To enable FIPS mode on Unix:
Open the Connection Broker configuration file
ssh-broker-config.xml
that you want to modify (see
the section called “Connection Broker Files”.
Under the general
element, modify the
crypto-lib
element by settings its value to
fips
.
Ensure that the cryptographic algorithms defined in the
configuration file for the default-settings
element and
the profiles
element are compatible with FIPS mode. For
FIPS-compatible algorithms, see ciphers,
macs and kexs.
Save the configuration file and reload the file to Connection Broker.