When the cluster is initialized in FIPS mode, some secrets will be generated using the Arista Crypto Module. To maintain FIPS compliance, you should avoid uploading self-signed UI certificates that are signed with passphrase-based encrypted (PBE) PKCS1 keys.