TOSS 5 must implement a systemwide encryption policy.

Centralized cryptographic policies simplify applying secure ciphers across an operating system and the applications that run on that operating system. Use of weak or untested encryption algorithms undermines the purposes of using encryption to protect data.

Verify the TOSS 5 cryptography policy has been configured correctly with the following commands:

$ sudo update-crypto-policies --show 

FIPS:OSPP

If the cryptography base profile is not set to "FIPS" and is not applied, this is a finding.

$ sudo update-crypto-policies --check

The configured policy matches the generated policy

If the command does not return "The configured policy matches the generated policy", this is a finding.

Configure TOSS 5 to implement FIPS mode with the following command:

$ sudo update-crypto-policies --set FIPS:OSPP

Reboot the system for the changes to take effect.