SSRS 2008 FIPS error
Hello,
We've installed SQL Server 2008 and Reporting Services 2008 on a Windows Server 2008 Enterprise box. I could initiallyaccess the Report Server at the default URL, but when I attempted to access the Report Manager, I got a 500 Internal Server Error message. When I looked in the RS logs I found the following:
ui!ReportManager_0-2!a34!01/30/2009-11:08:40:: e ERROR: This implementation is not part of the Windows Platform FIPS validated cryptographic algorithms.ui!ReportManager_0-2!a34!01/30/2009-11:08:40:: e ERROR: HTTP Status Code --> 500-------Details-------System.InvalidOperationException: This implementation is not part of the Windows Platform FIPS validated cryptographic algorithms.at System.Security.Cryptography.RijndaelManaged..ctor()
Once I disabled FIPS compliancy on the server, the issue disappeared and I had full access to the Report Manager. Unfortunately,for this particular project,FIPS compliancy is required, so I need a way to run the manager with FIPS enabled.
I've looked into this elsewhere and found out that a fix was released for the same issue in SQL Server 2005 Reporting Services. Is there a fix or workaround for 2008 yet?Has anyone else come across this problem?
Thanks in advance for any suggestions.
RLG
January 30th, 2009 12:38pm
Hi RLG,
To work around this problem, change the configuration in the Report Manager Web.config file. Specify that ASP.NET use the Triple Data Encryption Standard (3DES) algorithm to process view state data. To do this, follow these steps:
In a text editor such as Notepad, open the Report Manager Web.config file which is located in the default path: <driver>:\Program Files\Microsoft SQL Server\MSRS10.MSSQLSERVER\Reporting Services\ReportManager.
In the Web.config file, locate the <system.web> section.
Add the following <machineKey> section to in the <system.web> section: <machineKey validationKey="AutoGenerate,IsolateApps" decryptionKey="AutoGenerate,IsolateApps" validation="3DES" decryption="3DES"/>
Save the Web.config file.
If you have any more questions, please let me know.Thanks.
***Xiao Min Tan***Microsoft Online Community***
Free Windows Admin Tool Kit Click here and download it now
February 3rd, 2009 2:24am
Thanks for your help, that solved the problem!RLG
February 6th, 2009 12:58pm
Xiao,
We forced FIPS algorithms the other day in our environment and it tanked a bunch of SSRS servers. This fixed the problem. Thanks!
Free Windows Admin Tool Kit Click here and download it now
June 13th, 2012 4:48pm
Hello Xiao,
This solution has fixed two seperate problem deployments of SSRS 2008 for me! Needless to say I have the forum post bookmarked now. Thanks for the fix!
D Stokes
October 28th, 2012 1:14pm