Administration Guide › FIPS-140 Support › Migration to FIPS MIGRATE Mode

Previous Topic: Configuration Process for FIPS ONLY Mode

Next Topic: Migration to FIPS ONLY Mode

Migration to FIPS MIGRATE Mode

If you are upgrading to SPS r12 SP 3 from an earlier version and want to use FIPS-compliant algorithms, you can change the Web Agent inside the SPS from COMPAT mode to MIGRATE mode.

To set the SPS to FIPS MIGRATE mode

  1. Stop the SPS services.
  2. Open a command-line window.
  3. Enter the following command: 
    smreghost -i policy_server_ip_address -u administrator_user_name -p administrator_password -hn hostname_for_registration -hc host_config_object -f path_to_host_config_file -o -cf MIGRATE

    Example:

    smreghost -i localhost -u siteminder -p firewall -hn helloworld -hc host  -f "C:\Program Files\CA\secure-proxy\proxy-engine\conf\defaultagent\SmHost.conf" -o -cf  MIGRATE
  4. Restart the SPS machine.(Windows only)
  5. Restart the SPS services.

The Web Agent inside the SPS is changed from FIPS COMPAT to FIPS MIGRATE mode.