9.0 Configuring Fanout Agent in FIPS Mode

Before configuring FIPS mode on Identity Manager Fanout Agent, you should consider the following prerequisites:

  • Without enabling security enhancement, start your Fanout Agent and generate the keystore file in the config folder.

  • Place the following jar files in the /opt/novell/dirxml/fanoutagent/lib/ directory:

    • bc-fips-1.0.2.4.jar

    • bcpkix-fips-1.0.7.jar

    • bctls-fips-1.0.18.jar

  • To enable permissions for the above .jar files, run the following commands:

    chown root:bin <jar-file>
    chmod 755 <jar-file>
  • To set the environment variable, run the following commands:

    export IS_FIPS_ENABLED=true
    export BC_FIPS_VERSION=1.0.2.4
    export JAVA_OPTS =" -Dorg.bouncycastle.fips.approved_only=true  -Dorg.bouncycastle.rsa.allow_multi_use=true"
    export CLASSPATH=/opt/novell/dirxml/fanoutagent/lib/bc-fips-1.0.2.4.jar

    After setting up, you can verify all the environment variables using the echo command.