Installation guide

Register Your System as a Trusted Host on Windows
46 Web Agent Installation Guide
-f path_to_host_config_file
(Optional) Indicates the full path to the file that contains the registration
data. The default file is SmHost.conf. If you do not specify a path, the file
is installed in the location where you are running the smreghost tool.
If you use the same name as an existing host configuration file, the tool
backups up the original and adds a .bk extension to the backup file
name.
-cf FIPS mode
Specifies one of the following FIPS modes:
■ COMPAT--Specifies non-FIPS mode, which lets the Policy Server and
the Agents read and write information using the existing SiteMinder
encryption algorithms. If your organization does not require the use
of FIPS-compliant algorithms, the Policy Server and the Agents can
operate in non-FIPS mode without further configuration.
■ MIGRATE--Specifies FIPS-migration mode, which is used when you
are upgrading an earlier version of SiteMinder to full-FIPS mode. The
Policy Server and the Agents continue to use the existing SiteMinder
encryption algorithms as you migrate your environment to use only
FIPS 140-2 approved algorithms.
■ ONLY--Specifies full-FIPS mode, which requires that the Policy
Server and Web Agents read and write information using only FIPS
140-2 algorithms.
Important! A SiteMinder r12.0 SP2 installation that is running in Full
FIPS mode cannot interoperate with, or be backward compatible to,
earlier versions of SiteMinder, including all agents, custom software
using older versions of the Agent API, and custom software using PM
APIs or any other API that the Policy Server exposes. You must re-link all
such software with the r12.0 SP2 versions of the respective SDKs to
achieve the required support for Full FIPS mode.
If this switch is not used, or you use the switch without specifying a
mode, the default setting is used.
Default: COMPAT
Note: More information on the FIPS Certified Module and the algorithms
being used; the data that is being protected; and the SiteMinder
Cryptographic Boundary exists in the Policy Server Administration
Guide.
-cp cryptographic_provider
(Optional) Indicates the name of the cryptographic provider you are
using for encryption. If you do not specify a value the default is
assumed.