Federation Manager Guide › Migrate Federation Manager to Use FIPS Encryption › How To Migrate from FIPS_COMPAT Mode to FIPS-Only Mode › Set the OPENSSL_FIPS Environment Variable

Previous Topic: Back Up the Existing Configuration

Next Topic: Set the Policy Engine to FIPS_Only Mode

Set the OPENSSL_FIPS Environment Variable

Enable FIPS mode by setting the OPENSSL_FIPS environment variable. Set this variable one time only when you are migrating from COMPAT mode to FIPS Only mode.

To set the OPENSSL_FIPS environment variable

Windows
  1. Access the Windows System Properties
  2. Access the environment variables.
  3. Add an environment variable as follows:
    Variable Name

    OPENSSL_FIPS

    Variable Value

    1

  4. Save the new variable.
UNIX
  1. Navigate to federation_mgr_home.
  2. Edit the environment script, ca_federation_env.ksh.
  3. Add the following the entry to the script: 
    OPENSSL_FIPS=1;export OPENSSL_FIPS=1
  4. Run the environment script to set the environment variables.