-
Title
Error "This implementation is not part of the Windows Platform FIPS validated cryptographic algorithms." -
Description
After adding an Migration Agent for Exchange (MAGE) Agent Host to the Project, the Agents do not start, with the error "Waiting for agent settings: Not found". When you go to Open Project Wizard, and click through, it fails trying to update the SCP for the newly-deployed MAGE Agent Host. The error in the EMWMigration.log file is as follows:
"Error System.InvalidOperationException: This implementation is not part of the Windows Platform FIPS validated cryptographic algorithms"
In order to get through this error, you have to terminate Migration Manager for Active Directory (MMAD) through Task Manager.
-
Cause
FIPS Encryption is enabled in the Local Security Policy on the MMAD Console Server. -
Resolution
Disable FIPS Encryption in the Local Security Policy and / or the Registry.
Through Local Security Policy:
Under the "Local Policies" heading, select "Security Options" and look for the entry, "System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing." If this entry is enabled, disable it.
Through the Registry:
Set the following Key to 0:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\fipsalgorithmpolicy
Restart the MMAD Console Server.
Verify it worked by going through the Open Project Wizard, and ensuring it completes successfully.
-
Additional Information
For MMEX, FIPS does not need to be disabled on any Exchange servers. But it does need to be disabled on all Quest servers (console + agent hosts).