Monitoring FIPS Mode StatusTo view the status of the current FIPS mode (enabled/disabled), use the following commands.• Use either command to view the status of the current FIPS mode.show fips statusshow systemExamples of the show fips status and show system CommandsThe following example shows the show fips status command.Dell#show fips statusFIPS Mode : Enabledfor the system using the show system command.The following example shows the show system command.Dell#show systemStack MAC : 00:01:e8:8a:ff:0cReload Type : normal-reload [Next boot : normal-reload]-- Unit 0 --Unit Type : Management UnitStatus : onlineNext Boot : onlineRequired Type : S4810 - 52-port GE/TE/FG (SE)Current Type : S4810 - 52-port GE/TE/FG (SE)Master priority : 0Hardware Rev : 3.0Num Ports : 64Up Time : 7 hr, 3 minDell Networking OS Version : 4810-8-3-7-1061Jumbo Capable : yesPOE Capable : noFIPS Mode : enabledBurned In MAC : 00:01:e8:8a:ff:0cNo Of MACs : 3...Disabling FIPS ModeThe following describes disabling FIPS mode.When you disable FIPS mode, the following changes occur:• The SSH server disables.• All open SSH and Telnet sessions, as well as all SCP and FTP file transfers, close.• Any existing host keys (both RSA and RSA1) are deleted from system memory and NVRAM storage.• FIPS mode disables.• The SSH server re-enables.• The Telnet server re-enables (if it is present in the configuration).276 Enabling FIPS Cryptography
