Rngd: failed fips test

UNIX for Advanced & Expert Users
1

I have recently enabled the process rngd , but after couple of days i see it got stopped automatically . Below is what i could find from messages file .

can someone shed light on what could be the reason and how can this can be taken care?

Apr 1 08:12:05 sap01 rngd: failed fips test
Apr 1 08:12:05 sap01 rngd: too many FIPS failures, disabling entropy source
Apr 1 08:12:05 sap01 ranged: No entropy sources working, exiting rngd"
2

Hello All ,

I figured out what the issue is , good to close this Thread.

3

If you found the solution by yourself, it would be good and wise to explain here.
Other users may benefit using forum search function if they experience the same/similar problem.

Best regards.
Peasant.

2 Likes
4

@Peasant , thank you for suggesstion . i didn`t get that idea and thats true

The solution is :::
The FIPS test is something done on government or more secure organizations for extra security check . So everywhere else it will not be used , so when i started a new process called

"rngd"

on my server by default it is doing the FIPS test which was failing .

So linux had marked it down after certain attempts which is what showing below.

Apr 1 08:12:05 sap01 rngd: failed fips test
Apr 1 08:12:05 sap01 rngd: too many FIPS failures, disabling entropy source
Apr 1 08:12:05 sap01 ranged: No entropy sources working, exiting rngd"

when i was reading man pages , found an option to ignore , so applied it and worked :slight_smile:

       -i, --ignorefail
              Ignore repeated fips failures

now i am running as below

/sbin/rngd -r /dev/urandom -o /dev/random -t 1 -i
1 Like