Generating Host-KeysThe following describes hot-key generation.When you enable or disable FIPS mode, the system deletes the current public/private host-key pair,terminatesany SSH sessions that are in progress (deleting all the per-session encryption key information),actually enables/tests FIPS mode, generates new host-keys, and re-enables the SSH server (assuming it wasenabled before enabling FIPS).For more information, refer to the SSH Server and SCP Commands section in the Security chapter of the DellNetworking OS Command Line Reference Guide.Monitoring FIPS Mode StatusTo view the status of the current FIPS mode (enabled/disabled), use the following commands.• Use either command to view the status of the current FIPS mode.show fips statusshow systemExample of the show fips status and show system CommandsDell#show fips statusFIPS Mode : Enabledfor the system using the show system command.Dell#show systemSystem MAC : 00:01:e8:8a:ff:0cReload Type : normal-reload [Next boot : normal-reload]-- Unit 0 --Unit Type : Management UnitStatus : onlineNext Boot : onlineRequired Type : C9010 - 48-port GE/TE/FG (SE)Current Type : C9010 - 48-port GE/TE/FG (SE)Master priority : 0Hardware Rev : 3.0Num Ports : 64Up Time : 7 hr, 3 minDell Version : C9010-8-3-7-1061Jumbo Capable : yesPOE Capable : noFIPS Mode : enabledBurned In MAC : 00:01:e8:8a:ff:0cNo Of MACs : 3...FIPS Cryptography 441
