Obtaining a FIPS-capable installation program using the public OpenShift mirror

Red Hat OpenShift Container Platform requires the use of a FIPS-capable installation binary to install a cluster in FIPS mode. You can obtain this binary by downloading it from the public OpenShift mirror. After you have obtained the binary, proceed with the cluster installation, replacing all instances of the openshift-install binary with openshift-install-fips.

Prerequisites

  • You have access to the internet.

Procedure

  1. Download the installation program from https://mirror.openshift.com/pub/openshift-v4/clients/ocp/latest-4.18/openshift-install-rhel9-amd64.tar.gz.

  2. Extract the installation program. For example, on a computer that uses a Linux operating system, run the following command:

    $ tar -xvf openshift-install-rhel9-amd64.tar.gz

  3. Proceed with cluster installation, replacing all instances of the openshift-install command with openshift-install-fips.

← Previous: Obtaining a FIPS-capable installation program using <code>oc adm extract</code> | ↑ Up: Enable FIPS mode on your nodes | ⌂ Home: Red Hat OpenShift Container Platform | Next: FIPS validation in Red Hat OpenShift Container Platform →