The system must be configured to use FIPS-compliant algorithms for encryption, hashing, and signing.

Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The system must be configured to use FIPS-compliant algorithms for encryption, hashing, and signing.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-3383	WN12-SO-000074	SV-52896r1_rule	ECCT-1 ECCT-2	Medium

Description
This setting ensures that the system uses algorithms that are FIPS-compliant for encryption, hashing, and signing. FIPS-compliant algorithms meet specific standards established by the U.S. Government and must be the algorithms used for all OS encryption functions.

STIG	Date
Windows Server 2012 / 2012 R2 Domain Controller Security Technical Implementation Guide	2014-07-09

Details

Check Text ( None )
None

Fix Text (F-45822r1_fix)
Configure the policy value for Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options -> "System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing" to "Enabled".