There are 3 ways that NICI can be put into FIPS mode:
Application API: A NICI enabled application can specify it wants to operate in FIPS mode by setting a parameter on the appropriate API. This gives each NICI enabled application the ability to specify that they are to operate in FIPS mode. Once an application is in FIPS mode it cannot change to a non-FIPS mode until it shuts down completely.
Process API: A NICI enabled application can specify that all applications in the same process space are to operate in FIPS mode. To enable FIPS mode, an application just need to call the appropriate API. This allows a NICI enabled application to confirm that all applications in the same process space are operating in FIPS mode. For example, a single eDirectory application can call the API resulting in all NICI enabled applications operate in FIPS mode. Once a process space is put into FIPS mode, it cannot change to a non-FIPS mode until the process shuts down completely.
Computer level via NICI Configuration File: NICI can be configured so that all 64-bit NICI applications on that computer will operate in FIPS mode. For more information, see Using NICI for Configuring System-Level FIPS Mode.
The configuration is read and applied at application start-up time. Once an application is in FIPS mode it cannot change to a non-FIPS mode until it shuts down completely.