ssl-fips-enabled

ssl-fips-enabled = {yes|no}

Description

Determines whether Federal Information Process Standards (FIPS) mode is enabled with the Federation Runtime. Notes:

• If no configuration entry is present, the setting from the global setting, determined by the Verify Access policy server, takes effect.
• The [tfim-cluster:<cluster>] ssl-nist-compliance setting can override this entry. If ssl-nist-compliance is set to yes, FIPS mode processing is automatically enabled.

Options

yes	FIPS mode is enabled.
no	FIPS mode is disabled.

Usage: This stanza entry is required if both of the following conditions are true:

• One or more of the cluster server entries use SSL (that is, contains an HTTPS protocol specification in the URL).
• A certificate is required other than the default certificate used by WebSEAL when communicating with the policy server.

If this entry is required, but it is not specified in the [tfim-cluster:<cluster>] stanza, WebSEAL uses the value in the global [ssl] stanza.

Default: None. To use a FIPS level that is different to the Verify Access policy server, edit the configuration file and specify a value for this entry.

Example:

ssl-fips-enabled = yes

Parent topic: [tfim-cluster:<cluster>] stanza