236• Pair-wise consistency test—This test is run when a DSA/RSA asymmetrical key-pair is generated. Ituses the public key to encrypt a plain text, and uses the private key to decrypt the encrypted text. Ifthe decryption is successful, the test succeeds. Otherwise, the test fails.• Continuous random number generator test—This test is run when a random number is generated.If two consecutive random numbers are different, the test succeeds. Otherwise, the test fails. This testcan also be run when a DSA/RSA asymmetrical key-pair is generated.Triggering self-testsTo examine whether the cryptography modules operate correctly, you can trigger a self-test on thecryptographic algorithms. The triggered self-test is the same as the power-up self-test. If the self-test fails,the device automatically reboots.To trigger a self-test:Step Command1. Enter system view. system-view2. Trigger a self-test. fips self-testDisplaying and maintaining FIPSExecute the display command in any view.Task CommandDisplay FIPS mode state. display fips statusFIPS configuration examplesEntering FIPS mode through automatic rebootNetwork requirementsUse the automatic reboot method to enter FIPS mode, and use a console port to log in to the device inFIPS mode.Configuration procedure# If you want to save the current configuration, execute the save command before you enable FIPS mode.# Enable FIPS mode, choose the automatic reboot method to enter FIPS mode. Configure the usernameas root and the password as 12345zxcvb!@#$%ZXCVB. system-view[Sysname] fips mode enableCreate a new start-up configuration file named fips-strartup.cfg used for FIPS mode. Aftersetting the login username and password for FIPS mode, the device will be rebootedautomatically. Are you sure? [Y/N]:yEnter username(1~55 characters): root
