How to enable FIPS mode for Cat 9200 and where do I find the key?

[neogn8]

Hello, 

I am trying to enable FIPS mode for my catalyst 9200 and 9300 switches. I tried following the documents, but it's asking for a key and it has to be a certain length.

Where do I find this key? is it something I manually create myself? or do I use some kind of key generator? Thank you in advance.

[marce1000]

           - FYI : https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9200/software/release/16-12/configuration_guide/sec/b_1612_sec_9200_cg/secure_operation_in_fips_mode.html

 M.

[neogn8]

Thank you for the reply. 

Yes, I have seen this document before. But I am stuck on the what "key" to use or what command to use to generate this "key" in step 2. It keeps giving me an error when I type in those exact commands. 

[marce1000 · Accepted solution]

  - Ref : https://www.cisco.com/c/en/us/td/docs/routers/crs/software/crs_r5-3/security/configuration/guide/b-syssec-cg53x-crs/b-syssec-cg53x-crs_chapter_01011.pdf
                 Check paragraph : Configuring FIPS-compliant Keys

 M.