com.ibm.di.server
Class FIPSCompliantMode

java.lang.Object
  com.ibm.di.server.FIPSCompliantMode

public class FIPSCompliantMode
extends Object

This is the main class which enables the Federal Information Processing Standard(FIPS) in IBM Tivoli Directory Integrator. In order to be FIPS compliant a specific cryptogaphic and SSL providers must be set in correct order to be used by IBM Tivoli Directory Integrator. To turn on FIPS mode in IBM Tivoli Directory Integrator, users must set the "com.ibm.di.server.fipsmode.on" property to true in global.properties file. This will enforce the IBM Tivoli Directory Integrator Server to arrange the correct providers in the desired order at start up.

Since:

7.0

Field Summary

static String	IBM_JCE_PROVIDER A required FIPS provider.
static String	IBM_JCE_PROVIDER_CLASS A required FIPS provider class.
static String	IBM_JCEFIPS_PROVIDER A required FIPS provider.
static String	IBM_JCEFIPS_PROVIDER_CLASS A required FIPS provider class.
static String	IBM_JSSE_FIPS_MODE A required FIPS provider class.
static String	IBM_JSSE2_PROVIDER A required FIPS provider.
static String	IBM_JSSE2_PROVIDER_CLASS A required FIPS provider class.
static String	IBM_SSL_PROVIDER_PROPERTY A required FIPS provider class.
static String	IBM_SSL_SERVER_SOCKET_FACTORY A required FIPS provider class.
static String	IBM_SSL_SERVER_SOCKET_FACTORY_PROP A required FIPS provider class.
static String	IBM_SSL_SOCKET_FACTORY A required FIPS provider class.
static String	IBM_SSL_SOCKET_FACTORY_PROP A required FIPS provider class.

Constructor Summary

FIPSCompliantMode()

Method Summary

static void	initializeFIPSMode() This method arranges the security providers in the correct order for FIPS compliant mode.
static boolean	isFIPSenabled() This method retrieves information whether FIPS mode was successfully initialized.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

IBM_JCE_PROVIDER

public static final String IBM_JCE_PROVIDER

A required FIPS provider.

See Also:

Constant Field Values

IBM_JCEFIPS_PROVIDER

public static final String IBM_JCEFIPS_PROVIDER

A required FIPS provider.

See Also:

Constant Field Values

IBM_JSSE2_PROVIDER

public static final String IBM_JSSE2_PROVIDER

A required FIPS provider.

See Also:

Constant Field Values

IBM_JCE_PROVIDER_CLASS

public static final String IBM_JCE_PROVIDER_CLASS

A required FIPS provider class.

See Also:

Constant Field Values

IBM_JCEFIPS_PROVIDER_CLASS

public static final String IBM_JCEFIPS_PROVIDER_CLASS

A required FIPS provider class.

See Also:

Constant Field Values

IBM_SSL_PROVIDER_PROPERTY

public static final String IBM_SSL_PROVIDER_PROPERTY

A required FIPS provider class.

See Also:

Constant Field Values

IBM_JSSE2_PROVIDER_CLASS

public static final String IBM_JSSE2_PROVIDER_CLASS

A required FIPS provider class.

See Also:

Constant Field Values

IBM_JSSE_FIPS_MODE

public static final String IBM_JSSE_FIPS_MODE

A required FIPS provider class.

See Also:

Constant Field Values

IBM_SSL_SOCKET_FACTORY_PROP

public static final String IBM_SSL_SOCKET_FACTORY_PROP

A required FIPS provider class.

See Also:

Constant Field Values

IBM_SSL_SOCKET_FACTORY

public static final String IBM_SSL_SOCKET_FACTORY

A required FIPS provider class.

See Also:

Constant Field Values

IBM_SSL_SERVER_SOCKET_FACTORY_PROP

public static final String IBM_SSL_SERVER_SOCKET_FACTORY_PROP

A required FIPS provider class.

See Also:

Constant Field Values

IBM_SSL_SERVER_SOCKET_FACTORY

public static final String IBM_SSL_SERVER_SOCKET_FACTORY

A required FIPS provider class.

See Also:

Constant Field Values

Constructor Detail

FIPSCompliantMode

public FIPSCompliantMode()

Method Detail

initializeFIPSMode

public static void initializeFIPSMode()
                               throws Exception

This method arranges the security providers in the correct order for FIPS compliant mode. An Exception will be thrown if the reorder of the providers fail.

Throws:

Exception - if the providers rearrangement fails.

isFIPSenabled

public static boolean isFIPSenabled()

This method retrieves information whether FIPS mode was successfully initialized.

Returns:

true, if nothing went wrong when setting up the provider for FIPS mode and false otherwise