Sun OpenSSO Enterprise 8.0 Installation and Configuration Guide

ProcedureTo Enable FIPS Mode for the NSS Database

  1. Enable FIPS mode for the NSS database using the Security Module Database Tool (modutil). For example:

    modutil -fips true -dbdir path-to-nss-database
    

    where path-to-nss-database represents the path to the NSS database.

    For example, by default, for Web Server 7.0, the NSS database is in the config directory of the Web Server 7.0 instance.

    For information about using modutil, see http://www.mozilla.org/projects/security/pki/nss/tools/modutil.html.