Sponsored Content
Full Discussion: Rngd: failed fips test
Top Forums UNIX for Advanced & Expert Users Rngd: failed fips test Post 302972765 by radha254 on Tuesday 10th of May 2016 03:16:35 PM
Old 05-10-2016
@Peasant , thank you for suggesstion . i didn`t get that idea and thats true

The solution is :::
The FIPS test is something done on government or more secure organizations for extra security check . So everywhere else it will not be used , so when i started a new process called
Code:
"rngd"

on my server by default it is doing the FIPS test which was failing .

So linux had marked it down after certain attempts which is what showing below.
Code:
Apr 1 08:12:05 sap01 rngd: failed fips test
Apr 1 08:12:05 sap01 rngd: too many FIPS failures, disabling entropy source
Apr 1 08:12:05 sap01 ranged: No entropy sources working, exiting rngd"

when i was reading man pages , found an option to ignore , so applied it and worked Smilie

Code:
       -i, --ignorefail
              Ignore repeated fips failures

now i am running as below
Code:
/sbin/rngd -r /dev/urandom -o /dev/random -t 1 -i


Last edited by radha254; 05-10-2016 at 04:21 PM.. Reason: following the rules
This User Gave Thanks to radha254 For This Post:
 

6 More Discussions You Might Find Interesting

1. Shell Programming and Scripting

Bad day !! test condition failed --need a one liner to do --help

Hi all this is simple but bad day for me nothing work out .. Problem is that I wan to check the argument passed to my script and accordignly exit or setup ENV variable I have a script name src_cpcp_preproc.sh i want to pass 2 argumet from command line argumet and check it in the script... (13 Replies)
Discussion started by: jambesh
13 Replies

2. Red Hat

validate test failed

hi everybody, I am new in Linux. I have successfully installed knoppix in my laptop, however, when I want to install ns2.26, some errors occurs in validation test.. It returned "Some Test failed" and it give some comands to re-run the test. I have already set the path before the validation test.... (1 Reply)
Discussion started by: newbie06
1 Replies

3. Shell Programming and Scripting

Test on string containing spacewhile test 1 -eq 1 do read a $a if test $a = quitC then break fi d

This is the code: while test 1 -eq 1 do read a $a if test $a = stop then break fi done I read a command on every loop an execute it. I check if the string equals the word stop to end the loop,but it say that I gave too many arguments to test. For example echo hello. Now the... (1 Reply)
Discussion started by: Max89
1 Replies

4. Shell Programming and Scripting

How to check weather a string is like test* or test* ot *test* in if condition

How to check weather a string is like test* or test* ot *test* in if condition (5 Replies)
Discussion started by: johnjerome
5 Replies

5. Shell Programming and Scripting

Prefixing test case methods with letter 'test'

Hi, I have a Python unit test cases source code file which contains more than a hundred test case methods. In that, some of the test case methods already have prefix 'test' where as some of them do not have. Now, I need to add the string 'test' (case-sensitive) as a prefix to those of the... (5 Replies)
Discussion started by: royalibrahim
5 Replies

6. Linux

Issue with FIPS

Hello, I'm facing an issue after upgrading CFT (File transfer tool) from 2.5 to 2.7, on one of our test Linux boxes. With CFT profile loaded, we can not initiate remote connections (ssh user @ server). We have the following message: OpenSSL version mismatch. Built against 90801f, You... (3 Replies)
Discussion started by: Joyb25
3 Replies
RNGD(8) 						      System Manager's Manual							   RNGD(8)

NAME
rngd - Check and feed random data from hardware device to kernel random device SYNOPSIS
rngd [-b, --background] [-f, --foreground] [-i, --ignorefail] [-o, --random-device=file] [-p, --pid-file=file] [-r, --rng-device=file] [-s, --random-step=nnn] [-W, --fill-watermark=nnn] [-d, --no-drng=1|0] [-n, --no-tpm=1|0] [-q, --quiet] [-v, --verbose] [-?, --help] [-V, --ver- sion] DESCRIPTION
This daemon feeds data from a random number generator to the kernel's random number entropy pool, after first checking the data to ensure that it is properly random. The -f or --foreground options can be used to tell rngd to avoid forking on startup. This is typically used for debugging. The -b or --background options, which fork and put rngd into the background automatically, are the default. The -r or --rng-device options can be used to select an alternate source of input, besides the default /dev/hwrandom. The -o or --random- device options can be used to select an alternate entropy output device, besides the default /dev/random. Note that this device must sup- port the Linux kernel /dev/random ioctl API. FIXME: document random-step and timeout OPTIONS
-b, --background Become a daemon (default) -f, --foreground Do not fork and become a daemon -p file, --pid-file=file File used for recording daemon PID, and multiple exclusion (default: /var/run/rngd.pid) -i, --ignorefail Ignore repeated fips failures -o file, --random-device=file Kernel device used for random number output (default: /dev/random) -r file, --rng-device=file Kernel device used for random number input (default: /dev/hwrandom) -s nnn, --random-step=nnn Number of bytes written to random-device at a time (default: 64) -W n, --fill-watermark=nnn Once we start doing it, feed entropy to random-device until at least fill-watermark bits of entropy are available in its entropy pool (default: 2048). Setting this too high will cause rngd to dominate the contents of the entropy pool. Low values will hurt system performance during entropy starves. Do not set fill-watermark above the size of the entropy pool (usually 4096 bits). -d 1|0, --no-drng=1|0 Do not use drng as a source of random number input (default:0) -n 1|0, --no-tpm=1|0 Do not use tpm as a source of random number input (default:0) -q, --quiet Suppress error messages -v, --verbose Report available entropy sources -?, --help Give a short summary of all program options. -V, --version Print program version AUTHORS
Philipp Rumpf Jeff Garzik - jgarzik@pobox.com Matt Sottek Brad Hill rng-tools 4 March 2001 RNGD(8)
All times are GMT -4. The time now is 12:37 AM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy