FIPS Module Specification: Difference between revisions

Line 61: Line 61:


===Approved Mode of Operation===
===Approved Mode of Operation===
In order to run the NSS module in the FIPS approved mode, an attribute must be explicitly set on the module. This can be done programmatically or by running the NSS module utility '''modutil'''. An example command line is below.
In order to run the NSS module in the FIPS approved mode, an attribute must be explicitly set on the module. This can be done programmatically with a call to SECMOD_DeleteInternalModule() (with the module to delete being the internal module) or by running the NSS module utility '''modutil'''. An example command line is below.


'''modutil -fips true -dbdir certdir'''
'''modutil -fips true -dbdir certdir'''
canmove, Confirmed users
937

edits