put certfp back on to oper block checking