.png
          rhel10.1-fips.png
          7 kB

              brlane@redhat.com Brian Lane
              brlane@redhat.com Brian Lane
              Brian Lane Brian Lane
              Release Test Team Release Test Team
              Mirek Jahoda Mirek Jahoda
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: