The Elasticsearch service fails after FIPS enablement at the OS level for Red Hat Enterprise Linux 8 based on SAS® Viya® 3.5 deployments


After you disable Federal Information Processing Standards (FIPS) at the Java Virtual Machine (JVM) level and enable FIPS at the operating system (OS) level for Red Hat Enterprise Linux (RHEL) 8-based SAS Viya 3.5 deployments, the Elasticsearch service fails.

Workaround

To circumvent this issue, complete the following steps to start the Elasticsearch service:

  1. Stop all SAS Viya services:
    /etc/init.d/sas-viya-all-services stop

  2. Edit the elasticsearch service start-up file: /opt/sas/viya/home/libexec/elasticsearch-secure/bin/opensearch.

  3. Add {}-Dcom.redhat.fips=false in the executable block of the script{}.


  4. Restart all SAS Viya services:
    /etc/init.d/sas-viya-all-services start