Installing Cloudera Manager server

Install Cloudera Manager server daemons and configure system environment flags to enable FIPS mode alongside SafeLogic cryptographic path variables for Java environments.

Install the Cloudera Manager server.

sudo yum install cloudera-manager-daemons cloudera-manager-agent cloudera-manager-server

Add the following line at the end of the /etc/default/cloudera-scm-server file:

export 
CMF_ADD_TO_CLASSPATH="${CMF_ADD_TO_CLASSPATH}:/opt/cloudera/fips/bcutil-2.0.1.jar"

In Cloudera Manager 7.13.2.1000 and higher versions, the fipsSaslMode can be enabled by appending the following line to the /etc/default/cloudera-scm-server file:
```
export CMF_JAVA_OPTS="${CMF_JAVA_OPTS} -Dcom.cloudera.cmf.fipsSaslMode=true"
```

Update the Cloudera Manager settings by accessing the /etc/default/cloudera-scm-server file and uncomment the following configurations related to FIPS:

# Enable FIPS mode
#
# To enable FIPS mode set the -Dcom.cloudera.cmf.fipsMode to true
#
export CMF_JAVA_OPTS="${CMF_JAVA_OPTS} -Dcom.cloudera.cmf.fipsMode=true"
#
# If JDK version is 11 or higher:
# Uncomment and provide values below to include CCJ with FIPS mode
export CMF_JAVA_OPTS="${CMF_JAVA_OPTS} 
-Dcom.cloudera.cloudera.cmf.fipsMode.jdk11plus.ccj.jar.path=/opt/cloudera/fips/ccj-4.0.0-fips.jar
-Dcom.cloudera.cloudera.cmf.fipsMode.jdk11plus.ccj.moduleName=ccj_module_name"
#
# If JDK version is 11 or higher:
# Uncomment and provide values below to include BCTLS with FIPS mode
export CMF_JAVA_OPTS="${CMF_JAVA_OPTS} 
-Dcom.cloudera.cloudera.cmf.fipsMode.jdk11plus.bctls.jar.path=/opt/cloudera/fips/bctls-2.0.17.1.jar 
-Dcom.cloudera.cloudera.cmf.fipsMode.jdk11plus.bctls.moduleName=bctls_module_name"

The value of the [***MODULENAME***] variable of the ccj and bctls modules depends on how the JAR files are published. If the JAR file has the Automatic Module Name label inside the META-INF/MANIFEST.MF file of the JAR file, use that as the module name. Otherwise, use the name of the JAR file, separated by dots, as the default module name.

For a JAR file named ccj-test-4.0.0.jar, the assigned module name is ccj.test, as the versioning information is not included.

To identify the specific module name, run the following command:

sudo ${JAVA_HOME}/bin/jar --file=/opt/cloudera/fips/ccj-4.0.0-fips.jar --describe-module
No module descriptor found. Derived automatic module.
com.safelogic.cryptocomply.fips.core automatic <---- module Name is com.safelogic.cryptocomply.fips.core

Validate the CCJ and CCS installations