Implementation Guide › Installing CA Enterprise Log Manager › Upgrade Existing CA Enterprise Log Manager Servers and Agents for FIPS Support › Enable FIPS Mode Operation

Previous Topic: Disable ODBC and JDBC Access to the Event Log Store

Next Topic: View Agent Dashboard

Enable FIPS Mode Operation

You can use the FIPS Mode options in the System Status service to turn FIPS mode on and off. The default FIPS mode is non-FIPS. Administrator users must set the FIPS mode for each CA Enterprise Log Manager server in a federation.

Important! You cannot operate with mixed modes within the same federation of servers. Any server in a federation running in a different mode is not able to gather query and report data, or respond to requests, from the other servers.

To switch between FIPS and non-FIPS modes

  1. Log in to the CA Enterprise Log Manager server.
  2. Access the Administration tab, and then click the Services subtab.
  3. Expand the System Status service node and select the desired CA Enterprise Log Manager server.

    The System Status Service Configuration dialog appears.

  4. Select the desired FIPS mode, On or Off, from the drop-down list.
  5. Click Save.

    The CA Enterprise Log Manager server restarts in the selected mode. You can log in again to view agent FIPS mode from the Agent Explorer.

  6. Verify the CA Enterprise Log Manager server operating mode by checking the System Status service dialog after the server restarts.

    You can also use self monitoring events to verify that the CA Enterprise Log Manager server started in the desired mode. Look for the following events in the Self Monitoring Events tab in the System Status dialog:

    Successfully turned Server FIPS mode ON
Successfully turned Server FIPS mode OFF
Failed to turn Server FIPS mode ON
Failed to turn Server FIPS mode OFF

Disabling FIPS mode for the primary or Management server stops all federated queries and reports returning data. In addition, scheduled reports do not run. This condition continues until all servers in the federation are running in the same mode again.

Note: Disabling FIPS on the Management or remote CA EEM server is one of the requirements for adding a new CA Enterprise Log Manager server to a federation of server running in FIPS mode.

More information:

Configure Mozilla Firefox to Access CA Enterprise Log Manager in FIPS Mode