FIPS 140: Security Requirements for Cryptographic Modules


FIPS Mode must be enabled at Windows OS level to comply Fips140-2: This Federal Information Processing Standard (140-2) specifies the security requirements that will be satisfied by a cryptographic module, providing four increasing, qualitative levels intended to cover a wide range of potential applications and environments. The areas covered, related to the secure design and implementation of a cryptographic module, include specification; ports and interfaces; roles, services, and authentication; finite state model; physical security; operational environment; cryptographic key management; electromagnetic interference/electromagnetic compatibility (EMI/EMC); self-tests; design assurance; and mitigation of other attacks.


Enable FIPS 140-2 Mode in Windows by GPO or Registry.

Computer Configuration
|_ Windows Setting
|_ Security Settings
|_ Local Policies
|_ Security Options
|_ System cryptography: Use Fips complianace... -> Set to Enabled

Set HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy\
Enabled -> Set to 1.


NIST 800-171: 3.13.7, 3.13.8, 3.13.11