To enable FIPS mode on Unix:
Open the Connection Broker configuration file
ssh-broker-config.xml
that you want to modify (see
the section called “Connection Broker Files”.
Under the general
element, modify the
crypto-lib
element by settings its value to
fips
.
Ensure that the cryptographic algorithms defined in the configuration
file for the default-settings
element and the
profiles
element are compatible with FIPS mode. For
FIPS-compatible algorithms, see
ciphers
,
macs
and
kexs
.
Save the configuration file and reload the file to Connection Broker.