You can select the FIPS mode when you install Client Automation interactively using the installer, or silently using command line, msiexec, or infrastructure deployment (DMDeploy). The default mode is FIPS‑preferred.
Note: You cannot specify the FIPS mode when you upgrade, modify, or repair Client Automation installation. If you want to change the FIPS mode of the DSM components after installation, switch to the required mode. For more information about switching to a particular FIPS mode, see Security Features section.
This section describes how you can modify the FIPS mode when you use various installation methods and options:
The Client Automation installer provides an option to select the FIPS mode in the FIPS‑compliance section when you install the product. Select the check box to enable the FIPS-only mode for the components you are installing. The installer does not provide this option when you modify or repair an installation.
Note: You can select the FIPS mode only during a custom installation. Express installation always installs Client Automation in the FIPS‑preferred mode. For a stand-alone remote control agent installation, you can specify the FIPS mode during both custom and express installations.
You can specify the following parameter for setting the FIPS mode when you perform a silent installation using command line, msiexec, or DMDeploy:
Windows:
FIPS_MODE=1 //(FIPS-preferred) FIPS_MODE=2 //(FIPS-only)
Linux or UNIX:
/RITCM_FIPS_MODE=1 //(FIPS-preferred) /RITCM_FIPS_MODE =2 //(FIPS-only)
You cannot specify the FIPS mode when you use software delivery to install or upgrade DSM components. The FIPS mode is decided based on the following factors:
In all the cases, the manager can override the FIPS mode by applying the configuration policy that sets the FIPS mode.
|
Copyright © 2014 CA Technologies.
All rights reserved.
|
|