ASPX pages do not work due to FIPS 140 security policy

I work on a government site and I have some problems with my local security policy interfering with my web application. There is a setting called “System cryptography: use cryptographic algorithms compatible with FIPS 140, including encryption, hashing and signature algorithms,” which are enabled on my server.

Since this was turned on, most of my aspx pages return the error "This implementation is not part of the cryptographic algorithms tested by the FIPS Windows Platform." These pages do not have access to any cryptographic methods. They interact with another database server, but that is it.

My problem is similar to that described here. However, I have no way to disable this FIPS security setting.

I am using .NET 4.0, IIS 7.0, and Windows Server 2008 R2, if that matters. Has anyone encountered this problem before?

Update

Unfortunately, fixing a key element of a machine to use a FIPS-compatible algorithm did not completely solve my problem. I am still getting error on many of my pages.

I found two fixes that may be related. I will try to install them and see what happens.

+3
source share
1 answer

Microsoft: KB 811833 - " : , FIPS , ." .. :

Microsoft.NET Framework Microsoft ASP.NET, NIST FIPS 140. , , , , FIPS. "CryptoServiceProvider" "Cng". , , "", InvalidOperationException . , , FIPS, MD5, InvalidOperationException.

ASP.NET , FIPS. , ASP.NET, . machineKey Element , .

MSDN 3DES ... machineKey, , AES ( ASP.NET 4.0) " (FIPS)".

, debug="true" web.config .

+2

Source: https://habr.com/ru/post/1613720/


All Articles