7.4 Implementation Checklist

The following table provides an overview of the tasks required to configure Sentinel for operation in FIPS 140-2 mode.

Tasks

For more information, seeā€¦

Plan the deployment.

Deployment Scenarios.

Determine whether you need to enable FIPS 140-2 mode during the Sentinel installation or you want to enable it in future.

To enable Sentinel in FIPS 140-2 mode during the installation, you need to select the Custom or Silent installation method during the installation process.

Sentinel Server Custom Installation.

Performing a Silent Installation

Section 23.0, Enabling FIPS 140-2 Mode in an Existing Sentinel Installation

Configure Sentinel Plug-ins to run in FIPS 140-2 Mode.

Configuring Sentinel Plug-Ins to Run in FIPS 140-2 Mode.

Import certificates into the Sentinel FIPS Keystore.

Importing Certificates into FIPS Keystore Database

NOTE:Back up your Sentinel systems before beginning the conversion to FIPS mode. If the server must be reverted to non-FIPS mode at a later time, the only supported method for doing so involves restoring from a backup. For more information about reverting to non-FIPS mode, see Reverting Sentinel to Non-FIPS Mode.