ubuntu@xenial-andreas:~$ sudo ubuntu-advantage enable-fips <redacted>
Running apt-get update... OK
Ubuntu FIPS PPA repository enabled.
Installing FIPS packages (this may take a while)... OK
Configuring FIPS...
Updating zipl to enable fips... OK
Successfully configured FIPS. PLEASE REBOOT to complete FIPS enablement.
We can see the extra "Updating zipl to enable fips" line.
And after issuing the reboot we are running a fips kernel on s390:
ubuntu@xenial-andreas:~$ ubuntu-advantage status
livepatch: disabled
esm: disabled (not available)
fips: enabled
ubuntu@xenial-andreas:~$ uname -a
Linux xenial-andreas 4.4.0-1002-fips #2-Ubuntu SMP Thu Apr 27 19:35:14 UTC 2017 s390x s390x s390x GNU/Linux
xenial fips verification on s390:
ubuntu@ xenial- andreas: ~$ sudo ubuntu-advantage enable-fips <redacted>
Running apt-get update... OK
Ubuntu FIPS PPA repository enabled.
Installing FIPS packages (this may take a while)... OK
Configuring FIPS...
Updating zipl to enable fips... OK
Successfully configured FIPS. PLEASE REBOOT to complete FIPS enablement.
We can see the extra "Updating zipl to enable fips" line.
And after issuing the reboot we are running a fips kernel on s390: xenial- andreas: ~$ ubuntu-advantage status
ubuntu@
livepatch: disabled
esm: disabled (not available)
fips: enabled xenial- andreas: ~$ uname -a
ubuntu@
Linux xenial-andreas 4.4.0-1002-fips #2-Ubuntu SMP Thu Apr 27 19:35:14 UTC 2017 s390x s390x s390x GNU/Linux