Before configuring FIPS mode on Identity Manager Fanout Agent, you should consider the following prerequisites:
Without enabling security enhancement, start the Fanout Agent. This generates a keystore file in the config folder.
Place the following jars in the C:\NetIQ\IDM\FanoutAgent\lib folder:
bc-fips-1.0.2.5.jar
bcpkix-fips-1.0.7.jar
bctls-fips-1.0.19.jar
Add the following values to the environment variable:
IS_FIPS_ENABLED=true
BC_FIPS_VERSION=1.0.2.5
JAVA_OPTS =" -Dorg.bouncycastle.fips.approved_only=true -Dorg.bouncycastle.rsa.allow_multi_use=true"
CLASSPATH=C:\NetIQ\IDM\FanoutAgent\lib\bc-fips-1.0.2.5.jar