Dell S4048T, Configuration Manual

Page: 397 / 1277

Generating Host-Keys
The following describes hot-key generation.
When you enable or disable FIPS mode, the system deletes the current public/private host-key pair,
terminates any SSH sessions that are in progress (deleting all the per-session encryption key information),
actually enables/tests FIPS mode, generates new host-keys, and re-enables the SSH server (assuming it was
enabled before enabling FIPS).
For more information, refer to the
SSH Server and SCP Commands section in the Security chapter of the Dell
Networking OS Command Line Reference Guide .
Monitoring FIPS Mode Status
To view the status of the current FIPS mode (enabled/disabled), use the following commands.
• Use either command to view the status of the current FIPS mode.
show fips status
show system
Examples of the
show fips status
and
show system
Commands
The following example shows the
show fips status
command.
Dell#show fips status
FIPS Mode : Enabled
for the system using the show system command.
The following example shows the
show system
command.
Disabling FIPS Mode
When you disable FIPS mode, the following changes occur:
• The SSH server disables.
• All open SSH and Telnet sessions, as well as all SCP and FTP file transfers, close.
• Any existing host keys (both RSA and RSA1) are deleted from system memory and NVRAM storage.
• FIPS mode disables.
• The SSH server re-enables.
• The Telnet server re-enables (if it is present in the configuration).
• New 1024–bit RSA and RSA1 host key-pairs are created.
To disable FIPS mode, use the following command.
• To disable FIPS mode from a console port.
FIPS Cryptography 397