Configure FIPS 140-2 for existing applications

We must modify applications created in earlier versions of MPF to enable the FIPS 140-2 feature.

The FIPS 140-2 optional feature is not enabled by default. To enable the FIPS 140-2 optional feature, see Enable FIPS 140-2. After the optional feature is enabled, we can configure FIPS 140-2.

After completingd the steps described in Enable FIPS 140-2, configure FIPS 140-2 by modifying the initOptions.js file to add the FIPS configuration property.

For JSONStore FIPS 140-2 users – Starting with IBM Worklight v6.1.0, the FIPS 140-2 feature, combined with the JSONStore feature, enables FIPS 140-2 support for JSONStore. This combination supersedes what was indicated in tutorial JSONStore - Encrypting sensitive data with FIPS 140-2 that was available for IBM Worklight v6.0 or earlier. If we previously modified an application by following the instructions in this tutorial, delete and re-create its iPhone, iPad, and Android environments. Because any environment-specific changes that you previously made are lost when you delete an environment, make sure to back up any such changes before you delete any environment. After the environment is re-created, we can reapply those changes to the new environment.

1. Add the following lines of code to the initOptions object found in the appFolder/common/js/initOptions.js file.
   enableFIPS : true

2. Rebuild and deploy the app.

Parent topic: FIPS 140-2 support