FIPS Status Check
For F5 NGINX Plus, the cryptographic boundary includes all functionality that is implemented by the http_ssl, http_v2, stream_ssl, and mail_ssl modules. These modules implement SSL and TLS operations for inbound and outbound connections which use HTTP, HTTP/2, TCP, and mail protocols.
Installation
-
Check the Technical Specifications page to verify that the module is supported by your operating system.
-
Install the FIPS module package
nginx-plus-module-fips-check.For Amazon Linux 2, CentOS, Oracle Linux, and RHEL:
yum install nginx-plus-module-fips-checkfor Amazon Linux 2023, AlmaLinux, Rocky Linux:
dnf install nginx-plus-module-fips-checkFor Debian and Ubuntu:
apt-get install nginx-plus-module-fips-checkFor SLES:
zypper install nginx-plus-module-fips-checkFor Alpine:
apk add nginx-plus-module-fips-checkFor FreeBSD:
pkg install nginx-plus-module-fips-check
Configuration
After installation you will need to enable and configure the module in NGINX Plus configuration file nginx.conf.
-
Enable dynamic loading of the module with the
load_moduledirective specified in the top-level (“main”) context:load_module modules/ngx_fips_check_module.so; -
Perform additional configuration as required by the module.
-
Test the configuration and reload NGINX Plus to enable the module:
nginx -t && nginx -s reload