diff --git a/closed/src/java.base/share/conf/security/nss.fips.cfg b/closed/src/java.base/share/conf/security/nss.fips.cfg
index 3b308d298ca..1139cee9af1 100644
--- a/closed/src/java.base/share/conf/security/nss.fips.cfg
+++ b/closed/src/java.base/share/conf/security/nss.fips.cfg
@@ -23,3 +23,5 @@ nssLibraryDirectory = /usr/lib64
 nssSecmodDirectory = /etc/pki/nssdb
 nssDbMode = readOnly
 nssModule = fips
+
+attributes(*,CKO_SECRET_KEY,CKK_GENERIC_SECRET)={ CKA_SIGN=true }