Before configuring FIPS mode on Identity Manager Fanout Agent, you should consider the following prerequisites:
Without enabling security enhancement, start your Fanout Agent and generate the keystore file in the config folder.
Place the following jar files in the /opt/novell/dirxml/fanoutagent/lib/ directory:
bc-fips-1.0.2.4.jar
bcpkix-fips-1.0.7.jar
bctls-fips-1.0.18.jar
To enable permissions for the above .jar files, run the following commands:
chown root:bin <jar-file>
chmod 755 <jar-file>
To set the environment variable, run the following commands:
export IS_FIPS_ENABLED=true
export BC_FIPS_VERSION=1.0.2.4
export JAVA_OPTS =" -Dorg.bouncycastle.fips.approved_only=true -Dorg.bouncycastle.rsa.allow_multi_use=true"
export CLASSPATH=/opt/novell/dirxml/fanoutagent/lib/bc-fips-1.0.2.4.jar
After setting up, you can verify all the environment variables using the echo command.