Host not licensed for FIPS mode

The integrator plans to licence the host without a FIPS licence, configure and operate the Station with that licence, and then add a FIPS licence later.

The software prevents installing a FIPS license or updating a non-FIPS license to a FIPS one if the platform is not ready to run FIPS. The FIPS check boxes ensure that the FIPS minimum requirements are met when setting the passwords. User passwords are hashed, so we can't know if they are compliant once established. Host Is Not Ready For FIPS Mode window appears.

Possible solution is as follows:

  1. Go to Workbench, Tools > Options > FIPS Options and ensure that Show FIPS Options is true.
  2. Login to the platform, on the Platform Administration page click System Passphrase button. To modify the system passphrase, select This host will be licensed for FIPS-140-2 and then change the system passphrase.
  3. Click User Accounts and select the This host will be licensed for FIPS-140-2 check box. Change the password for each platform user.
     NOTE: Refer Updating User Passwords to ensure station configuration is compliant for running in FIPS Mode. Modify the password strength on the Authentication Schemes to ensure the station enforces FIPS-compliant passwords on all station users. 
  4. Navigate to License Manager and delete the existing license.
  5. Import the license for FIPS and restart the station.