Set-CsFIPSConfiguration

Syntax

Set-CsFIPSConfiguration
   [[-Identity] <XdsIdentity>]
   [-Confirm]
   [-Force]
   [-RequireFIPSCompliantMedia <Boolean>]
   [-Tenant <Guid>]
   [-WhatIf]
   [<CommonParameters>]

Set-CsFIPSConfiguration
   [-Confirm]
   [-Force]
   [-Instance <PSObject>]
   [-RequireFIPSCompliantMedia <Boolean>]
   [-Tenant <Guid>]
   [-WhatIf]
   [<CommonParameters>]

Description

The Federal Information Processing Standards (FIPS) are a series of standards and guidelines used by computers engaged in work for the United States government; for example, there are FIPS standards that govern the use of such things as cryptography, encryption, and digital signatures. (See https://www.itl.nist.gov/fipspubs/by-num.htm (https://www.itl.nist.gov/fipspubs/by-num.htm) for more information.) Skype for Business Server provides an option that enables the software to use only algorithms that meet the FIPS standards. If you need to work with the United States government (or with other entities that follow FIPS) then you can enable FIPS compliance in Skype for Business Server.

Keep in mind, however, that, for the on-premises version of Skype for Business Server, you have only a single, global collection of FIPS configuration settings: FIPS compliance can only be enabled or disabled for your entire Skype for Business Server implementation. You cannot selectively enable or disable FIPS compliance on, say, an individual site or an individual Registrar pool. If you do enable FIPS compliance, you could potentially encounter problems when trying to communicate with organizations that do not fully adhere to the FIPS standards.

By default, FIPS compliance is disabled in Skype for Business Server.

The Set-CsFIPSConfiguration cmdlet is used to enable or disable FIPS compliance.

Skype for Business Server Control Panel: The functions carried out by the Set-CsFIPSConfiguration cmdlet are not available in the Skype for Business Server Control Panel.

Examples

-------------------------- Example 1 --------------------------

Set-CsFIPSConfiguration -Identity "global" -RequireFIPSCompliantMedia $True

In Example 1, the RequireFIPSCompliantMedia property of the global FIPS configuration settings is set to True ($True).

Parameters

-Confirm

-Force

-Identity

-Instance

-RequireFIPSCompliantMedia

-Tenant

-WhatIf

Inputs

The Set-CsFIPSConfiguration cmdlet accepts pipelined instances of the Microsoft.Rtc.Management.WritableConfig.Settings.FIPSConfiguration.FIPSConfiguration object.

Outputs

None. Instead, the Set-CsFIPSConfiguration cmdlet modifies existing instances of the Microsoft.Rtc.Management.WritableConfig.Settings.FIPSConfiguration.FIPSConfiguration object.

Related Links

• Get-CsFIPSConfiguration
• New-CsFIPSConfiguration
• Remove-CsFIPSConfiguration