Install the latest Communication Manager software.
For VMware, deploy the JITC specific OVA file and then apply the latest FIPS specific service pack.
For System Manager, upgrade to the FIPS-only template and then install the FIPS specific service pack.
Obtain a third party host certificate set:
Communication Manager Identity certificate.
Trusted certificate chain. For example, the Root CA and an Intermediate CA.
This certificate set is exchanged with the gateway or the H.323 phones during the TLS handshake. The Communication Manager server will take the role of the server in the TLS handshake with gateways and phones.
The security administrator needs to perform the following task on the Communication Manager server to enable FIPS.
Note:
The security administrators that can execute the FIPS mode command are any users that belong to the susers groups: init, inads, and craft.
To enable the FIPS mode, on the Shell prompt, type the fips_mode enabled command. The security administrator is prompted for a y or n.
Type y.
STEP RESULT:
The Communication Manager server reboots automatically and the FIPS mode is enabled.
