OpenText Identity Manager leverages the Federal Information Processing Standards (FIPS) compliant features to meet the security requirements of U.S. Federal agencies and customers with highly secure environments. FIPS 140-2 standards regulate the implementation and communication of cryptographic software. Bouncy Castle uses an open source JCA provider that is certified to FIPS 140-2 Level 1. The provider is built on the established and well-known Bouncy Castle open-source cryptography provider. This chapter provides information about configuring and operating OpenText Identity Manager in the FIPS mode.
NOTE:
SSPR does not support FIPS mode. You must migrate non-FIPS SSPR setup to a different server. For more information, see Backing Up Configuration Information and Importing Configuration Information in the Self Service Password Reset 4.7 Administration Guide.
Make sure that the master keystore password is the same as the Tomcat keystore password. To change password, see Storing Configupdate Utility Password (Optional).
To configure the OpenText eDirectory in FIPS mode, navigate to the HKLM\SOFTWARE\Novell\nici_x64 registry and change the restriction Level settings from 0 to 1. For more information, see Operating OpenText eDirectory in FIPS mode..
To enable FIPS for Fanout Agent, generate keystore file in the config folder before enabling security enhancement.
The following sections provide information about configuring and operating OpenText Identity Manager in the FIPS mode.