How to Apply FIPS Encryption for CA Identity Manager (FIPS Compliance)

Products

• CA Identity Manager
• CA Identity Suite

Issue/Introduction

This article outlines the support and procedural requirements for implementing Federal Information Processing Standards (FIPS) to enable encrypted communication within Identity Manager environments.

Environment

Identity Manager 14.5 & 15

Cause

FIPS compliance requires specific cryptographic configuration during the initial environment deployment. Due to the architecture of the encryption modules, FIPS cannot be enabled on an existing installation by simply overwriting files.

Resolution

To implement FIPS in your CA Identity Manager environment, follow the appropriate method based on your current deployment status:

1. New Installations:
   • Follow the detailed FIPS configuration steps provided in the official FIPS Compliance - 14.5 or FIPS Compliance - v15
   • Ensure FIPS settings are enabled during the initial installation wizard.
2. Existing Environments:
   • FIPS support cannot be applied via an overwrite or upgrade installation.
   • To migrate an existing environment to a FIPS-compliant setup, you must uninstall all CA Identity Manager components and perform a clean reinstallation.

Additional Information

To speak with a customer representative or a Support Engineer see Contact Support. Scroll to the bottom of the page and click on your respective region.