You can configure your Logical Domains Manager to perform domain migrations that use the Oracle Solaris FIPS 140-2 certified OpenSSL libraries. When the Logical Domains Manager is in FIPS 140-2 mode, you can use it only to migrate domains to another system that has the Logical Domains Manager running in FIPS 140-2 mode. Attempts to migrate to a non-FIPS system are rejected. If the Logical Domains Manager is not in FIPS 140-2 mode, it cannot migrate to a Logical Domains Manager that is in FIPS 140-2 mode.
To successfully start the Logical Domains Manager in FIPS 140-2 mode, you must enable the FIPS mediator. For step-by-step instructions, see How to Run Logical Domains Manager in FIPS 140-2 Mode.
For more information and showing how to use the FIPS 140-capable OpenSSL implementation, see Cryptographic Sources and FIPS 140-2 in Managing Encryption and Certificates in Oracle Solaris 11.3 and Example of Enabling Two Applications in FIPS 140 Mode on an Oracle Solaris System in Oracle SuperCluster M7-8 Owner’s Guide: Overview.