Previous Topic: Re-encrypt the SiteMinder Super User Password

Next Topic: Re-encrypt Client Shared Secrets

Set an Agent to FIPS-Migration Mode

You set the Agents to FIPS-migration mode so the environment can continue to use existing SiteMinder encryption algorithms as you re-encrypt sensitive data using FIPS-compliant algorithms.

To change the FIPS mode of an agent

  1. Open the SmHost.conf file with a text editor.

    The following line appears in the file:

    fipsmode="COMPAT"
    
  2. Edit the line to read:
    fipsmode="MIGRATE"
    
  3. Save and close the file.
  4. Restart the machine that is hosting the Agent.

    The agent is operating in FIPS-migration mode.

  5. Repeat the previous steps for each machine in the environment on which a trusted hosted is registered.

You may now encrypt agent shared secrets.


Copyright © 2010 CA. All rights reserved. Email CA about this topic