Client Automation Security Features › FIPS-Compliant Cryptography › Repair a FIPS-Only Agent Connected to r12 Component

Repair a FIPS-Only Agent Connected to r12 Component

If a FIPS-only agent is connected to r12 manager or scalability server, they cannot communicate with each other because of incompatible FIPS modes. You must either upgrade the manager or scalability server, or change the FIPS mode of the agent to FIPS‑preferred.

To change the FIPS mode of the agent to FIPS‑preferred

1. Execute the following command at the agent:

   ccnfcmda -cmd setparametervalue -ps /itrm/common/security/fips140 -pn installmode -v 1
   

   When the command is successfully executed, the FIPS mode on the agent is set to FIPS-preferred.

2. Restart caf using the following commands:

   caf stop
   caf start
   

   When caf restarts successfully, the agent operates in the FIPS-preferred mode.