Hi Ramesh,

I hope you are fine.

Sure, regarding your points, these are the responses:

1.   How to check whether we have enabled SSL communication between NA server and Oracle DB 19C, I tried with tc_tools.sh command, but there is no option to check

In order to know if you had SSL with your Oracle DB, you should see the DB cert entry in the trust store for your NA, if you did not have any cert exchange, then you need to start with the certification process, to do it, you can follow the next doc:

Enable TLS in Oracle - Network Automation (microfocus.com)

2.   How to check whether NA is in FIPS mode

To check this after upgrade on Linux, NA uses /dev/urandom as source of randomness. To configure NA to use /dev/random as source of randomness, Configure NA to use /dev/random section in Enable FIPS mode. you can access in the next link:

Enable FIPS mode - Network Automation (microfocus.com)

3.   I understand NA 2022.11 is running with PKCS12 keystore format, is it necessary to migrate from JKS keystore to PKCS12 keystore format after upgrade.

Yes, in NA 2022.11 by default the type store is PKCS12, so there is no need to migrate, to confirm you are in PCKS you can verify with the steps in the next link:

Use certificates - Network Automation (microfocus.com)

I hope this can be useful, any doubts or concerns, feel free to ask.

Regards,

Kevin Bonilla