High CPU usage in mixed FIPS/non-FIPS environment

When using Workbench in FIPS mode and you connect to the platform of a non-FIPS JACE and open the Platform Administration view, the CPU usage may become very high (90-100%) while the window is open. This causes a slowdown for a number of other operations, including provisioning.

In Niagara 4.6 and later, there is a solution to the described situation. There is an added platform TLS Settings option that allows you to turn off the “Extended Master Secret” requirement on a server. If you are running in a mixed FIPS/non-FIPS environment and are experiencing a slow platform connection, perform the following steps:

On the JACE that is experiencing the high CPU usage, open Platform Administration > Change TLS Settings > Use Extended Master Secretand set this option to “false”.
When prompted to restart the JACE, click OK. This is necessary for the setting change to take effect.

Once this is set to "false" and the platform is restarted, the JACE CPU usage does not change significantly when connecting to the Platform Administration view from a FIPS-mode Workbench.

High CPU usage in mixed FIPS/non-FIPS environment

Related Links