Install FIPS to remote AX-3.8 hosts

Do the following to install the FIPS distribution to remote AX-3.8 hosts (typically JACEs).

Prerequisite: Have the FIPS distribution file in Workbench. See Make FIPS available to Workbench.

Installing FIPS to a remote AX-3.8 host (e.g. JACE)

Using AX-3.8 Workbench, open a platform connection to the remote host.
If you have purchased a FIPS license upgrade for this host, but not installed it yet, you can do that now in this same platform session (before installing the FIPS distribution).

If the license is already installed, or you wish to do this later, go to Step 4.
Go to the platform License Manager view for the remote host, and install the updated license.
Answer “No” when the Licensing Complete dialog appears asking to “Reboot now?” The necessary reboot happens automatically later, after you complete the next steps.
Go to the platform Distribution File Installer view for the remote host.

Click the Choose Directory button at the bottom of the view.
In the Change Directory dialog, navigate to and expand your niagaraHome/sw folder.

Select the niagaraHome/sw/8.0 folder.
In the Distribution File Installer, select the entrust-fips-generic.dist file, then click Install.

As shown above, a confirmation popup appears. Click Finish to start the installation.

An Installing Distribution popup shows you the installation progress, where the host reboots when installation is complete. Click Close.

Any station started after the reboot will be running in FIPS mode. See About a station in FIPS mode.
As for any AX-3.8 station, if browser client access is needed using “Web Workbench” (wbApplet), any browser client PC needs Java “Unlimited Strength Policy Files” installed for this to work. For related details, see “Additional client-side Java installation steps” in the NiagaraAX 2013 Security Updates document.