Symptom
On a client computer, using the LS Client Update service, the following FIPS error is generated during the download of the update package from the application server:
“An error occurred while downloading the file from the LS Client Update server: This implementation is not part of the Windows Platform FIPS validated cryptographic algorithms. When the download is resumed, it will start where it left off. Do you want to retry now?”
Resolution
- Disable “Local Security Setting System cryptography: Use FIPS compliant algorithms for encryption, hashing and signing”.
- From Administrative Tools, select Local Security Policy > Local Policies > Security Options.
- Scroll to the “System cryptography: Use FIPS compliant algorithms for encryption, hashing and signing" policy.
- Right-click on it, select Properties, and then select Disabled.
- Open RegEdit.
- Browse to the following path: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\fipsalgorithmpolicy.
- Make note of the current value as it will need to be restored after the update is complete.
- Set the subkey to 0.
- After the client update is completed, revert the above settings back to their previous values.
Applies To
OnGuard (All versions)
Additional Information
None
