Compatibilities › FIPS Operating Mode Restrictions

FIPS Operating Mode Restrictions

Not all CA Clarity PPM platforms support RSA BSAFE Crypto-J for FIPS 140-2 certification. The following table displays the compatible platforms and operating systems documented by RSA. While other platforms are likely to function correctly, CA cannot verify support for Crypto-J on any other than those platforms listed here.

Notes:

• The file 'java.security' under '<JAVA_HOME>/jre/lib/security' lists all the security providers along with their preference order. CA Clarity PPM automatically places the Crypto-J provider above the SunJCE provider's location in the providers list. To use the Crypto-J provider with CA Clarity PPM, you must explicitly set the security provider entry in the first index position: security.provider.1=com.sun.crypto.provider.SunJCE. The index numbers for the other positions must be adjusted accordingly. Verify that the Sun SunJCE security provider is the first one.
• If you are using the IBM FIPS provider on AIX, you do not need to make the changes described in the previous bullet. AIX uses the IBM FIPS provider for FIPS mode.