diff --git a/pkg/common/constants/constants.go b/pkg/common/constants/constants.go
index 92114b764..cd4519b99 100644
--- a/pkg/common/constants/constants.go
+++ b/pkg/common/constants/constants.go
@@ -63,10 +63,12 @@ const (
 	DefaultServerTrustStoreConfigMapName   = "ca-certs"
 	DefaultProxyCredentialsSecret          = "proxy-credentials"
 	DefaultGitSelfSignedCertsConfigMapName = "che-git-self-signed-cert"
-	DefaultJavaOpts                        = "-XX:MaxRAMPercentage=85.0"
-	DefaultSecurityContextFsGroup          = 1724
-	DefaultSecurityContextRunAsUser        = 1724
-	DefaultCheServiceAccountName           = "che"
+	// -Dcom.redhat.fips=false workaround allows to run che-server on OpenShift with FIPS enabled
+	// See https://issues.redhat.com/browse/CRW-3301
+	DefaultJavaOpts                 = "-XX:MaxRAMPercentage=85.0 -Dcom.redhat.fips=false"
+	DefaultSecurityContextFsGroup   = 1724
+	DefaultSecurityContextRunAsUser = 1724
+	DefaultCheServiceAccountName    = "che"
 
 	// OAuth
 	BitBucketOAuthConfigClientIdFileName     = "id"