Enabling the PQC Crypto Policy

Before configuring PQC for TLS or SSH, you must enable the DEFAULT:PQ crypto policy on your RHEL platform hosts.

Procedure

  1. Enable PQC crypto policy
    sudo update-crypto-policies --set DEFAULT:PQ
  2. Verify the policy is active
    sudo update-crypto-policies --show

Results

DEFAULT:PQ should be displayed.