Disabling FIPS Mode

About this task

Disable FIPS Mode to allow the use of non-FIPS compliant encryption. If your environment is clustered, perform this procedure on all nodes.

Steps

Open the <PA Home>/conf/fips-mode.properties file.
Set the pa.fips.mode property to false.
```
pa.fips.mode=false
```
Save and close the <PA Home>/conf/fips-mode.properties file.
If you’re running PingAccess as a windows service, reconfigure the classpath for the libraries required for FIPS mode:
1. Uncomment the following line:
  # set.default.BC_PATH=../../resource/bc/non-fips
2. Comment out the following line or the BC_PATH environment variable to ../../resource/bc/fips that you set:
  set.default.BC_PATH=../../resource/bc/fips
Learn more in the inline comments in the <PA_HOME>/sbin/windows/PingAccessService.conf file.
Restart PingAccess.