--set-fips-enabled=false Not working as expected with OneAgentCtl CLI.

[dyn98007]

when I try to disable FIPS mode using OneAgentCtl in a RHEL 9.x Host,  which already has the OneAgent installed , the CLI gives this message

Enabling/disabling of FIPS 140 validated cryptographic algorithms can only be done during installation of OneAgent

deployment.conf is  not getting updated to FipsEnabled=false ,  when --set-fips-enabled=false is used with OneAgentCtl CLI.

OneAgent version : 1.303

Please advise

[AntonPineiro]

Hi,

Looks like it is known limitation and you should re-install OneAgent.

Best regards

[dyn98007]

very bad limitation.. The documentation does not call that out - https://docs.dynatrace.com/docs/ingest-from/dynatrace-oneagent/oneagent-configuration-via-command-li...

[dyn98007 · Accepted solution]

https://community.dynatrace.com/t5/Product-ideas/set-fips-enabled-false-needs-to-work-with-OneAgentC...