This FAQ provides answers to common questions about enabling and using FIPS mode in OpenEdge 13.0. It is designed to help you understand the feature, its requirements, and its limitations.

What is FIPS mode?

FIPS mode supports compliance with the FIPS 140-3 standard to help secure ABL business applications.

For more information, see FIPS mode.

Does enabling FIPS mode make my application FIPS compliant?

No. Enabling FIPS mode does not automatically make your application FIPS compliant. Your application code, operating system, hardware, and third-party libraries must also meet FIPS compliance requirements and obtain CMVP certification.

For more information, see Identify requirements.

How do I enable FIPS mode?

You must install the Progress® OpenEdge Advanced Security (OEAS) license and configure the ESAM policy using the POLMAN utility.

For more information, see Change FIPS mode.

How can I verify if FIPS mode is enabled?

From ABL code, use the SECURITY-POLICY:FIPS-MODE to check FIPS mode.

From the command line,use POLMAN to check FIPS mode.

For more information, Check FIPS mode.

What changes are required to work in FIPS mode?

Using FIPS mode requires preparing your environment, enabling FIPS mode, and completing post-setup steps. For more information, see the topics in Use FIPS mode.

Is the oepas1 instance FIPS ready?

No. The oepas1 instance is a sample. It is not designed to be run in FIPS mode. You must prepare the instance to run in FIPS mode.

For more information, see the topics in Use FIPS mode.

What happens to existing users when FIPS mode is enabled?

Database users created in earlier versions may not be able log in after enabling FIPS mode because older password algorithms are not supported. Update passwords using password management tools.

Is FIPS mode supported on all OpenEdge installations?

No. You must purchase and install the Progress® OpenEdge Advanced Security (OEAS) license. FIPS mode is supported only on 64-bit OpenEdge installations and is not available for 32-bit installations.

Which OpenEdge components support FIPS mode?

Supported components include:
  • ADE Tools
  • AVM executables
  • Client Networking
  • Java OpenClient
  • OpenEdge DataServer for Microsoft SQL Server
  • OpenEdge RDBMS (TDE/HSM, Auditing)
  • PAS for OpenEdge
  • SQL Server Client

For more information, see Restrictions.

Are there any limitations or out-of-scope features?

Yes. For more information, see Limitations.

Where can I get help resolving errors?

If you encounter issues using FIPS mode, see Troubleshoot issues.