Note that there are some explanatory texts on larger screens.

plurals
  1. PO
    primarykey
    data
    text
    <p>Source: <a href="http://blogs.msdn.com/b/shawnfa/archive/2008/03/14/disabling-the-fips-algorithm-check.aspx" rel="nofollow noreferrer">http://blogs.msdn.com/b/shawnfa/archive/2008/03/14/disabling-the-fips-algorithm-check.aspx</a></p> <p>You could add the following to your web.config or machine config so your ASP.Net applications will stop failing due to the FIPs compliance checks.</p> <pre><code>&lt;configuration&gt; &lt;runtime&gt; &lt;enforceFIPSPolicy enabled="false"/&gt; &lt;/runtime&gt; </code></pre> <p></p> <p>Your machine.config can be found here: \Microsoft.NET\Framework\\config\machine.config</p> <p>If you change your machine.config, an iisreset may be required for the settings to take effect. Note: changing your maching.config will effect all .NET applications on the system.</p> <hr> <p>To get your application to be FIPs compliant without having to disable FIPs, you can try the following:</p> <p>1) Configure your machine key to use 3DES for decryption and SHA1 for validation.</p> <p>EDIT (2018-04-05): The new IIS8.5 STIG says you should set your Machine Key settings to Validation: HMACSHA256, Encryption: Auto.</p> <pre><code>&lt;configuration&gt; &lt;system.web&gt; &lt;authentication mode="Windows" /&gt; &lt;machineKey decryption="3DES" decryptionKey="AutoGenerate,IsolateApps" validation="SHA1" validationKey="AutoGenerate,IsolateApps" /&gt; &lt;/system.web&gt; &lt;/configuration&gt; </code></pre> <p>NOTE: if you are using a web farm environment, you can use IIS GUI and go to the Machine Keys configuration section to generate a set of keys and use the same keys across your web farm.</p> <p>2) Ensure that your compilation debug="false", and all page directives have debug="false". Setting debug to true will also kick off the FIPs compliance check.</p>
    singulars
    1. This table or related slice is empty.
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. VO
      singulars
      1. This table or related slice is empty.
    1. This table or related slice is empty.
 

Querying!

 
Guidance

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload