NSS has the stealth feature of letting one use only FIPS validated algorithms. PSM2 should allow users to enable FIPS mode just like PSM1 used to.
mcgreer: Please review this code (since it's all in your original code)
Fix checked in. User can now enable/disable FIPS from the token manager.