Installing Session Monitor with the FIPS Mode Enabled

This section contains instructions to install Session Monitor with the FIPS mode enabled.

Before enabling the FIPS mode, ensure that you read the section Known Limitations and Caveats
  1. Login to the Session Monitor server installed with Oracle Linux 8.10 as a root user or root privileged user.
  2. Navigate to the directory where the Session Monitor zip file was extracted and ensure the FIPS scripts have executable permission. If not, use the following command to set the execute permission.
    chmod +x ./scripts/FIPS_Scripts/*.sh
  3. Enable FIPS mode in Oracle Linux 8.10 using the following command.
    ./scripts/FIPS_Scripts/Enable_FIPS_on_OL.sh <mode of install>

    Note:

    In this command, the <mode of install> is either online or offline based on the type of installation being done. For example, ./scripts/FIPS_Scripts/Enable_FIPS_on_OL.sh online.
  4. After enabling FIPS mode on Oracle Linux, execute the following command to verify FIPS status:
    fips-mode-setup --check
    The result looks like: FIPS mode is enabled.
  5. Install the Session Monitor using ZIP files downloaded from MOS/OSDC. For more information, see the Installation Guide.
  6. Once Session Monitor is installed, navigate to the directory where the Session Monitor zip file was extracted. Provide permissions and execute the following commands to enable FIPS at MySQL.
    chmod +x ./scripts/FIPS_Scripts/*.sh
    ./scripts/FIPS_Scripts/Enable_FIPS_on_MySQL.sh
  7. Execute the following command to verify the status of FIPS at MySQL:
    mysql vsp -e 'select md5(8);show warnings;';
    The output looks like:
    +---------+------+------------------------------------------------------------------------+
    | Level   | Code | Message                                                                |
    +---------+------+------------------------------------------------------------------------+
    | Warning | 4073 | SSL fips mode error: FIPS mode ON/STRICT: MD5 digest is not supported. |
    +---------+------+------------------------------------------------------------------------+
    1 row in set (0.00 sec)