Identity Manager leverages the Federal Information Processing Standards (FIPS) compliant features to meet the security requirements of U.S. Federal agencies and customers with highly secure environments. FIPS 140-2 standards regulate the implementation and communication of cryptographic software. Bouncy Castle uses an open source JCA provider that is certified to FIPS 140-2 Level 1. The provider is built on the established and well-known Bouncy Castle open-source cryptography provider.
NOTE:
SSPR does not support FIPS mode. You must migrate non-FIPS SSPR setup to a different server. For more information, see Backing Up Configuration Information and Importing Configuration Information in the Self Service Password Reset 4.7 Administration Guide.
Make sure that the master keystore password is the same as the tomcat keystore password. To change password check Storing Configupdate Utility Password.
This section provides information about configuring and operating Identity Manager in the FIPS mode.