Running the agent with FIPS enabled – Server Density

If you have FIPS enabled on your Windows server you may see the error below. This is due to the fact that the agent creates an MD5 hash of the payload so that the payload can be error checked once received at Server Density.

Typically you'll see an error similar to:

System.InvalidOperationException: This implementation is not part of the Windows Platform FIPS validated cryptographic algorithms.
 at System.Security.Cryptography.MD5CryptoServiceProvider..ctor()
 at BoxedIce.ServerDensity.Agent.PayloadPoster.MD5Hash(String input)
 at BoxedIce.ServerDensity.Agent.PayloadPoster.Post()
 at BoxedIce.ServerDensity.Agent.Agent.DoChecks()

This can be resolved by adding the following to your BoxedIce.ServerDensity.Agent.WindowsService.exe.config file, which can be located in your agent install directory

    <runtime>
        <enforceFIPSPolicy enabled="false"/>
    </runtime>

Ensure that the above is added as a child of the configuration element. Then simply restart your agent.

Note that if you enable debug mode for the agent then you need to also add the above to your BoxedIce.ServerDensity.Agent.exe.config file, to allow the agent to run.

Comments