How to migrate VMware Identity Manager from non-FIPS to FIPS enabled mode?

Products

• VMware Aria Operations (formerly vRealize Operations) 8.x

Issue/Introduction

You deployed VMware Identity Manager with FIPS mode disabled, and would like to enable FIPS.

Environment

VMware Identity Manager 3.3.7

Resolution

FIPS mode cannot be enabled if initially deployed with FIPS disabled, the globalenvironment will have to be removed from Aria Lifecycle Manager, and then redeployed with FIPS mode enabled.

You can collect the latest OVA for Identity Manager from our support portal, as it will also contain the latest patch bits.

You will then need to re-integrate Identity Manager with any FIPS-enabled product that relies on vIDM as an authentication provider, an example for Aria Operations can be found at this docuemtation reference.

Please make sure to also read any release notes for Aria Lifecycle Manager as certain patch versions have dependency requirements, e.g. Aria Lifecycle Manager Patch 7 requires VMware Identity Manager to have CSP-102547 installed).