Installation Guides › WebSphere Version › Product Prerequisites › Meet System Requirements › Create a FIPS 140-2 Encryption Key

Create a FIPS 140-2 Encryption Key

When you run the CA Identity Manager installer, you are given the option of enabling FIPS 140-2 compliance mode. For CA Identity Manager to support FIPS 140-2, all components in a CA Identity Manager environment must be FIPS 140-2 enabled. You need a FIPS encryption key to enable FIPS 140-2 during installation. A Password Tool for creating a FIPS key is located in the installation media at PasswordTool\bin.

Important! Use the same FIPS 140-2 encryption key in all installations and be sure that you safeguard the key file once generated by the Password Tool.

(Optional) Configure a Policy Server

A SiteMinder Policy Server is an optional component that you install as described in the CA SiteMinder Web Access Manager Installation Guide. If you plan to make the policy server highly available, you configure it as a policy server cluster.

To install a policy server

1. Install the SiteMinder Policy Server. For details, see the CA SiteMinder Web Access Manager Policy Server Installation Guide.
2. If you plan to make the policy server highly available, install it on each node that should be in the Policy Server cluster.

   Note: Each Policy Server in the cluster uses the same policy store.

3. Check that you can ping the systems that host the Policy Server from the system where you plan to install the Identity Manager Server.

To install the Identity Manager Extensions for SiteMinder

Before installing the Identity Manager server, you need to add the extension to each policy server. If the Policy Server is on the system where you plan to install the Identity Manager server, you can install the extensions and the Identity Manager server simultaneously. If so, omit this procedure.

1. Stop the SiteMinder services.
2. Install the Identity Manager Extensions for SiteMinder. Do one of the following:
   • Windows: From your installation media, run the following program in the top-level folder:

     ca-im-r12.5sp1-win32.exe
     

   • UNIX: From your installation media, run the following program in the top-level folder:

     ca-im-r12.5sp1-sol.bin
     

   The CA Identity Manager installer opens.

3. Complete the instructions in the CA Identity Manager installation dialog boxes.