-
Título
Error during AD sync: "This implementation is not part of the Windows Platform FIPS" -
Descrição
When attempting to perform an Active Directory synchronization the following error is seen:
"[1777202] Error compiling schema (Active Directory Service (Root DN dc=,dc=,dc=, Server))!
[System.Reflection.TargetInvocationException] Exception has been thrown by the target of an invocation.
[System.InvalidOperationException] This implementation is not part of the Windows Platform FIPS validated cryptographic algorithms." -
Causa
The local security policy on the job server is set to use FIPS validated cryptography but the Identity Manager database being used for the synchronization is not encrypted. -
Resolução
On the job server check whether the policy "System cryptography: Use FIPS compliant algorithms for encryption, hashing and signing" is enabled. It can be found under Administrative Tools > Local Security Policy > Local Policies > Security Options.
If the option is selected, the Identity Manager database must be encrypted using a form of encryption that is FIPS compliant.
Alternately, the local security policy can be turned off if the database is not going to be encrypted.