Is there any indication of a timeframe for it to become FIPS compliant?  If
we are talking weeks, rather than years...

Michael Sean Conley




From:   Rob Crittenden <rcrit...@redhat.com>
To:     Michael Sean Conley <michael.sean.con...@raytheon.com>,
            freeipa-users@redhat.com
Date:   08/04/2016 11:37 AM
Subject:        Re: [Freeipa-users] IPA and FIPS 140-2



Michael Sean Conley wrote:
> Does ANYONE have any experience getting IPA to work with FIPS?
>
> We're trying desperately to get this going, as we have some requirements
> that the Identity Management Tool we choose must be FIPS 140-2 compliant.

No, it doesn't work in FIPS mode yet. If you open a support case with
Red Hat your case can be added to
https://bugzilla.redhat.com/show_bug.cgi?id=1125174

While most, if not all, of the individual components can run in FIPS
mode there are a lot of moving parts to coordinate to ensure they comply
with the FIPS Security Policy and to handle some corner cases in the
management framework.

rob
-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project

Reply via email to