Migrate from RHEL 8 FIPS Mode to RHEL 8 non-FIPS Mode

This topic describes how to migrate from Carbon Black EDR on RHEL 8 FIPS mode to RHEL 8 non-FIPS mode while maintaining your environment's security and integrity.

Procedure

1. Disable FIPS at the OS level by running the following command on all cluster nodes:

   fips-mode-setup --disable

   Note: The fips-mode-setup utility is provided with RHEL 8.x. It checks and controls the system FIPS mode. When you disable the system FIPS mode, the system cryptography policy is switched to DEFAULT and the kernel command line option fips=0 is set.
2. Disable FIPS in Solr for Carbon Black EDR by setting EnableFips=False in /etc/cb/cb.conf.
   If you are running Carbon Black EDR in a cluster environment, perform this step on all nodes.

   For more information about cb.conf, see the Carbon Black EDR Server Configuration Guide.

3. Reboot all nodes.
4. Start the Carbon Black EDR server.

   For standalone systems:

   /usr/share/cb/cbservice cb-enterprise start

   For clustered systems:

   /usr/share/cb/cbcluster start