OpenText Identity Manager leverages the Federal Information Processing Standards (FIPS) compliant features to meet the security requirements of U.S. Federal agencies and customers with highly secure environments. FIPS 140-2 standards regulate the implementation and communication of cryptographic software. Bouncy Castle uses an open source JCA provider that is certified to FIPS 140-2 Level 1. The provider is built on the established and well-known Bouncy Castle open-source cryptography provider.
NOTE:
SSPR does not support FIPS mode. You must migrate non-FIPS SSPR setup to a different server. For more information, see Backing Up Configuration Information and Importing Configuration Information in the Self Service Password Reset 4.8 Administration Guide.
Make sure that the master keystore password is the same as the tomcat keystore password. To change password check Storing Configupdate Utility Password.
To configure the OpenText eDirectory in FIPS mode, navigate to the nici64.cfg file and change RestrictionLevel to 1. This file is located in /etc/opt/novell on Linux. For more information, see Operating OpenText eDirectory in FIPS Mode.
To enable FIPS for Fanout Agent, generate keystore file in the config folder before enabling security enhancement.
This section provides information about configuring and operating OpenText Identity Manager in the FIPS mode.