// Module included in the following assemblies:
//
// * rosa_hcp/rosa-hcp-creating-cluster-with-fips-encryption.adoc

:_mod-docs-content-type: PROCEDURE
[id="creating-cluster-with-fips-encryption-ui_{context}"]
= Creating a {product-title} cluster using FIPS encryption in {cluster-manager-first}

[role="_abstract"]
You can create a {product-title} cluster with Federal Information Processing Standards (FIPS) encryption and a customer-provided KMS key in {cluster-manager-url}.

[NOTE]
====
{product-title} does not automatically configure the `default` storage class to encrypt persistent volumes with the customer-provided KMS key. You can configure this in-cluster after installation.
====

.Procedure

. Log in to {cluster-manager-url}.
. Configure your cluster until you reach the *Cluster settings* screen.
. Select *Enable FIPS cryptography* if you require your cluster to be FIPS validated.
+
[NOTE]
====
If *Enable FIPS cryptography* is selected, *Enable additional etcd encryption* is enabled by default and cannot be disabled. You can select *Enable additional etcd encryption* without selecting *Enable FIPS cryptography*.
====

. Supply your configured KMS Amazon Resource Number (ARN) in the *Key ARN* field.
. Continue creating your FIPS-encrypted cluster.
