Enable FIPS for Service Request Catalog

FIPS (Federal Information Processing Standards) are a set of standards that describe document processing, encryption algorithms and other information technology standards for use within U.S. non-military government agencies and by U.S. government contractors and vendors who work with such agencies.

HPE Service Manager supports the FIPS 140-2 approved Advanced Encryption Standard (AES) 256-bit data encryption algorithm, FIPS-validated TLS connections, and LW-SSO. To use FIPS together with Service Request Catalog, you must first enable FIPS mode in Service Manager. For information on how to do this, seeConfiguring FIPS mode in Service Manager and Configuring LW-SSO in FIPS mode.

Use the FIPS standard in Service Request Catalog

Service Request Catalog provides one tool to generate encrypted password. To support the FIPS standard encryption, this tool has been upgraded from Service Request Catalog 9.32.

By default, the runme.bat script generates an encryption key that meets the FIPS standard. More specifically, the runme.bat script uses an Advanced Encryption Standard (AES) 256-bit data encryption algorithm. However, to remain compatible with previous versions of Service Request Catalog, an optional parameter (PBE) is now accepted by the runme.bat script, which uses the MD5 and DES encryption of earlier versions of Service Request Catalog. Therefore, the following commands are valid:

• Runme.bat //uses the AES 256-bit algorithm

• Runme.bat PBE //uses the earlier MD5 and DES algorithm