Enabling the FIPS Mode on the MySQL Server

Enable the FIPS mode on the MySQL server using the commands given in this section.

Ensure that you have upgraded to Session Monitor Release 5.2.
  1. Execute the following steps to enable FIPS mode at MySQL
    • Stop Session Monitor services using command:
      “source /opt/oracle/ocsm/ocsm_env.sh”
      “pld-systemctl stop"
    • Navigate to the directory where the Session Monitor zip file was extracted and ensure the FIPS scripts have executable permission. If not, set the execute permission using the following command:
      chmod +x ./scripts/FIPS_Scripts/*.sh
    • Enable the FIPS mode at MySQL by executing the following command:
      ./scripts/FIPS_Scripts/Enable_FIPS_on_MySQL.sh
    • Restart the OCSM services again using the following command
      pld-systemctl start
  2. After enabling the FIPS mode at MySQL execute the following command at MySQL to verify FIPS status.
    mysql vsp -e 'select md5(8);show warnings;';
    Output should be:
    +---------+------+------------------------------------------------------------------------+
    | Level   | Code | Message                                                                |
    +---------+------+------------------------------------------------------------------------+
    | Warning | 4073 | SSL fips mode error: FIPS mode ON/STRICT: MD5 digest is not supported. |
    +---------+------+------------------------------------------------------------------------+
    1 row in set (0.00 sec)