FIPS 140-2

Please post here if you have problems in using Wing FTP Server.
Post Reply
jbriscoe
Posts: 6
Joined: Mon Nov 22, 2010 7:09 pm

FIPS 140-2

Post by jbriscoe »

Do you have some documentation as to what FIPS 140-2 Mode does when you enable it? We need to disallow use of ciphers using less than 112 bit key lengths. Will enabling this option do that, or can you tell me how I can configure the server to not accept these?

Thank you...
FTP
Site Admin
Posts: 2072
Joined: Tue Sep 29, 2009 6:09 am

Re: FIPS 140-2

Post by FTP »

Here is the explanation for FIPS 140-2 in Wikipedia: http://en.wikipedia.org/wiki/FIPS_140-2

How to enable it? See here: http://www.wftpserver.com/help/ftpserve ... aneous.htm, you just need to enable "FIPS 140-2 Mode", and after enabling it, all the SSL certificates need to be generated again.

Only have an option "Disable SSLv2", I think it will be secure enough, because modern FTP client software will support secure ciphers, so you don't need to worry about this.
shankar
Posts: 1
Joined: Tue Jul 17, 2018 7:58 am

Re: FIPS 140-2

Post by shankar »

Hello,

Can you please share the process, how to enable FIPS 140-2 mode from command line in Linux servers, without username & password. I have super user privileges on server.
FTP
Site Admin
Posts: 2072
Joined: Tue Sep 29, 2009 6:09 am

Re: FIPS 140-2

Post by FTP »

OK, so you can edit the file "Data/settings.xml" manually, just change the line 19 into:

<EnableFips>1</EnableFips>

And then restart the WingFTP service.
chazjn
Posts: 6
Joined: Wed Sep 24, 2014 11:30 am

Re: FIPS 140-2

Post by chazjn »

Does anyone know exactly which ciphers/protocols are enabled/disabled after ticking the FIPS 140-2 box?
Thanks
Post Reply