https://live.paloaltonetworks.com/t5/general-topics/converting-a-cluster-to-fips-cc/m-p/349043#M86790 <P>all the mandatory steps for a standalone will still be the same for a cluster, with the addition that HA1 needs to be encrypted (but AFAIK that's about the only thing in addition to the regular standalone shenanigans)</P> Mon, 14 Sep 2020 12:16:55 GMT reaper 2020-09-14T12:16:55Z https://live.paloaltonetworks.com/t5/general-topics/converting-a-cluster-to-fips-cc/m-p/348777#M86768 <P>Given all of the hurdles one has to go to to get a stand alone device converted to FIPS-CC, I'm told I have to do this on a cluster, so needless to say my anxiety is a bit on the "through the roof" side. Maybe I'm not looking hard enough, but I'm unable to find the steps for an active/passive cluster.&nbsp; I'm assuming someone has already done this, so are there any pitfalls or gotcha's I need to look out for?</P><P>&nbsp;</P><P>Thank you in advance!</P> Sat, 12 Sep 2020 10:47:02 GMT https://live.paloaltonetworks.com/t5/general-topics/converting-a-cluster-to-fips-cc/m-p/348777#M86768 JamesLucas 2020-09-12T10:47:02Z https://live.paloaltonetworks.com/t5/general-topics/converting-a-cluster-to-fips-cc/m-p/349043#M86790 <P>all the mandatory steps for a standalone will still be the same for a cluster, with the addition that HA1 needs to be encrypted (but AFAIK that's about the only thing in addition to the regular standalone shenanigans)</P> Mon, 14 Sep 2020 12:16:55 GMT https://live.paloaltonetworks.com/t5/general-topics/converting-a-cluster-to-fips-cc/m-p/349043#M86790 reaper 2020-09-14T12:16:55Z