Run in FIPS compliant mode
Jump to overview

Policy overview

Key metadata and intent for this policy.

User
Category
Microsoft Outlook 2016 > Security > Cryptography
Supported on
Windows7

This policy setting controls whether Outlook is required to use FIPS-compliant algorithms when signing and encrypting messages. Outlook can run in a mode that complies with Federal Information Processing Standards (FIPS), a set of standards published by the National Institute of Standards and Technology (NIST) for use by non-military United States government agencies and by government contractors. If you enable this policy setting, Outlook runs in a mode that complies with the FIPS 140-1 standard for cryptographic modules. This mode requires the use of the SHA-1 algorithm for signing and 3DES for encryption. If you disable or do not configure this policy setting, Outlook does not run in FIPS-compliant mode. Organizations that do business with the United States government but do not run Outlook in FIPS-compliant mode risk violating the U.S. government's rules regarding the handling of sensitive information. For more information about FIPS, see FIPS - General Information at http://www.itl.nist.gov/fipspubs/geninfo.htm

Internal name
L_RuninFIPScompliantmode
Policy ID
2c48145e7f38
Elements
0

Registry values

How enabled and disabled states update the registry.

ScopeRegistry locationTypeEnabled valueDisabled valueCopy
User
Path
software\policies\microsoft\office\16.0\outlook\security
Value name
fipsmode
REG_DWORD
HKCU
1
HKCU
0
Registry location
Type REG_DWORD · User
Path
software\policies\microsoft\office\16.0\outlook\security
Value name
fipsmode
Hive
HKCU
Enabled value
1
Disabled value
0

Policy elements

Inputs and configuration options exposed by this policy.

This policy has no additional user input fields.