SUPPORT / SAMPLES & SAS NOTES
 

Support

Problem Note 61795: Certain SAS® web applications might stop responding during invocation in SAS® 9.4 TS1M5 deployments when FIPS encryption is enabled

DetailsHotfixAboutRate It

In SAS 9.4 TS1M5 deployments that have Federal Information Processing Standards (FIPS) enabled, some SAS web applications (for example, SAS® Studio) might stop responding during invocation. This problem can affect SAS 9.4 TS1M0 and later maintenance releases if you have applied SAS® Web Server hot fixes. 

This issue might occur when FIPS mode is enabled for instances of SAS® Web Application Server. To determine whether FIPS mode is enabled for instances of SAS Web Application Server, view the server.xml file that is located in the SAS-configuration-directory/Web/WebAppServer/SASServerN/conf directory. In this path, SASServerN specifies the instance of SAS Web Application Server that you have installed (for example, SASServer1_1, SASServer2_1, and so on).

If FIPS mode is enabled, you should see a <Listener> tag similar to the following in the server.xml file:

<Listener SSLEngine="on" className="org.apache.catalina.core.AprLifecycleListener" FIPSMode="on"/>

To work around this problem, you need to disable FIPS mode, as follows:

  1. Stop all instances of SAS Web Application Server.
  2. Make backup copies of the server.xml files for all instances of SAS Web Application Server.
  3. In the original server.xml file (one for each instance of SAS Web Application Server that you have installed), remove the FIPSMode="on" parameter. After this change, the <Listener> tag should look like the following example:
<Listener SSLEngine="on" className="org.apache.catalina.core.AprLifecycleListener" />
  1. Restart all instances of SAS Web Application Server.  

Click the Hot Fix tab in this note to access the hot fix for this issue.



Operating System and Release Information

Product FamilyProductSystemProduct ReleaseSAS Release
ReportedFixed*ReportedFixed*
SAS SystemSAS Web Application ServerMicrosoft® Windows® for x649.439.4 TS1M4
64-bit Enabled AIX9.439.4 TS1M4
64-bit Enabled Solaris9.439.4 TS1M4
HP-UX IPF9.439.4 TS1M4
Linux for x649.439.4 TS1M4
Solaris for x649.439.4 TS1M4
* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.