This section describes the jagtool commands getfipsmode and setfipsmode. For complete instructions on using jagtool, see Chapter 12, “Using jagtool and jagant” in the EAServer System Administration Guide.
Displays true if FIPS is enabled for an EAServer client or server’s runtime; false if FIPS is not enabled.
getfipsmode [ connect-args ] -pkcs11pin value -active value
Ant build file, specifying properties from an optional file:
<jag_get_fipsmode pkcs11pin=”value” active=”true” />
Ant build file, specifying properties directly:
<jag_get_fipsmode pkcs11pin=”value” > <active=”true” /> .... </jag_enablefips>
Option |
Description |
Required |
|---|---|---|
connect-args |
Arguments to specify a connection to the server or run in local mode. In connected mode, jagtool connects to an EAServer using a network connection. |
Yes |
pkcs11pin |
The PIN of the PKCS #11 module. |
Yes |
active |
Returns the mode that the client or server is using. True if in FIPS mode; false if not. |
Yes |
This example indicates whether or not FIPS is enabled for the PKCS #11 module, which is using the default PIN.
Command line:
jagtool getfipsmode -pkcs11pin sybase -active true
Ant build file:
<jag_get_fipsmode pkcs11pin="sybase" active=”true” />
Turns FIPS mode on or off for an EAServer server or client.
setfipsmode [ connect-args ] -pkcs11pin value -mode value
Ant build file, specifying properties from an optional file:
<jag_set_fipsmode pkcs11pin=”value” mode=”true | false” />
Ant build file, specifying properties directly:
<jag_set_fipsmode pkcs11pin=”value” > <mode=”true” /> .... </jag_enablefips>
Option |
Description |
Required |
|---|---|---|
connect-args |
Arguments to specify a connection to the server or run in local mode. In connected mode, jagtool connects to an EAServer using a network connection. |
Yes |
pkcs11pin |
The PIN of the PKCS #11 module. The default value is “sybase.” |
Yes |
mode |
Changes the mode of the PKCS #11 module. True turns FIPS mode on, false (the default) turns FIPS mode off. |
No. |
This example turns FIPS mode on for the PKCS #11 module, which is using the default PIN.
Command line:
jagtool setfipsmode -pkcs11pin sybase -mode true
Ant build file:
<jag_set_fipsmode pkcs11pin="sybase" mode=”true” />
