To Configure an OpenSSO Enterprise 8.0 Instance Using the Console

1. Log in to the OpenSSO Enterprise Administration Console.

2. Click Configuration, Servers and Sites, and then the Server Name instance.

3. Click the Security tab.

4. Click the Inheritance Settings button.

5. Uncheck the Encryption class, FIPS Mode, and Secure Random Factory Class properties.

6. Click Save and then Back to Server Profile.

7. Change Encryption class to com.iplanet.services.util.JSSEncryption.

8. Change Secure Random Factory Class to com.iplanet.am.util.JSSSecureRandomFactoryImpl.

9. Check Yes for FIPS Mode.

10. Click Save and then the Advanced tab.

11. Change the com.iplanet.security.SSLSocketFactoryImpl property to com.iplanet.services.ldap.JSSSocketFactory.

12. Click Add and add following property with the value:

    opensso.protocol.handler.pkgs=com.iplanet.services.comm

13. Click Add and add following property with the value:

    com.iplanet.am.admin.cli.certdb.dir=path-to-FIPS-enabled-NSS-certdb

14. Click Save.

15. Restart the OpenSSO Enterprise server instance.