Platform Deployment Guide › Advanced Encryption Mode › Overview › Can I Convert My Existing CA DLP Deployment To Be FIPS Compatible?

Can I Convert My Existing CA DLP Deployment To Be FIPS Compatible?

No. Such migrations are not supported.

Note: In theory, it is possible to convert your existing CA DLP machines to run in Advanced Encryption Mode. But in practice, this requires you to take all CA DLP machines offline and reconfigure them before restarting CA DLP. Any machines not changed at this point would cease to communicate with other machines in the CA DLP enterprise. For a typical CA DLP enterprise, with hundreds or thousands of protected machines, this is unlikely to be practicable.