You can select the FIPS mode when you install CA ITCM interactively using the installer, or silently using command line, msiexec, or infrastructure deployment (DMDeploy). The default mode is FIPS‑preferred.
Note: You cannot specify the FIPS mode when you modify or repair CA ITCM installation. If you want to change the FIPS mode of the DSM components after installation, switch to the required mode. For more information about switching to a particular FIPS mode, see Security Features section.
This section describes how you can modify the FIPS mode when you use various installation methods and options:
The CA ITCM installer provides an option to select the FIPS mode in the FIPS‑compliance section when you install the product. Select the check box to enable the FIPS-only mode for the components you are installing. The installer does not provide this option when you modify or repair an installation.
Note: You can select the FIPS mode only during a custom installation. Express installation always installs CA ITCM in the FIPS‑preferred mode. For a stand-alone remote control agent installation, you can specify the FIPS mode during both custom and express installations.
You can specify the following parameter for setting the FIPS mode when you perform a silent installation using command line, msiexec, or DMDeploy:
Windows:
FIPS_MODE=1 //(FIPS-preferred) FIPS_MODE=2 //(FIPS-only)
Linux or UNIX:
/RITCM_FIPS_MODE=1 //(FIPS-preferred) /RITCM_FIPS_MODE =2 //(FIPS-only)
Note: The FIPS mode parameter is ignored if you are modifying or upgrading an existing DSM component, or installing an additional DSM component on the target. In the former case, the FIPS mode is set to FIPS-preferred; in the latter case, the FIPS mode of the new component is the same as the existing component.
You cannot specify the FIPS mode when you use software delivery to install or upgrade DSM components. The FIPS mode is decided based on the following factors:
In all the cases, the manager can override the FIPS mode by applying the configuration policy that sets the FIPS mode.
|
Copyright © 2013 CA.
All rights reserved.
|
|