Previous Topic: Configuration Process for FIPS ONLY Mode

Next Topic: Migration to FIPS ONLY Mode

Administration Guide › FIPS-140 Support › Migration to FIPS MIGRATE Mode

Migration to FIPS MIGRATE Mode

If you are upgrading from an earlier version and want to use FIPS-compliant algorithms, you can change the Web Agent inside SPS from COMPAT mode to MIGRATE mode.

To set SPS to FIPS MIGRATE mode

  1. Stop the SPS services.
  2. Open a command-line window.
  3. Enter the following command: 
    smreghost -i policy_server_ip_address -u administrator_user_name -p administrator_password -hn hostname_for_registration -hc host_config_object -f path_to_host_config_file -o -cf MIGRATE

    Example:

    smreghost -i localhost -u siteminder -p firewall -hn helloworld -hc host  -f "C:\Program Files\CA\secure-proxy\proxy-engine\conf\defaultagent\SmHost.conf" -o -cf  MIGRATE
  4. Restart the machine.(Windows only)
  5. Restart the SPS services.

The Web Agent inside SPS is changed from FIPS COMPAT to FIPS MIGRATE mode.