Enabling FIPS Mode for SSH (SFTP) Connections

Refer to FIPS-Certified Libraries for detailed information about FIPS before enabling FIPS mode.

FIPS mode is a feature of the High Security (HS) module. The mechanisms and interfaces for enabling, disabling, and using FIPS cryptographic mode is available during the HS module evaluation period.

• You can enable FIPS mode for:

• inbound SFTP (SSH2)

• inbound HTTPs/FTPs (SSL)

• outbound HTTPs/FTPs (SSL) through Event Rules (except when using AWE).

• FIPS mode does not apply to:

• outbound client SFTP (SSH2) through Event Rules

• AWE-based HTTPs/FTPs (SSL)

• AWE-based SFTP (SSH2)

• AS2 inbound nor outbound transactions

To enable FIPS mode for SSH connections

1. In the Administrator, connect to EFT Server and click the Server tab.

2. In the left pane, click the Server node on which you want to enable FIPS mode.

3. In the right pane, click the Security tab.

4. In the Federal Information ProcessingStandards (FIPS) area, select the Use FIPS certified library for SSH connections check box.

5. Click Apply to save the changes on EFT Server.

6. Stop and then restart the EFT Server service. On EFT Server's General tab, review the Statistics area to verify that the service started.

• If the HS module has expired when you attempt to start a Site on a Server that has FIPS mode enabled, an error message appears in the Administrator, and the Server sends an error message to the Event Log.

Refer to SFTP for details of configuring and enabling SFTP (SSH2) on a Site.