8.0 Configuring Identity Manager Engine in FIPS Mode

Before configuring FIPS mode on the Identity Manager engine, you should consider the following prerequisites:

To enable security enhancement, place the following jar files in the /opt/netiq/common/jre/lib/ directory:
- bc-fips-1.0.2.4.jar
- bcpkix-fips-1.0.7.jar
- bctls-fips-1.0.18.jar
NOTE:You can download the above mentioned jars from the following maven repositories:
To enable permissions for the above .jar files, run the following commands:
```
chown novlua:novlua <jar-file>
```
```
chmod 755 <jar-file>
```

To set the environment variable, run the following commands:

export IS_FIPS_ENABLED=true

export BC_FIPS_VERSION=1.0.2.4

export JAVA_OPTS=" -Dorg.bouncycastle.fips.approved_only=true  -Dorg.bouncycastle.rsa.allow_multi_use=true"

export CLASSPATH=/opt/netiq/common/jre/lib/bc-fips-1.0.2.4.jar

After setting up, you can verify all the environment variables using the echo command.

NOTE:To access dxcmd on port 636, enable SSL EC Certificate in the LDAP settings.