Release Notes › Policy Server Release Notes › Known Issues › Unsupported Features › Windows LDAP Driver Version and FIPS/IPv6 Support

Windows LDAP Driver Version and FIPS/IPv6 Support

For the initial release of the SiteMinder r12.0 SP3 Policy Server, Windows LDAP directory drivers for policy stores and user stores have configuration limitations related to IPv6 and/or FIPS 140:

• The LDAP drivers do not support IPv6 connections, so while a Windows-based Policy Server may be configured to service Agent IPv6 connections, if it accesses LDAP stores, the LDAP connections must be configured for IPv4.
• When a Windows Policy Server is configured for FIPS-only operation and is using LDAP-over-SSL for Policy/User Stores, it does not restrict SSL to FIPS-only algorithms.

  Customers wishing to strictly observe all FIPS-140 algorithm restrictions may modify the SSL configuration files accordingly and deploy FIPS-compliant certificates.