Services fail to start with FIPS enabled

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

• All services will not successfully start manually.
• Startup fails with message:

Server cb-enterprise[167227]: File "/usr/share/cb/virtualenv/lib/python2.7/site-packages/cb/maintenance/cbstartup/main.py", line 113, in run
Server cb-enterprise[167227]: File "/usr/share/cb/virtualenv/lib/python2.7/site-packages/cb/maintenance/cbstartup/actions/solr_core_setup...n execute
Server cb-enterprise[167227]: File "/usr/share/cb/virtualenv/lib/python2.7/site-packages/cb/utils/solr_core_setup.py", line 18, in execute
Server cb-enterprise[167227]: File "/usr/share/cb/virtualenv/lib/python2.7/site-packages/cb/utils/solr_core_setup.py", line 45, in _deplo..._data_dir
Server cb-enterprise[167227]: File "/usr/share/cb/virtualenv/lib/python2.7/site-packages/cb/utils/solr_core_setup.py", line 67, in _tag_s...migration
Server cb-enterprise[167227]: ValueError: error:060800A3:digital envelope routines:EVP_DigestInit_ex:disabled for fips
Server systemd[1]: cb-enterprise.service: control process exited, code=exited status=1
Server systemd[1]: Failed to start SYSV: Carbon Black is a surveillance camera for your computer -- always recording so you know precise...atastore..
Server systemd[1]: Unit cb-enterprise.service entered failed state.
 Server systemd[1]: cb-enterprise.service failed.

Environment

• EDR Server: 6.4.x and older
• CentOS 7.x
• RHEL 7.x

Cause

FIPS compatibility is not supported prior to server version 6.5 on CentOS/RHEL 7x. 

Resolution

• Ensure the server is running a supported version of the Linux OS. 
• Install or upgrade to EDR server 6.5 or higher.
• If upgrading to 6.5 or higher is not possible, disable FIPS before starting services.