Issue with package encryption/compression


Author
Message
Alan Jones
Alan Jones
StrataFrame Beginner (13 reputation)StrataFrame Beginner (13 reputation)StrataFrame Beginner (13 reputation)StrataFrame Beginner (13 reputation)StrataFrame Beginner (13 reputation)StrataFrame Beginner (13 reputation)StrataFrame Beginner (13 reputation)StrataFrame Beginner (13 reputation)StrataFrame Beginner (13 reputation)
Group: StrataFrame Users
Posts: 7, Visits: 32
Guys,
In our installation we've run into an issue on deploying data to machines with a specific local security policy. 

The policy:
System cryptography: Use FIPS compliant algorithms for encryption, hashing and signing

When I enable this policy on my machine, I am unable to open any of our package files (no encryption) because of the compression being used. 
Get the generic message:
PackageIt has encountered a problem and needs to close.  We are sorry for the inconvenience.

Our installation will be for government machines, many of which will likely have this option set.  Programmatically we can turn off this setting IF local policy allows it, but there is a very real chance this won't be the case. 

Are there any settings you have within the DDT or PackageIt! that you can change to make the data packages FIPS compliant?

I've attached an overview of the policy if it helps.

Attachments
FIPS Algorithm Overview.txt (140 views, 1.00 KB)
Replies
Kenneth Langley
Kenneth Langley
StrataFrame Beginner (40 reputation)StrataFrame Beginner (40 reputation)StrataFrame Beginner (40 reputation)StrataFrame Beginner (40 reputation)StrataFrame Beginner (40 reputation)StrataFrame Beginner (40 reputation)StrataFrame Beginner (40 reputation)StrataFrame Beginner (40 reputation)StrataFrame Beginner (40 reputation)
Group: StrataFrame Users
Posts: 26, Visits: 1.5K
Trent,

This setting is a DISA (Defense Information Systems Agency) setting that will be implemented on all DOD (Department of Defense) servers and workstations in the near future. We have a disk from DISA that gives us all the security settings that will be changed on XP and Vista operating systems in the very near future (rollout has started). This will be affecting all of us who develop software for DOD customers.

The registry key setting is disabled on default installations of the OSs. The DISA disk will flip this setting to enabled. This changes the encryption type from RSA to 3DES I believe. When changing this a lot of items stop functioning correctly, even parts of the OS itself.

If you set this registry setting to enable(1) on your workstation and try to run the DDT application you will get the message that your software is not activated. If you switch this back to disabled(0), things are well again.

We will all be facing this issue very soon with all DOD customers. Could you please do more research and help us determine what we will have to change to get the SF based applications to function correctly with these settings.

I have other security settings that will have an effect on DOD customers but they are too many to talk about in this post. One other example: DOD is not going to allow any application to execute from the users TEMP folder to prevent any unwanted application executions. This may affect installation programs and data deployment routines from working.

Thanks in Advance

Trent Taylor
Trent Taylor
StrataFrame Developer (8.7K reputation)StrataFrame Developer (8.7K reputation)StrataFrame Developer (8.7K reputation)StrataFrame Developer (8.7K reputation)StrataFrame Developer (8.7K reputation)StrataFrame Developer (8.7K reputation)StrataFrame Developer (8.7K reputation)StrataFrame Developer (8.7K reputation)StrataFrame Developer (8.7K reputation)
Group: StrataFrame Developers
Posts: 6.6K, Visits: 6.9K
We will look into this...however, cursory glances indicate that there could be very little that we can do. We have already reproduced this in house, but there are some inherent issues with this security policy that exceed the control that we have over the OS and .NET in general. Again, this effects more than the DDT, it effects virtually all .NET applications. We will be looking into this.
GO

Merge Selected

Merge into selected topic...



Merge into merge target...



Merge into a specific topic ID...





Similar Topics

Reading This Topic

Login

Explore
Messages
Mentions
Search