Previous Topic: Retry ConfigurationNext Topic: Configure CA IAM CS to Work Under Heavy Loads (UNIX Only)


Disable FIPS for CA IAM CS

When you install CA IAM CS, you can enable FIPS. If you upgrade to CA IAM CS from a Java CS that had FIPS enabled, it is still enabled after the upgrade.

In either of these situations, you can disable FIPS without running the installation program again.

The FIPS setting is in the server_osgi_shared.xml. We recommend that you customize this setting in an override file.

Follow these steps:

  1. Open the following properties file in a text editor:
    cs_home/conf/override/server_shared.properties
    

    If it does not already exist, follow the steps in Customize the Configuration for CA IAM CS to create it.

  2. Find the following setting, or add it to the file:
    JsafeJCE.fipsEnabled=false
    
  3. Ensure that the setting is not commented out with a # character.
  4. Save the edited properties file.
  5. Restart CA IAM CS.