QID 45567

Date Published: 2023-03-21

QID 45567: Microsoft Windows Status of FIPS Algorithm Policy

The Federal Information Processing Standard (FIPS) 140 is a security implementation that is designed for certifying cryptographic software. Windows implements these certified algorithms to meet the requirements and standards for cryptographic modules for use by departments and agencies of the United States federal government. The Federal Information Processing Standard (FIPS) Publication 140-2 is a U.S. government standard. FIPS is based on Section 5131 of the Information Technology Management Reform Act of 1996. It defines the minimum security requirements for cryptographic modules in IT products.

QID Detection Logic (Authenticated):
This QID checks for the presence of the registry key HKLM\SYSTEM\CurrentControlSet\Control\Lsa\FIPSAlgorithmPolicy, and enumerates all the values present under this.
Note: If the "Enabled" value is set to 1, then it states that FIPS Algorithm Policy is enabled, and the value 0 states that FIPS Algorithm Policy is not enabled.
The QID also gets reported if the Registry Key "HKLM\SYSTEM\CurrentControlSet\Control\Lsa\FIPSAlgorithmPolicy" is missing on the host.

N/A

Solution

Customers are advised to refer to FipsAlgorithmPolicy for further details pertaining to this.

Vendor References

FipsAlgorithmPolicy - learn.microsoft.com/en-US/windows/security/threat-protection/fips-140-validation

CVEs related to QID 45567

Software Advisories

Advisory ID	Software	Component	Link

By selecting these links, you may be leaving CVEreport webspace. We have provided these links to other websites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other websites that are more appropriate for your purpose. CVEreport does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, CVEreport does not endorse any commercial products that may be mentioned on these sites. Please address comments about any linked pages to [email protected].