:_mod-docs-content-type: ASSEMBLY
include::_attributes/attributes-microshift.adoc[]
[id="microshift-fips"]
= Using FIPS mode with {microshift-short}
:context: microshift-fips

toc::[]

[role="_abstract"]
You must enable FIPS mode for RPM-based installations of {microshift-short} on {op-system-base-full} {op-system-version-major} to ensure that your edge deployments comply with security mandates.

The following considerations apply when enabling FIPS mode:

* To enable FIPS mode in {microshift-short} containers, the worker machine kernel must be enabled to run in FIPS mode before the machine starts.
* Using FIPS with {op-system-ostree-first} images is not supported.
* Using FIPS with image mode for {op-system-base} is not supported.

include::modules/microshift-fips-rpm-system.adoc[leveloffset=+1]

[id="additional-resources_microshift-fips_{context}"]
[role="_additional-resources"]
== Additional resources
* link:https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/security_hardening/switching-rhel-to-fips-mode_security-hardening[Switching RHEL to FIPS mode]
