Use FIPS compliant algorithms for encryption

The Federal Information Processing Standard (FIPS) 140-1 is a security implementation designed for certifying cryptographic software. FIPS 140-1 validated software is required by the U.S. Government and requested by other prominent institutions.

This Tweak determines if the Transport Layer Security/Secure Sockets Layer (TL/SS) Security Provider supports only the TLS_RSA_WITH_3DES_EDE_CBC_SHA cipher suite. In effect, this means that the provider only supports the Transport Layer Security (TLS) protocol as a client and as a server (if applicable). It uses only the Triple DES encryption algorithm for the TLS traffic encryption, only the Rivest, Shamir, and Adleman (RSA) public key algorithm for the TLS key exchange and authentication, and only the Secure Hashing Algorithm 1 (SHA-1) for the TLS hashing requirements.
 

Steps for applying this Tweak

• Open your Registry
• Go to HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa
• Create or modify is exists dword value called "FIPSAlgorithmPolicy"
• Set value as 0 to disable this tweak Or 1 to enable this tweak
• restart windows for setting to take effect.