highsystemverified ✓rollback-safe
Set system-wide crypto policy to FIPS
crypto-policy-fips · RHEL ≥ 8 · 1 impl
Description
The system-wide cryptographic policy must be set to FIPS to ensure all applications use FIPS-validated cryptographic algorithms.
Rationale
A FIPS crypto policy enforces the use of FIPS 140-2 validated algorithms across all system applications, ensuring consistent cryptographic security throughout the system.
Check → Remediate
Checkcommand
update-crypto-policies --show | grep -qE '^FIPS'
- expected_exit:
- 0
Remediatecrypto_policy_set
- policy:
- FIPS
Framework references
STIG
V-281008 / RHEL-10-300010V-257994V-258241 / RHEL-09-215105V-230223 / RHEL-08-010020
NIST 800-53
SC-12SC-13
Live verification
rhel9:check
#crypto-policy#fips#cryptography#stig