<div>
Advice given for consideration
</div>


<div>
<div class="content wysiwyg-content">
Hey guys.<br />
<br />
So I understand the security setting in the policy and that generally the advice is &quot;Turn off FIPS encryption&quot;. I know that the symptom is that you send a MSRA request to a client on your domain and the remote assist launches on the reciepent client PC but they never get asked to accept the session and it seems the request dies during the handshake.<br />
<br />
At the moment one work around I am using is remoting into another machine w/o FIPS enabled in the GPO; but this is a work around and will not last. Sadly my searches never yielded a good guide to what to configure to use FIPS encryption. Thats what I am looking for.<br />
<br />
I have complete admin control over the sender and reciepient. I can also talk to my AD guys if there are trweaks that we might need to do at the network level; but I assuming we can probably avoid needing their involvment. We are running Windows 10 Workstations with a few 7 Enterprise machines sprinkled in.<br />
<br />
Advice/help?
</div>
</div>


Hey guys.

So I understand the security setting in the policy and that generally the advice is "Turn off FIPS encryption". I know that the symptom is that you send a MSRA request to a client on your domain and the remote assist launches on the reciepent client PC but they never get asked to accept the session and it seems the request dies during the handshake.

At the moment one work around I am using is remoting into another machine w/o FIPS enabled in the GPO; but this is a work around and will not last. Sadly my searches never yielded a good guide to what to configure to use FIPS encryption. Thats what I am looking for.

I have complete admin control over the sender and reciepient. I can also talk to my AD guys if there are trweaks that we might need to do at the network level; but I assuming we can probably avoid needing their involvment. We are running Windows 10 Workstations with a few 7 Enterprise machines sprinkled in.

Advice/help?

Did anyone ever figure out how to use MSRA with FIPS compliant encryption turned on?

Encryption is the process of encoding messages or information in such a way that only authorized parties can read it. In an encryption scheme, the intended communication information or message, referred to as plaintext, is encrypted using an encryption algorithm, generating ciphertext that can only be read if decrypted. For technical reasons, an encryption scheme usually uses a pseudo-random encryption key generated by an algorithm. An authorized recipient can easily decrypt the message with the key provided by the originator to recipients, but not to unauthorized interceptors.

Encryption

A personal computer is a general-purpose computer whose size, capabilities and price make it useful for individuals, and is intended to be operated directly by an end-user with no intervening computer time-sharing models that allowed systems to be used by many people, usually at the same time. Personal computers may be connected to a local area network (LAN), either by a cable or a wireless connection, and through that to the Internet. A personal computer may be a laptop computer or a desktop computer running an operating system such as Windows, Linux or Macintosh OS.

Security is the protection of information systems from theft or damage to the hardware, the software, and the information on them, as well as from disruption or misdirection of the services they provide. The main goal of security is protecting assets, and an asset is anything of value and worthy of protection.  Information Security is a discipline of protecting information assets from threats through safeguards to achieve the objectives of confidentiality, integrity, and availability or CIA for short. On the other hand, disclosure, alteration, and disruption (DAD) compromise the security objectives.