Install on a FIPS 140-2 Enabled Machine
Vertica 9.3.x and 10.0.x do not support FIPS because of a limitation with OpenSSL. If you need FIPS support, install or upgrade to 10.1.1 or above.
If you install or upgrade from Vertica 9.2.x to Vertica 10.0. on a FIPS-enabled machine, you may encounter the following error: "Upgrading to Vertica 10.0.x-xxxxxxxx on a FIPS system is not supported." To resolve this, you must downgrade to Vertica 9.2.x: uninstall the Vertica RPM on every node in the cluster and then reinstallVertica 9.2.x.
Vertica 9.2.x supports the implementation of the Federal Information Processing Standard 140-2 (FIPS). You enable FIPS mode in the operating system.
Enabling FIPS on the operating system occurs outside of Vertica.
During installation, the install_vertica script detects whether the host is operating in FIPS mode. The installer searches for the file /proc/sys/crypto/fips_enabled and examines its content. If the file exists and contains a '1' in the filename, the host is operating in FIPS mode and the following message appears:
/proc/sys/crypto/fips_enabled exists and contains '1', this is a FIPS system
On certain systems where the libssl and libcrypto libraries do not have versioning information, when starting Vertica, you may see the message
No version information available
This message is benign and you can ignore it.