7.0 Configuring Fanout Agent in FIPS Mode

Before configuring FIPS mode on Identity Manager Fanout Agent, you should consider the following prerequisites:

  • Without enabling security enhancement, start the Fanout Agent. This generates a keystore file in the config folder.

  • Place the following jars in the C:\NetIQ\IDM\FanoutAgent\lib folder:

    • bc-fips-1.0.2.4.jar

    • bcpkix-fips-1.0.7.jar

    • bctls-fips-1.0.18.jar

  • Add the following values to the environment variable:

    IS_FIPS_ENABLED=true
    BC_FIPS_VERSION=1.0.2.4
    JAVA_OPTS =" -Dorg.bouncycastle.fips.approved_only=true  -Dorg.bouncycastle.rsa.allow_multi_use=true"
    CLASSPATH=C:\NetIQ\IDM\FanoutAgent\lib\bc-fips-1.0.2.4.jar