Idea ID: 2871391

Make UCMDB UD Agent install / work on a FIPS enabled RHEL8 Server

Status : New Idea

The UCMDB 2021.05 UD Agent Linux RPM does not comply with the FIPS standards on a RHEL 8 server.

The RPM package does not have a SHA256 digest - so the installation fails.

Can we update the UD Agent so that it installs and works on a FIPS enabled RHEL 8 server.  I think this will be beneficial to all customers as adding these security details will improve the confidence our customers have in us.

The current UD Agent rpm looks like this:

rpm -Kv ud-agent-linux-x64.rpm
ud-agent-linux-x64.rpm:
Header V3 RSA/SHA256 Signature, key ID 86ee6411: OK
Header SHA1 digest: OK
Payload SHA256 digest: NOTFOUND
V3 RSA/SHA256 Signature, key ID 86ee6411: OK
MD5 digest: NOTFOUND

The installation fails with:

package ud-agent-11.66.000-1.i386 does not verify: no digest

Many thanks,

Robin

Labels:

Discovery-infra
Security