Administer > System Security > FIPS mode > Configuring FIPS mode in Service Manager > Configure FIPS mode in the Chat Service

Configure FIPS mode in the Chat Service

Prerequisites

Before you proceed, make sure of the following:

  1. Your chat server is running in FIPS mode. For details, see the Openfire Chat Server section in Configure Java for FIPS mode.

  2. You have already generated a CA certificates file and a client keystore for the Chat Server host. For details, see Generate FIPS validated certificates for the SM Server and other components.

    • The CA certificates file: \certs\smcacerts.p12

    • The Chat Service keystore file: \key\sun-sun-<chat service host FQDN>.p12 (for example, sun-sun-chatservicehost.mycompany.net.p12)

  3. You have enabled FIPS mode on the SM Server side. For details, see Configure FIPS mode in the Server.

Follow these steps to enable FIPS mode in the Chat Service:

  1. Copy the CA certificates file (smcacerts.p12) and the Chat Service client keystore (sun-sun-<chat service host FQDN>.p12) to the chat service conf folder.

  2. Open the Chat Server configuration file (<chat service>\conf\app.properties) in a text editor.

  3. Configure the codes as shown in the following (where changes are highlighted in bold).

    securityConfig.fipsmode=true
    securityConfig.JCEProviderName=JsafeJCE
    securityConfig.JCEProviderClassName=com.rsa.jsafe.provider.JsafeJCE
    daoFactory.serviceEndPoint=https://<sm server host FQDN>:13443
    chatServerConfig.domain=<chat server domian>
    chatServerConfig.host=<chat service host FQDN>
    app.keyStoreType=PKCS12
    app.keyStorePath=../conf/sun-sun-< chat service host FQDN >.p12
    app.keyStorePassword=<clientkeystore>
    app.trustStoreType=PKCS12
    app.trustStorePath=../conf/smcacerts.p12
    app.trustStorePassword=<changeit>
  4. Save your changes and close this file.

  5. Open the chat server configuration file (<chat service>\conf\config.yml) in a text editor, and then update all - type: https to - type: https-fips.

  6. Save your changes and close this file.

  7. Restart the Chat Service for your configuration to take effect.

Next step:

Configure FIPS mode in the IdM Service

Send Help Center feedback