[Prepare the Environment for an NKP Deployment] A company is required by NIST to follow FIPS guidelines for compliance. What is the first step for enabling FIPS in NKP?

Enabling Federal Information Processing Standards (FIPS) compliance for Nutanix Kubernetes Platform (NKP) is a multi-layered process that begins at the operating system level. Before any NKP components can be installed or configured for FIPS mode, the underlying OS on the nodes must be hardened and prepared according to the specific OS vendor's FIPS guidelines. This foundational step ensures that the core cryptographic modules used by the system are FIPS 140-2 validated, which is a mandatory prerequisite for the entire platform to operate in a compliant manner.

A. Run the command export FIPSENABLED=true: This is a subsequent step used to inform the NKP installer that the environment is FIPS-prepared, but it is not the first action.
B. Run the command nkp cluster create --fips: This command initiates the cluster creation process. It is performed after the environment, including the OS, has been fully prepared for FIPS.
D. Click Enable in the NKP Kommander Web UI, Global Workspace -> Settings -> FIPS menu: This UI action is for managing FIPS on an existing Kommander management cluster, not the initial, foundational step of preparing the OS environment.

1. Nutanix Kubernetes Platform Security Guide v2.7

FIPS Compliance: "To run NKP in a FIPS-compliant manner

you must first prepare your environment. Follow your OS vendor’s instructions to ensure that the OS or OS images are prepared for operating in FIPS mode." This is explicitly stated as the first prerequisite. (URL: https://portal.nutanix.com/page/documents/details?targetId=Nutanix-Kubernetes-Platform-Security-Guide-v27:Nutanix-Kubernetes-Platform-Security-Guide-v27)

2. NIST

Security Requirements for Cryptographic Modules

FIPS PUB 140-2

Section 4.2 Roles

Services

and Authentication: This standard outlines that the operational environment is a key part of the cryptographic module's boundary. Preparing the OS is the first step in defining this compliant environment. (URL: https://csrc.nist.gov/publications/detail/fips/140/2/final)