FIPS 140-2 Support › User Authentication and Authorization in FIPS Mode

User Authentication and Authorization in FIPS Mode

CA EEM can be configured to use FIPS mode. This is an option. When CA EEM is configured to use FIPS, CA Process Automation must be configured to use FIPS. This is achieved by selecting the Use FIPS-Compliant Certificate check box during installation of the Domain Orchestrator.

Whether FIPS mode is set to on or off, the data transferred between CA EEM and CA Process Automation is encrypted. The difference is in the algorithms used for encryption.

When users log in, CA Process Automation transfers the user name and password to CA EEM. CA EEM returns authentication data and authorization data to CA Process Automation.

• When FIPS mode is on:
  • Transferred data is encrypted with the SHA1 algorithm supported by FIPS.
  • A PAM.cer certificate is used.
• When FIPS mode is off:
  • Transferred data is encrypted with the MD5 algorithm.
  • A PAM.p12 certificate is used.