---
title: Disabling FIPS Mode
description: Disable FIPS Mode to allow the use of non-FIPS compliant encryption. If your environment is clustered, perform this procedure on all nodes.
component: pingaccess
version: 9.0
page_id: pingaccess:configuring_and_customizing_pingaccess:pa_disabling_fips_mode
canonical_url: https://docs.pingidentity.com/pingaccess/9.0/configuring_and_customizing_pingaccess/pa_disabling_fips_mode.html
revdate: August 24, 2023
section_ids:
  about-this-task: About this task
  steps: Steps
---

# Disabling FIPS Mode

## About this task

Disable FIPS Mode to allow the use of non-FIPS compliant encryption. If your environment is clustered, perform this procedure on all nodes.

## Steps

1. Open the `<PA Home>/conf/fips-mode.properties` file.

2. Set the `pa.fips.mode` property to `false`.

   ```
   pa.fips.mode=false
   ```

3. Save and close the `<PA Home>/conf/fips-mode.properties` file.

4. If you're [running PingAccess as a windows service](../installing_and_uninstalling_pingaccess/pa_running_pa_as_a_service.html), reconfigure the classpath for the libraries required for FIPS mode:

   1. Uncomment the following line:

      ```
      # set.default.BC_PATH=../../resource/bc/non-fips
      ```

   2. Comment out the following line or the `BC_PATH` environment variable to `../../resource/bc/fips` that you set:

      ```
      set.default.BC_PATH=../../resource/bc/fips
      ```

   |   |                                                                                                |
   | - | ---------------------------------------------------------------------------------------------- |
   |   | Learn more in the inline comments in the `<PA_HOME>/sbin/windows/PingAccessService.conf` file. |

5. Restart PingAccess.