CA EEM Getting Started › FIPS 140-2 Support › How to Configure CA EEM Server in FIPS-only Mode › Prerequisites for Configuring CA EEM Server in FIPS-only Mode
Prerequisites for Configuring CA EEM Server in FIPS-only Mode
The following are the prerequisites for configuring the CA EEM Server in FIPS-only mode:
- Verify that the other CA products using iGateway such as CA ITM, CA ELM, and so on, are in FIPS-only mode. iGateway cannot be initialized both in FIPS-only mode and non-FIPS mode. When iGateway is initialized in FIPS‑only mode, all products using iGateway must be in FIPS-only mode. Open the iGateway.conf file and verify the value for the following tag:
FIPSMode
If the value of this tag is set to False, it means that product using iGateway is in non-FIPS mode. Based on the existing configuration of iGateway decide appropriately if you want to enable CA EEM in FIPS-only mode.
- Verify the spindle versions used by the other CA products, open the spin.conf file and note the value for the following tags: <Spindle Name> and <version>. Verify with the respective product documentation if these versions are FIPS-compatible.
Note: The iGateway.conf file and spin.conf files are stored at the following location:
- Windows: %IGW_LOC%
- Linux and UNIX: $IGW_LOC