Cisco ISR 4431 FIPS Mode With IOS 17.09.02a

[TW80CJ5]

Hello...

I am needing to place our Cisco ISR 4431 Routers into FIPS Mode. They have various versions: 16.09.07, 17.03.04a, and 17.09.02a. I installed version 17.09.02a after I found a Cisco article stating that it obtained its FIPS Certfication.

I have tried the following commands at the enable and privileged prompt with no luck
crypto fips-mode

fips authorization-key key

We have a contract requirement to get the routers placed into FIPS mode. Any ideas on how to do it?

[Mark Elsen · Accepted solution]

 - You may find this document informational : https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/security-policies/140sp3815.pdf

 M.

[TW80CJ5]

Thanks! I was looking  for the " platform ipsec fips-mode" command.....