[FACT-2065] Add support for FIPS fact on Windows - Puppet Tickets

XML

Word

Printable

Details

Type: New Feature
Status: Resolved
Priority: Normal
Resolution: Fixed
Affects Version/s: None
Fix Version/s: FACT 3.13.5, FACT 3.11.11, FACT 3.14.6
Component/s: None
Labels:
- resolved-issue-added

Template:
customfield_10700 328977
Epic Link:
Add winfips-2012r2-x64 PE support
Team:
Night's Watch
Story Points:
2
Sprint:
NW - 2019-10-30

Release Notes:
New Feature
Release Notes Summary:
This release adds support for the `fips_enabled` fact on Windows. The check examines the contents of `HKEY_LOCAL_MACHINE/System/CurrentControlSet/Control/Lsa/FipsAlgorithmPolicy/Enabled`. If the returned value is 1, it means that FIPS mode is enabled.

QA Risk Assessment:
Needs Assessment

Description

This fact will enable checking for windows platforms running in FIPS mode. It could be used to adjust certain agent or acceptance test behaviors at run time.
Presently this would only return a boolean indicating whether the platform is running in FIPS mode or not. Additional FIPS relevant information may be added in future.

Attachments

Issue Links

blocks

MODULES-10043 Add winfips-2012r2-x64 to the puppet_agent module

Resolved

is blocked by

LTH-168 Get DWORD values from the Windows Registry

Closed

relates to

PUP-10109 Don't assume redhat is only FIPS platform

Resolved

Activity

People

Assignee:: Gabriel Nagy

Reporter:: Dorin Pleava

Votes:: 0 Vote for this issue

Watchers:: 2 Start watching this issue

Dates

Created:: 2019/10/11 5:53 AM

Updated:: 2020/01/14 12:44 PM

Resolved:: 2019/10/21 1:42 AM