Data Factory FIPS Issue

Question

Using a self-hosted IR, when I try to copy data from source: salesforce to sink: container in ADLS Gen 2, I encounter the following error - Failure happened on 'Sink' side. ErrorCode=UserErrorFailedFileOperation,'Type=Microsoft.DataTransfer.Common.Shared.HybridDeliveryException,Message=Upload file failed at path <destination>,Source=Microsoft.DataTransfer.Common,''Type=System.Reflection.TargetInvocationException,Message=Exception has been thrown by the target of an invocation.,Source=mscorlib,''Type=System.InvalidOperationException,Message=This implementation is not part of the Windows Platform FIPS validated cryptographic algorithms.,Source=mscorlib,' I'm aware of the FIPS issue and resolution proposed here - https://learn.microsoft.com/en-us/azure/data-factory/connector-troubleshoot-guide#fips-issue but don't want to bypass FIPS

Answer 1

Hi @Stargazer ,

Welcome to Microsoft Q&A and thanks for your query.

Please refer to this MS doc: Considerations for using a self-hosted IR

Tasks might fail in a self-hosted integration runtime that you installed on a Windows server for which FIPS-compliant encryption is enabled. To work around this problem, you have two options:

1. Store credentials/secret values in an Azure Key Vault or
2. Disable FIPS-compliant encryption on the server. To disable FIPS-compliant encryption, change the following registry subkey's value from 1 (enabled) to 0 (disabled): HKLM\System\CurrentControlSet\Control\Lsa\FIPSAlgorithmPolicy\Enabled.

Incase if you use the self-hosted integration runtime as a proxy for SSIS integration runtime, FIPS-compliant encryption can be enabled and will be used when moving data from on premises to Azure Blob Storage as a staging area.

Hope this info helps.

----------

Thank you
Please do consider to click on "Accept Answer" and "Upvote" on the post that helps you, as it can be beneficial to other community members.