diff --git a/gen-hmac b/gen-hmac
index 277d787..e46de79 100644
--- a/gen-hmac
+++ b/gen-hmac
@@ -17,15 +17,19 @@ if ($buildroot) {
 }
 
 my $fn = shift @ARGV;
-my $out = `sha512hmac "$buildroot$fn"`;
-if ($?) {
-	exit 1;
-}
-my @t = split(" ", $out);
-my $hmac = $t[0];
 
-(my $hmacfn = "$buildroot$fn") =~ s|([^/]*)$|.$1.hmac|;
-open(my $fd, '>', $hmacfn) or die "$0: Cannot open $hmacfn: $!\n";
-print $fd "$hmac  $fn\n";
-close($fd);
+system("fipshmac $buildroot$fn");
+
+#my $out = `sha512hmac "$buildroot$fn"`;
+#if ($?) {
+#	exit 1;
+#}
+#my @t = split(" ", $out);
+#my $hmac = $t[0];
+
+#(my $hmacfn = "$buildroot$fn") =~ s|([^/]*)$|.$1.hmac|;
+#open(my $fd, '>', $hmacfn) or die "$0: Cannot open $hmacfn: $!\n";
+#print $fd "$hmac  $fn\n";
+#close($fd);
+
 exit 0;
diff --git a/pesign-obs-integration.changes b/pesign-obs-integration.changes
index a99c77e..3517124 100644
--- a/pesign-obs-integration.changes
+++ b/pesign-obs-integration.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Tue Aug 12 13:38:14 UTC 2014 - meissner@suse.com
+
+- switch gen-hmac to use fipscheck instead of sha256hmac
+
 -------------------------------------------------------------------
 Mon Aug  4 12:52:40 UTC 2014 - mmarek@suse.cz
 
diff --git a/pesign-obs-integration.spec b/pesign-obs-integration.spec
index 4772813..9b6882a 100644
--- a/pesign-obs-integration.spec
+++ b/pesign-obs-integration.spec
@@ -24,6 +24,7 @@ License:        GPL-2.0
 Group:          Development/Tools/Other
 Version:        10.0
 Release:        0.<RELEASE15>
+Requires:       fipscheck
 Requires:       mozilla-nss-tools
 Requires:       openssl
 %ifarch %ix86 x86_64 ia64