Quantcast
Channel: Cracking the Vault
Viewing all articles
Browse latest Browse all 167

Vault does not support FIPS

$
0
0

FIPS (Federal Information Processing Standard) is a standard for computer system cryptography.
The framework includes best practices for encryption compliance and can be enabled within Windows Systems.

Nevertheless Vault does not Support this option.

You can check it in the Registry under:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy

Enabled needs to be set to 0.
Please check also with IT if they do not set this setting via Group Policy, because then it would be reset at the next reboot and you will be puzzled why Vault is not working as expected.

 

Example where FIPS does prevent Vault from working properly:

Vault Workgroup Client was working as expected (on a different machine)
The login error from Vault Office thick client was "failed to acquire a license"
Licenses were all fine and installed on the same server.

Thin Client error was:
"The type initializer for 'DataManagement.Application.Web.VaultUtils.SecurityUtils' threw an exception" when using read only check box.


Unchecking read only checkbox gets you a 500 Page "Server Error in /AutodeskTC Application
with error message:
"This Implementation is not part of the Windows Platform FIPS validated cryptographic algorithms"

Fips

 

After disabling FIPS with method above it was working fine.


Viewing all articles
Browse latest Browse all 167

Trending Articles