Data Factory FIPS Issue

Stargazer 1 Reputation point

Using a self-hosted IR, when I try to copy data from source: salesforce to sink: container in ADLS Gen 2, I encounter the following error - Failure happened on 'Sink' side. ErrorCode=UserErrorFailedFileOperation,'Type=Microsoft.DataTransfer.Common.Shared.HybridDeliveryException,Message=Upload file failed at path <destination>,Source=Microsoft.DataTransfer.Common,''Type=System.Reflection.TargetInvocationException,Message=Exception has been thrown by the target of an invocation.,Source=mscorlib,''Type=System.InvalidOperationException,Message=This implementation is not part of the Windows Platform FIPS validated cryptographic algorithms.,Source=mscorlib,' I'm aware of the FIPS issue and resolution proposed here - but don't want to bypass FIPS

Azure Data Factory
Azure Data Factory
An Azure service for ingesting, preparing, and transforming data at scale.
7,140 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. KranthiPakala-MSFT 38,602 Reputation points Microsoft Employee

    Hi @Stargazer ,

    Welcome to Microsoft Q&A and thanks for your query.

    Please refer to this MS doc: Considerations for using a self-hosted IR

    Tasks might fail in a self-hosted integration runtime that you installed on a Windows server for which FIPS-compliant encryption is enabled. To work around this problem, you have two options:

    1. Store credentials/secret values in an Azure Key Vault or
    2. Disable FIPS-compliant encryption on the server. To disable FIPS-compliant encryption, change the following registry subkey's value from 1 (enabled) to 0 (disabled): HKLM\System\CurrentControlSet\Control\Lsa\FIPSAlgorithmPolicy\Enabled.

    Incase if you use the self-hosted integration runtime as a proxy for SSIS integration runtime, FIPS-compliant encryption can be enabled and will be used when moving data from on premises to Azure Blob Storage as a staging area.

    Hope this info helps.


    Thank you
    Please do consider to click on "Accept Answer" and "Upvote" on the post that helps you, as it can be beneficial to other community members.

    1 person found this answer helpful.