Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

FIPS is not support with Team Foundation Server 2010


Symptoms

FIPS or United States Federal Information Processing Standard is a secuirty policy that can be enabled or disabled on Micrsoft Operating Systems. This setting is disbaled by default.

This security setting affects the following registry value in Windows Server 2008 and in Windows Vista: HKLM\System\CurrentControlSet\Control\Lsa\FIPSAlgorithmPolicy\Enabled

This registry value reflects the current FIPS setting. If this setting is enabled, the value is 1. If this setting is disabled, the value is 0.

This security setting affects the following registry value in Windows Server 2003 and in Windows XP: HKLM\System\CurrentControlSet\Control\Lsa\FIPSAlgorithmPolicy

This registry value reflects the current FIPS setting. If this setting is enabled, the value is 1. If this setting is disabled, the value is 0.


On machines which have FIPS enabled, TeamFoundation Server configuration wizards(Basic, Single, Advanced, Upgrade and Application Tier Only), servicing and operations will fail with the following error:


Exception Message: This implementation is not part of the Windows Platform FIPS validated cryptographic algorithms. (type InvalidOperationException)

Exception Stack Trace: at System.Security.Cryptography.MD5CryptoServiceProvider..ctor()

[Error @02:26:02.462] TF255248: The process applying the configuration must be terminated due to an error.

[Error @02:26:02.467] TF255247: An error occurred while applying the following configuration: Microsoft.TeamFoundation.Admin.ConfigurationApplyException: TF255136: The data for applying the service pack or critical update could not be added to the server. (Exception has been thrown by the target of an invocation.) ---> System.Reflection.TargetInvocationException: Exception has been thrown by the target of an invocation. ---> System.InvalidOperationException: This implementation is not part of the Windows Platform FIPS validated cryptographic algorithms.

at System.Security.Cryptography.MD5CryptoServiceProvider..ctor()

↑ Back to the top


Cause

FIPS is not supported by Team Foundation Server 2010 and its previous releases.

↑ Back to the top


Resolution

To resolve this issue perform either of the following steps:

#1 On Windows Server 2008 and in Windows Vista set the registry value for HKLM\System\CurrentControlSet\Control\Lsa\FIPSAlgorithmPolicy\Enabled to 0.
On Windows Server 2003 and in Windows XP set the registry value for HKLM\System\CurrentControlSet\Control\Lsa\FIPSAlgorithmPolicy to 0.
You will need to restart the machine for this setting to take effect.

#2 Launch Local Security Policy from Control Panel->Administrative Tools. Expand Security Settings->Local Policies->Security Options. Open the security policy "System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing" and select the Disabled option. Retstart the machine.





↑ Back to the top


Keywords: kb

↑ Back to the top

Article Info
Article ID : 2550971
Revision : 1
Created on : 1/7/2017
Published on : 5/12/2011
Exists online : False
Views : 382