# It is recommended when using FIPS provider that the config_diagnostics option is enabled to prevent accidental use of non-FIPS validated algorithms via broken or mistaken configuration. config_diagnostics = 1 # This implies that main configuration file is openssl_init , which is responsible for loading and configuring FIPS openssl_conf = openssl_init # The include file location above should match the path and name of the FIPS module configuration file that is installed in our case .include "C:/Program Files (x86)/Common Files/Pulse Secure/JUNS/fipsmodule.cnf" #The provider_sect here sepecifies list of providers [openssl_init] providers = provider_sect # The fips_sect section will be used for all cryptographic operations that are compliant with FIPS 140-2. # The base_sect section will be used for all other cryptographic operations [provider_sect] fips = fips_sect base = base_sect [base_sect] activate = 1