There is a work in progress Jira that aims to make all the Cloudera software (including CM agent, Hue etc) use only FIPS-compliant crypto algorithms. Just it is not in place as of this writing.  ... View more