You can't have both FIPS-compliant and non-FIPS-compliant servers in the same topology, and you can't update an existing non-FIPS-compliant server to run in FIPS 140-2-compliant mode.
Because of this, if you want to run a server in FIPS-compliant mode, you must set up a new instance. This can be done in the following two ways:
- Use setup with an appropriate set of arguments.
- Use manage-profile setup with a profile that includes the necessary setup arguments, along with any other configuration changes, extensions, and other files that you might want included in the installation.