Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Updating Cryptographic Modules for FIPS

FIPS mode only:

As part of the FIPS installation, the cryptographic modules must be updated on all of your JSA appliances.

Go to Juniper Customer Support website to obtain the 7.5.0-QRADAR-QRSIEM-FIPS-Crypto-Modules which contains the following files:

  • JSA FIPS OpenSSL RPM

  • JSA FIPS IBMJCEPlusFIPS compressed file

  1. Complete the following steps to install the JSA FIPS IBMJCEPlusFIPS compressed file.
    1. To extract the compressed files, type the following command: tar -xvf <QRadar FIPSIBMJCEPlusFIPS>.tar to extract the compressed files.
    2. Run the following commands to back up the existing files.

      • cp /opt/ibm/java-x86_64-80/jre/lib/icc/C/icc/icclib/ICCSIG.txt /opt/ibm/java-x86_64-80/jre/lib/icc/C/icc/icclib/ICCSIG.txt.bak

      • cp /opt/ibm/java-x86_64-80/jre/lib/icc/C/icc/icclib/libicclib084.so /opt/ibm/java-x86_64-80/jre/lib/icc/C/icc/icclib/libicclib084.so.bak

    3. Copy the new updated files to their correct location by typing the following commands.

      • cp ICCSIG.txt /opt/ibm/java-x86_64-80/jre/lib/icc/C/icc/icclib/ICCSIG.txt

      • cp libicclib084.so /opt/ibm/java-x86_64-80/jre/lib/icc/C/icc/icclib/libicclib084.so

  2. Restart each appliance to ensure that the new files were created successfully.