SRM Test Recovery of VMware Identity Manager fails with FIPS mode error

Products

• VCF Automation
• VMware Site Recovery Manager 8.x

Issue/Introduction

When running a test Disaster Recovery (DR) plan via Site Recovery Manager (SRM) for a VMware Identity Manager (vIDM) appliance, the operation fails during the power-on phase. The following error is displayed in the vCenter Server or SRM interface:

Property 'Enable Federal Information Processing Standards (FIPS) mode' must be configured for the VM to power on.

Environment

 

• Product: VMware Identity Manager (VIDM)

• Component: Site Recovery Manager (SRM)

 

Cause

The error occurs because the fips.mode.enabled property under the vApp options is empty or uninitialized on the shadow virtual machine. Even if FIPS mode is not intended to be used, the virtual machine requires a defined value (True or False) in the "Value" and "Default" fields to satisfy the power-on requirements.

Resolution

To resolve this issue, you must manually populate the FIPS mode configuration fields on the shadow virtual machines:

1. Log in to the vSphere Client.

2. Navigate to the Protected Site.

3. Locate and click on the Shadow Virtual Machines associated with the vIDM appliance.

4. Navigate to the Configure tab.

5. Under the Settings menu, select vApp options.

6. Locate the property named fips.mode.enabled.

7. Click Edit. 

   • Enable the setting and then immediately disable it.
     
     
   • This action forces the system to populate the Default Value field as False.

8. Use the Set Value buttons to toggle the setting:

   • Enable the setting and then immediately disable it.

   • This action forces the system to populate the Value field as False.

9. Save the changes and retry the SRM test recovery.