Cloud Extender in FIPS mode

Enabling FIPS mode

To enable FIPS mode for Cloud Extender and its modules, set the following registry key to 3. You can set this value manually in Windows Registry Editor or save the following code as a .reg file and run it on the Cloud Extender.

ENABLE_FIPS_CE_AND_MODULES.reg

Windows Registry Editor Version 5.00 
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Fiberlink\V360]
"FIPSComplianceMode"=dword:00000003

Certificate Integration Module in FIPS mode

To support FIPS 140-3, a new mechanism for adding integrity to PKCS#12 files is introduced. For more information, see https://datatracker.ietf.org/doc/rfc9579/.

As this is a newer implementation, some operating systems are not compatible with the updated algorithm. To address compatibility requirements, manually add the FipsCryptoProviderPolicy registry key in the Cloud Extender configuration or save the following code as a .reg file and run it on Cloud Extender.

EnableFIPS_WithFIPSCryptoProviderPolicy.reg

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Fiberlink\V360]
"FIPSComplianceMode"=dword:00000003
"FipsCryptoProviderPolicy"=dword:00000001

To ensure continued support for all agent devices when operating the Certificate Integration module in FIPS mode, it is recommended to configure the above registry key. The Supported OS version table lists the operating systems that are supported for agents based on the FipsCryptoProviderPolicy registry key.

Supported OS version