<html><body> Is there any indication of a timeframe for it to become FIPS compliant? If we are talking weeks, rather than years... Michael Sean Conley <img width="16" height="16" src="cid:1__=09BB0A96DFC8FDE38f9e8a93df9@raytheon.com" border="0" alt="Inactive hide details for Rob Crittenden ---08/04/2016 11:37:23 AM---Michael Sean Conley wrote: > Does ANYONE have any experien">Rob Crittenden ---08/04/2016 11:37:23 AM---Michael Sean Conley wrote: > Does ANYONE have any experience getting IPA to work with FIPS? From: Rob Crittenden <rcritten@redhat.com> To: Michael Sean Conley <Michael.Sean.Conley@raytheon.com>, freeipa-users@redhat.com Date: 08/04/2016 11:37 AM Subject: Re: [Freeipa-users] IPA and FIPS 140-2 <hr width="100%" size="2" align="left" noshade style="color:#8091A5; "> <tt>Michael Sean Conley wrote: > Does ANYONE have any experience getting IPA to work with FIPS? > > We're trying desperately to get this going, as we have some requirements > that the Identity Management Tool we choose must be FIPS 140-2 compliant. No, it doesn't work in FIPS mode yet. If you open a support case with Red Hat your case can be added to </tt><tt><a href="https://bugzilla.redhat.com/show_bug.cgi?id=1125174">https://bugzilla.redhat.com/show_bug.cgi?id=1125174</a></tt><tt> While most, if not all, of the individual components can run in FIPS mode there are a lot of moving parts to coordinate to ensure they comply with the FIPS Security Policy and to handle some corner cases in the management framework. rob </tt> </body></html>