////
Copyright (C) 2018-2021 Red Hat, Inc.

This program is free software; you can redistribute it and/or modify
it under the terms of the GNU Lesser General Public License as published by
the Free Software Foundation; either version 2.1 of the License, or
(at your option) any later version.

This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
GNU General Public License for more details.
////


fips-finish-install(8)
======================
:doctype: manpage
:man source: fips-finish-install


NAME
----
fips-finish-install - complete the installation of FIPS modules.


SYNOPSIS
--------
*fips-finish-install* [--complete|--undo]


DESCRIPTION
-----------
fips-finish-install(8) is used by the fips-mode-setup(8) command to
complete the installation of the system FIPS modules. The tool is not
supposed to be called directly by the system administrator, but it is
possible to do so.


[[options]]
OPTIONS
-------

The only recognized and mandatory option is:

--complete:   The command completes the FIPS module installation and
                calls 'dracut -f' to regenerate the initramfs.

--undo:       The command undoes some of the FIPS module installation steps.
              Please note that module installation cannot be undone
              without reformatting of and overwriting, at least once,
              the platform’s hard drive or other permanent storage media.
              This option is not meant to be used in production,
              is not supported, and is implemented for testing purposes only.


FILES
-----
/etc/system-fips::
              The presence of the file used to indicate that the installation
              of FIPS modules has been completed.
              Support for indicating FIPS mode
              through the /etc/system-fips file has been removed,
              and the file will not be included in future versions of RHEL.
              Please inspect the contents of /proc/sys/crypto/fips_enabled
              instead.

SEE ALSO
--------
fips-mode-setup(8)

AUTHOR
------
Written by Tomáš Mráz.
