When setting up in FIPS 140-2-compliant mode, the server uses the Bouncy Castle FIPS Java API in approved-only mode, which rejects attempts to use non-FIPS 140-2-compliant cryptography.