Enterprise Vault Reporting’s reports fail to open after you enable FIPS compliant algorithms in Windows Local Security Policy

book

Article ID: 100006643

calendar_today

Updated On:

Description

Error Message

When attempting to view a report, the Report Manager shows the following error.

This error (HTTP 500 Internal Server Error) means that the website you are visiting had a server problem which prevented the webpage from displaying

The Report Server also shows following FIPS error.

This implementation is not part of the Windows Platform FIPS validated cryptographic algorithms

 

IMPORTANT: Do not edit this content in Information Manager

Internal Notes

The content of this document is referenced in the Deployment Scanner. Do not make changes to this article. If you would like changes to be made to this content, use the Information Manager feedback feature. Alternatively, you can send e-mail to the owner or the Enterprise Vault Knowledge Management team.


Cause

This is a Microsoft limitation. SQL Server Report Manager fails to load the reports after you enable FIPS compliant algorithms in the Local Security Policy. See the following Microsoft article for more information about the limitation.

http://msdn.microsoft.com/en-us/library/ms345220.aspx

Resolution

Warning: The following workaround configures the use of a FIPS certified implementation of the triple-DES encryption algorithm in place of the default non-FIPS certified implementation of AES encryption algorithm. Since the triple-DES algorithm is theoretically less secure than the AES algorithm this change may increase your security risk. It may also make the computer or the network more vulnerable to attack by malicious users or by malicious software such as virus. Before you proceed, we recommend that you evaluate the risks that are associated with implementing this workaround in your particular environment. If you decide to implement this workaround, take any appropriate additional steps to help protect the system.

Locate the following Web.config files, and edit both of them as described:
The SQL Server Report Manager Web.config file. This file is located in the ReportManager subfolder of the SQL Server Reporting Services installation, for example:
C:\Program Files \Microsoft SQL Server\MSRS10.MSSQLSERVER\Reporting Services\ReportManager\

The SQL Server Report Server Web.config file. This file is located in the ReportServer subfolder of the SQL Server Reporting Services installation, for example:

C:\Program Files\Microsoft SQL Server\MSRS10.MSSQLSERVER\Reporting Services\ReportServer\
1.        In a text editor, open the Web.config file
2.        Locate the section
3.        Add the following section within the section
4.        Save the changes to the file
5.        Open the Enterprise Vault Reporting Reports web page
 

Issue/Introduction

When attempting to view a report, the Report Manager shows the following error.

This error (HTTP 500 Internal Server Error) means that the website you are visiting had a server problem which prevented the webpage from displaying The Report Server also shows following FIPS error.

Additional Information

ETrack: 2553397