FIPS Status Check

For F5 NGINX Plus, the cryptographic boundary includes all functionality that is implemented by the http_ssl, http_v2, stream_ssl, and mail_ssl modules. These modules implement SSL and TLS operations for inbound and outbound connections which use HTTP, HTTP/2, TCP, and mail protocols.

Installation

1. Check the Technical Specifications page to verify that the module is supported by your operating system.

2. Make sure that your operating system is configured to retrieve binary packages from the official NGINX Plus repository. See installation instructions for your operating system on the Installing NGINX Plus page.

3. Install the FIPS module package nginx-plus-module-fips-check from the official NGINX Plus repository.

   For Amazon Linux 2, CentOS, Oracle Linux, and RHEL:

   shell

   Copy

   sudo yum update && \
   sudo yum install nginx-plus-module-fips-check

   for Amazon Linux 2023, AlmaLinux, Rocky Linux:

   shell

   Copy

   sudo dnf update && \
   sudo dnf install nginx-plus-module-fips-check

   For Debian and Ubuntu:

   shell

   Copy

   sudo apt update && \
   sudo apt install nginx-plus-module-fips-check

   For SLES:

   shell

   Copy

   sudo zypper refresh && \
   sudo zypper install nginx-plus-module-fips-check

   For Alpine:

   Copy

   apk add nginx-plus-module-fips-check

   For FreeBSD:

   shell

   Copy

   sudo pkg update && \
   sudo pkg install nginx-plus-module-fips-check

Configuration

After installation you will need to enable and configure the module in NGINX Plus configuration file nginx.conf.

1. Enable dynamic loading of the module with the load_module directive specified in the top-level (“main”) context:

   nginx

   Copy

   load_module modules/ngx_fips_check_module.so;
   
   http {
       # ...
   }

2. Perform additional configuration as required by the module.

3. Test the NGINX Plus configuration. In a terminal, type-in the command:

   Copy

   nginx -t

   Expected output of the command:

   shell

   Copy

   nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
   nginx: configuration file /etc/nginx/nginx.conf is successful

4. Reload the NGINX Plus configuration to enable the module:

   Copy

   nginx -s reload

More info

• FIPS compliance for NGINX Plus

• NGINX FIPS Status Check module GitHub project

• NGINX dynamic modules

• NGINX Plus technical specifications

• Uninstalling a dynamic module