GlobalProtect
Enable and Verify FIPS-CC Mode Using Workspace ONE on iOS Endpoints
Table of Contents
Enable and Verify FIPS-CC Mode Using Workspace ONE on iOS Endpoints
Use the following steps to enable and verify
FIPS-CC mode for GlobalProtect™ on iOS endpoints using Workspace ONE.
To enable FIPS-CC for iOS and Android endpoints, you must use the GlobalProtect
version GlobalProtect for Governments. Contact Palo Alto Support and
create a case to access the GlobalProtect for Governments version, which
is privately distributed.
- Enable FIPS mode for iOS endpoints.
- Configure Workspace ONE for iOS endpoints.Download the GlobalProtect app for iOS endpoints and Deploy the GlobalProtect Mobile App Using Workspace ONE.From the Workspace ONE console, modify an existing Apple iOS profile or add a new one.
- Select , then Add Profile.
- Select iOS from the platform list.
![]()
- Select Device Profile from the Select Context Window.
On the page, select the <iOS profile> for which you want to enable FIPS-CC mode.Configure the General, VPN, and Credentials (Optional) settings for the <iOS profile> that you want to create.On the VPN page, under Custom Data:- Specify the Key value as enable-fips-cc-mode.
- Set the Value to Yes.
![]()
Save and Publish your changes.After you enable the FIPS-CC mode on the Workspace ONE console, the console pushes the updated FIPS-CC mode configuration to the iOS endpoints.Ensure that the updated configuration is pushed from the console to the iOS endpoints. On the iOS endpoint, select . The VPN Configuration screen displays the latest configuration.The following screenshot shows an example of VPN configuration.![]()
Verify that FIPS-CC mode is enabled on the GlobalProtect app.- Launch the GlobalProtect app.From the status panel, open the settings dialog ().
![]()
Select About.Verify that FIPS-CC mode is enabled. If FIPS-CC mode is enabled, the About dialog displays the FIPS-CC Mode Enabled status.![]()
If FIPS-CC mode could not be enabled successfully, the About dialog displays the FIPS-CC Mode Failed status.![]()
You cannot disable the FIPS-CC mode on iOS endpoints. To disable the FIPS-CC mode, you must remove the iOS device from the respective configuration profile through the Workspace ONE console.View the logs to view the GlobalProtect app logs related to FIPS-CC mode on iOS endpoints.View, collect, and send the logs to the administrator to troubleshoot and resolve the issues related to FIPS-CC mode on iOS devices.
