10.0 Configuring Fanout Agent in FIPS Mode

Before configuring FIPS mode on Identity Manager Fanout Agent, you should consider the following prerequisites:

Without enabling security enhancement, start your Fanout Agent using the following command:
```
./startAgent -config ../config/fanoutagent-config.properties
```
Keystore file gets generated in the config folder.

Run the following command to stop the Fanout Agent:

./stopAgent -config ../config/fanoutagent-config.properties netiq

Place the following jar files in the /opt/novell/dirxml/fanoutagent/lib/ directory:
- bc-fips-1.0.2.5.jar
- bcpkix-fips-1.0.7.jar
- bctls-fips-1.0.19.jar
To enable permissions for the above .jar files, run the following commands:
```
chown root:bin <jar-file>
```
```
chmod 755 <jar-file>
```

To set the environment variable, run the following commands:

export IS_FIPS_ENABLED=true

export BC_FIPS_VERSION=1.0.2.5

export JAVA_OPTS=" -Dorg.bouncycastle.fips.approved_only=true  -Dorg.bouncycastle.rsa.allow_multi_use=true"

export CLASSPATH=/opt/novell/dirxml/fanoutagent/lib/bc-fips-1.0.2.5.jar

After setting up, you can verify all the environment variables using the echo command.