SharePoint 2016 Configuration Failed: This implementation is not part of the Windows Platform FIPS validated cryptographic algorithms.

Question

SharePoint 2016 Configuration Failed: This implementation is not part of the Windows Platform FIPS validated cryptographic algorithms.

adil 1,431

Hi,I Prepared new SharePoint 2016 Test Server and when i run Configuration wizard in Updating SharePoint step it throws the following error:

This implementation is not part of the Windows Platform FIPS validated cryptographic algorithms.
anyone has idea how to fix this issue and for SharePoint Server is below Security policy required to be enabled or disable? i checked in server it was Enable.
security policy 'System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing'

Accepted answer

1 additional answer

Your answer

Answer 1

trevorseward 11,711

FIPS must be disabled. SharePoint uses MD5 internally for fast hashing, but it does not use it for security purposes as MD5 is insecure.

See https://learn.microsoft.com/en-us/sharepoint/security-for-sharepoint-server/federal-information-processing-standard-security-standards.

adil 1,431 Reputation points

2020-12-31T07:26:51.197+00:00

Hi Trevor thanks for your reply, as you said MDF is insecure ,if we disable for SharePoint Server is it not impact for Windows Server2019 Security or it cause any security vulnerability?
trevorseward 11,711 Reputation points

2020-12-31T19:32:39.977+00:00

With FIPS disabled, which is required for SharePoint Server, Windows will be able to leverage MD5 hash and any other insecure mechanism that FIPS disables.

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/system-cryptography-use-fips-compliant-algorithms-for-encryption-hashing-and-signing

Also see https://techcommunity.microsoft.com/t5/microsoft-security-baselines/why-we-8217-re-not-recommending-8220-fips-mode-8221-anymore/ba-p/701037
JoyZ 18,111 Reputation points

2021-01-04T01:08:45.633+00:00

Hi @adil ,

If you find any answer helpful to you, please remember to accept it as answer.

Thank you for your understanding.

Answer 2

Hi @adil ,

As trevor said, disable FIPS group policy then run PS Config again, here are steps to disable the group policy:

Open Local Group Policy Editor (gpedit.msc).
Click Computer Configuration> Windows Settings> Security Settings> Local Policies>Security Options.
Scroll to 'System cryptography: Use FIPS compliant algorithms for encryption, hashing and signing' (this should not be enabled).
Ensure the policy is DISABLED.
Repeat on all Windows servers in your FARM which are affected.
Perform IIS RESET.
Verify the setting and ensure the policy is disabled.

If an Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Share via

SharePoint 2016 Configuration Failed: This implementation is not part of the Windows Platform FIPS validated cryptographic algorithms.

1 additional answer

Your answer