Disabling FIPS Mode
The following describes disabling FIPS mode.
When you disable FIPS mode, the following changes occur:
•
The SSH server disables.
•
All open SSH and Telnet sessions, as well as all SCP and FTP file transfers, close.
•
Any existing host keys (both RSA and RSA1) are deleted from system memory and NVRAM storage.
•
FIPS mode disables.
•
The SSH server re-enables.
•
The Telnet server re-enables (if it is present in the configuration).
•
New 1024–bit RSA and RSA1 host key-pairs are created.
To disable FIPS mode, use the following command.
•
To disable FIPS mode from a console port.
CONFIGURATION mode
no fips mode enable
The following Warning message displays:
WARNING: Disabling FIPS mode will close all SSH/Telnet connections, restart
those servers, and destroy
all configured host keys.
Proceed (y/n) ?
FIPS Cryptography
442