Disabling BouncyCastle FIPS Mode

Procedure

  • Enter one of the following commands:

    • On Windows: fips disable or fips disable silent

    • On Unix: ./fips.sh disable or ./fips disable silent
    The following functions are performed when you disable FIPS mode for an MFT Server:
    • Removes BouncyCastle security providers.
    • Converts the server.xml to a .jks file and updates the server.xml.
    • Updates the TLS ciphers in the server.xml to ciphers supported by non-FIPS mode.
    • Removes the FIPS environment parameters in the MFT startup script.