Upgrading Smart Assurance products in FIPS mode

Note:

Upgrading in FIPS mode is not available for Server Manager.

10.1.7 products do not use a Federal Information Processing Standard (FIPS 140-2) approved encryption algorithm to protect the imk.dat file. By default, the 10.1.7 imk.dat file uses MD5, which is not a FIPS-approved algorithm. Hence, while upgrading from previous versions of products to Version 10.1.7, the imk.dat file needs to be regenerated in order to run in the FIPS mode.

In order to convert an existing installation to FIPS, use the sm_rebond (in non-FIPS mode) first to get everything re-encoded in a FIPS compatible way. The steps are as follows:

1. Run the following command at the command line prompt:

                  sm_rebond --upgrade --basedir=<
                  BASEDIR
                  >/smarts
                  sm_rebond --upgrade --basedir=C:\InCharge\SAM\smarts
               

2. When prompted, type a password to regenerate the imk.dat file. The default password is Not a secret.

3. Set the value for the parameter SM_FIPS140 to TRUE in the runcmd_env.sh file. The file is located under the BASEDIR/smarts/local/conf directory.