6.126 Using the FIPS-Compliant OpenSSL Library Not Supported for Oracle VM Server

The instructions provided for enabling the FIPS module for OpenSSL, as described in the Oracle Linux 6 Security Guide at:

http://docs.oracle.com/cd/E37670_01/

are not supported on Oracle VM Server. Do not attempt to enable the FIPS module by adding the fips=1 parameter to the 'module' or 'kernel' line in the grub configuration for Oracle VM Server. Enabling FIPS on Oracle VM Server can cause the console available via the Oracle VM Manager Web Interface to stop working.

To check if FIPS is enabled, you can run:

# cat /proc/sys/crypto/fips_enabled

If this command returns the value 1, then you must ensure that your grub configuration does not have this parameter enabled.

Bugs 20086770, 20182267