Update rhel.md

This commit is contained in:
Anne Henmi 2018-09-25 17:51:00 -06:00 committed by GitHub
parent 4111b2e5f7
commit fa8353cd31
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 2 deletions

View File

@ -46,11 +46,13 @@ On {{ linux-dist-long }}, Docker EE supports storage drivers, `overlay2` and `de
### FIPS 140-2 cryptographic module support
With Docker EE Basic license for versions 18.03 and later, Docker provides FIPS support in RHEL 7.3, 7.4 and 7.5. This includes a FIPS support cryptographic module. If the RHEL implementation already has FIPS support enabled, FIPS is automatically enabled in the Docker engine.
(Federal Information Processing Standards (FIPS) Publication 140-2[https://csrc.nist.gov/csrc/media/publications/fips/140/2/final/documents/fips1402.pdf] is a United States Federal security requirement for cryptographic modules.
With Docker EE Basic license for versions 18.03 and later, Docker provides FIPS 140-2 support in RHEL 7.3, 7.4 and 7.5. This includes a FIPS support cryptographic module. If the RHEL implementation already has FIPS support enabled, FIPS is automatically enabled in the Docker engine.
**NOTE:** FIPS is only supported in the Docker EE engine. UCP and DTR currently do not have support for FIPS-140-2.
To force FIPS-140-2 compliance with the Docker EE engine, do the following:
To enable FIPS-140-2 compliance on a system that is not in FIPS mode, do the following:
Create a file called `/etc/systemd/system/docker.service.d/fips-module`. It needs to contain the following: