Before configuring FIPS mode on the Identity Manager engine, you should consider the following prerequisites:
To enable security enhancement, place the following jar files in the C:\NetIQ\Common\JRE\lib folder:
bc-fips-1.0.2.4.jar
bcpkix-fips-1.0.7.jar
bctls-fips-1.0.18.jar
NOTE:You can download the above mentioned jars from the following maven repositories:
Add the following values to the environment variable:
IS_FIPS_ENABLED=true
BC_FIPS_VERSION=1.0.2.4
JAVA_OPTS =" -Dorg.bouncycastle.fips.approved_only=true -Dorg.bouncycastle.rsa.allow_multi_use=true"
CLASSPATH=C:\NetIQ\Common\JRE\lib\bc-fips-1.0.2.4.jar
NOTE:To access dxcmd on port 636, enable SSL EC Certificate in the LDAP settings.