About StevenRogers

We use FIPS-CC mode in the Azure Government Cloud, using this article to set it. Basically: SSH into the FW (using your username and ssh key file) Enter the commands to put the firewall into maintenance mode (debug system maintenance-mode) - this will cause a reboot SSH into the FW again, and set the FW to FIPS-CC mode using the article linked above, then reboot the firewall again Once the firewall is back and in FIPS-CC mode, it should still allow you to SSH in using the same credentials. We then make an admin user so that we can log into the GUI for the firewall As to your second question, we don't use an ARM template, but use Terraform instead, specifically the "tls" provider (hashicorp/tls | Terraform Registry), which lets you make a private/public key pair, which we then import into Azure Key Vault.   Hope that all helps! ... View more