Re FIPS HSM

b platform should show fips card and you should have encrypted key is /config/ssl/ssl.cavfips directory.

[root@B6900-R69-S42:Active] config  b platform |grep -i fips
|   |   |     Type: crypto   Model: Viper crypto, FIPS compliant