Attribute level encryption accepts only one of following values: AES-128 AES-192, AES-256, SSHA, SHA-224, SHA2-56, SHA3-84, SHA-512, SSHA-224, SSHA-256, SSHA-384, SSHA-512, PBKDF2-SHA1, PBKDF2-SHA224, PBKDF2-SHA256, PBKDF2-SHA384 or PBKDF2-SHA512 If SHA-2 is enabled, then SHA-224, SHA-256, SHA-384, SHA-512, SSHA-224, SSHA-256, SSHA-384, and SSHA-512 are allowed.
User response
If SHA-2 must be enabled, ibm-slapdUseNonFIPSCrypt must be set to true in cn=configuration entry. If not, choose another encryption method.