Technical Tip: Enabling FIPS-CC mode on FortiGate-VM deployed in AWS

[wsingavarapu]

Description

This article describes the configuration of enabling FIPS Cipher mode on FortiGate VM deployed in AWS.

Scope

FortiGate-VM deployed in AWS VPC.

Solution

1. Connect to FortiGate-VM deployed in AWS using serial/console connection.

For details on launching and connecting to instance, follow the below article:

Technical Tip: How to connect to a FortiGate VM de... - Fortinet Community

2. Use the below commands to enable fips-cc mode on FortiGate VM.

Fgt# config system fips-cc

Fgt (fips-cc)# set status fips-ciphers

Fgt (fips-cc)# end

It will prompt a warning message about whether to enter fips-ciphers mode or not.  Choose 'y'.

Choosing 'y' will reboot the firewall.

Related documents:

Technical Tip: How to connect to a FortiGate VM deployed in AWS using a serial/console connection

FIPS cipher mode for AWS, Azure, OCI, and GCP FortiGate-VMs | FortiGate / FortiOS 7.4.0 (fortinet.co...