Users Guide

Generating Host-Keys
The following describes hot-key generation.
When you enable or disable FIPS mode, the system deletes the current public/private host-key pair,
terminates any SSH sessions that are in progress (deleting all the per-session encryption key information),
actually enables/tests FIPS mode, generates new host-keys, and re-enables the SSH server (assuming it was
enabled before enabling FIPS).
For more information, refer to the SSH Server and SCP Commands section in the Security chapter of the Dell
Networking OS Command Line Reference Guide.
Monitoring FIPS Mode Status
To view the status of the current FIPS mode (enabled/disabled), use the following commands.
• Use either command to view the status of the current FIPS mode.
show fips status
show system
Examples of the show fips status and show system Commands
The following example shows the show fips status command.
Dell#show fips status
FIPS Mode : Enabled
for the system using the show system command.
The following example shows the show system command.
Dell#show system
Stack MAC : f8:b1:56:82:de:6e
Reload-Type : normal-reload [Next boot : normal-reload]
-- Unit 1 --
Unit Type : Management Unit
Status : online
Next Boot : online
Required Type : S3124P - 28-port GE/TE (S3100)
Current Type : S3124P - 28-port GE/TE (S3100)
Master priority : 14
Hardware Rev : 5.0
Num Ports : 30
Up Time : 1 wk, 5 day, 21 hr, 40 min
Dell Networking OS Version : 9-8(2-126)
Jumbo Capable : yes
POE Capable : yes
FIPS Mode : enabled
Burned In MAC : f8:b1:56:82:de:6e
No Of MACs : 3
...
FIPS Cryptography 320