Datto RMM: FIPS Compliance

Follow

Topic

This article discusses Datto RMM and FIPS compliance. 

Description

Federal Information Processing Standards (FIPS) are a set of data handling guidelines published by the United States government for non-military government agencies and government contractors to follow.

FIPS compliance status

Datto RMM does not conform to FIPS. Our servers are not configured to handle the required encryption algorithms. Agent connectivity is affected. Devices may appear online and return audit data, but other functions are not accessible. This includes, but may not be limited to, component downloads, remote takeover and file browser functions.

Devices that are configured for FIPS should not run Datto RMM and are not supported. There is a check built into the Datto RMM Health Check tool that looks to see if a device is configured for FIPS.

A common error seen in log.txt when running a job on a device with FIPS enabled is below:

2018-10-25 11:32:49.2478 WARN (SoftwareJobWorker-40) - Could not download package 609d1778-444c-4d3b-af5f-c2815cb48dab System.Reflection.TargetInvocationException: Exception has been thrown by the target of an invocation. ---> System.InvalidOperationException: This implementation is not part of the Windows Platform FIPS validated cryptographic algorithms.
at System.Security.Cryptography.MD5CryptoServiceProvider..ctor()
-- End of inner exception stack trace ---
at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor)
at System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
at System.Security.Cryptography.CryptoConfig.CreateFromName(String name, Object[] args)
at System.Security.Cryptography.MD5.Create()
at CentraStage.Cag.Core.Agent.SoftwareJobWorker.VerifyAndExtractToFolder(String fileName, String destinationDir, SoftwareJobComponent comp)
at CentraStage.Cag.Core.Agent.SoftwareJobWorker.Execute(SoftwareJobComponent comp, Boolean downloadOnly, Boolean allowCache, Int32 downloadTimeOutMinutes)

Additional References


Was this article helpful?

0 out of 0 found this helpful

You must sign in before voting on this article.

Want to talk about it? Have a feature request?

Head on over to our Community Forum or get live help.

For more Business Management resources, see the Datto RMM Online Help and the Autotask PSA Online Help .

Datto Homepage