| Info |
|---|
"FIPS" stands for Federal Information Processing Standards. It is a set of standards issued by the National Institute of Technology (NIST) in the United States to ensure the security and interoperability of information technology systems. Federal agencies and contractors use these standards to ensure their information systems are secure and meet certain/specific requirements for handling sensitive information/data. This article explains enabling FIPS mode in Ubuntu-based systems working with Checkmk. |
| Status | ||||
|---|---|---|---|---|
|
...
- The following image displays what should be enabled and where to locate your subscription token.
Next, you will need to install Ubuntu Advantage on the system.
Code Block language bash theme RDark [user@mylinuxhost ~]$ sudo apt install ubuntu-advantage-tools
.After you have the token, you can use the following command to activate FIPS via Ubuntu Advantage.
Code Block language bash theme RDark [user@mylinuxhost ~]$ sudo ua attach <your_pro_token>
Code Block language bash theme RDark user@ubuntuhost:-$ sudo va attach C1MFo2BfFVQek921GHB11aC35VKWA [sudo] password for cmkadmin: Enabling default service esm-infra Updating package lists Ubuntu Pro: ESM Infra enabled Enabling default service fips-updates Updating package lists Installing FIPS Updates packages FIPS Updates enabled A reboot is required to complete install. Enabling default service livepatch Installing canonical-livepatch snap Canonical livepatch enabled. This machine is now attached to 'Ubuntu Pro Desktop' SERVICE ENTITLED STATUS STATUS DESCRIPTION esm-infra yes enabled Expanded Security Maintenance for Infrastructure fips-updates yes enabled NIST-certified core packages with prlorlty security updates livepatch yes enabled Canonical Livepatch service usg yes disabled Security compliance and audit tools NOTICES Operation in progress: pro attach FIPS support reguires systensystem reboot to complete conflguration. Enable services with: pro enable <service> Account; Subscription: Ubuntu Pro Desktop Valid until: Fri Jan 13 13:34:55 2023 UTC Technical support level: essential user@ubuntuhost:-$
- Now reboot the system. Here you can see that FIPS mode has been activated.
- Now you can register this host with the Checkmk Agent for monitoring.
Monitored host with FIPS enabled
...