To enable FIPS mode for the NetBackup BAR Console (on local or remote host)

1. Open the NetBackup BAR Console configuration file.

   • On Windows computers, the file containing configuration options for the NetBackup BAR Console is: install_path\java\nbj.conf

   • On UNIX computers, the file containing configuration options for the NetBackup BAR Console is: /usr/openv/java/nbj.conf

2. In the configuration file, enable the NB_FIPS_MODE option. Use the following format:

   NB_FIPS_MODE = true

3. Save the changes.
4. Restart the NetBackup BAR Console.

To verify if the NetBackup BAR Console runs in FIPS mode

• Check the NetBackup BAR Console logs.

  Log location:

  On Windows: install_path\logs\user_ops\nbjlogs\jbp.root.jnbSA.pid.log

  On UNIX: /usr/openv/netbackup/logs/user_ops/nbjlogs/jbp.root.jnbSA. pid.log

  On a standalone console, create a directory structure and check the logs.

  If the log file contains the following log lines, it means the console runs in FIPS mode:

  com.safelogic.cryptocomply.fips.approved_only: true

  It should have the following log lines:

  JavaPresentationLayer- FIPS mode enforced. Reconfiguring SunJSSE. 
  JavaPresentationLayer- BAR console is running in FIPS approved mode

  Note:

  This FIPS mode configuration does not affect the NetBackup KMS FIPS mode. NetBackup KMS continues to run in FIPS mode by default.