Administer > System security > FIPS mode > FIPS mode log messages

FIPS mode log messages

Service Manager writes FIPS mode related messages in the Server log and client log files.

Messages in the SM Server log

When FIPS mode is enabled on the Server side, the clients (Windows, Web Tier, Mobility, SRC, and Web Services) can connect to the Server through https (either FIPS validated TLS or normal TLS); however, the recommended best security practice is to run all of them in FIPS mode as well.

When FIPS mode is successfully enabled on the Server side, the following messages appear in the Server log (Server\logs\sm.log):

FIPS mode is set successfully.
FIPS provider was initialized successfully.

Additionally, when FIPS mode is enabled on the Server side and the Windows Client is running in non-FIPS mode, the following warning message appears in the Server log:

Your Client is running in non-FIPS mode, but the Service Manager Server is running in FIPS mode. For the highest security, we recommend you enable FIPS mode for the Client.

Note This message will also appear in the Windows Client user interface.

Messages in SM client logs

When FIPS mode is enabled successfully on the client sides, messages are written to the client logs. See the following table.

Client Example messages Log file
Web Tier

Examples:

2016-03-12 12:35:03,830 INFO [localhost-startStop-1] [com.hp.ov.sm.client.common.util.JCEProviderHelper] JCE Provider has registered in java.security:JsafeJCE

2016-03-12 12:35:03,830 INFO [localhost-startStop-1] [com.hp.ov.sm.client.common.util.JCEProviderHelper] Fips mode enabled.

The sm.log file in the web application server installation directory. For example, <Tomcat>\bin\sm.log.
Mobility Client

Examples:

[localhost-startStop-1] (12/03/2016 12:30:39,906) [INFO ] client.util.JCEProviderHelper - JCE Provider has registered in java.security:JsafeJCE

[localhost-startStop-1] (12/03/2016 12:30:39,906) [INFO ] client.util.JCEProviderHelper - Fips mode enabled.

The mobility.log file in the web application server installation directory. For example, <Tomcat>\bin\mobility.log.
SRC SunJSSE initialized in FIPS Mode. The server.log file in Tomcat: <Tomcat>\logs \server.log