Forum Discussion

gtwood's avatar
gtwood
Copper Contributor
Apr 04, 2023

Win32 Content Prep tool doesn't work with FIPS mode

This issue on GitHub has been languishing unacknowledged for the past three years.

 

Since the elder days of yore, the Win32 Content Prep tool - the only option for deploying non-MSI applications through Intune - has been unable to operate on and endpoint which has been FIPSed.

 

This process has caused much consternation among those of us who must, by reason of government directive, FIPS ourselves and our endpoints for the security of the nation.

 

I would humbly beseech those who create the great and powerful content prep tool to update it with support for FIPS so that those of us who wish to use it can do so.

GitHub Reference Link Error for Windows Platform FIPS · Issue #33 · microsoft/Microsoft-Win32-Content-Prep-Tool (github.com)

  • matt-defcert's avatar
    matt-defcert
    Copper Contributor
    I am running into the same issue with quite a few clients that are required to use FIPS mode. Any help on this would be greatly appreciated.
    • Pat_Fetty's avatar
      Pat_Fetty
      Icon for Microsoft rankMicrosoft
      Hello,

      Unfortunately this is 'by design' as we don't have plans on fixing the tool. The workaround for this is to run the tool on a machines/VM that is not in FIPS mode. I know for some customers this can be a pain (I am in the Intune PG and work only with Gov customers)... but at this time, this is the only option available.

      Thanks,

      Pat
      • matt-defcert's avatar
        matt-defcert
        Copper Contributor
        We have been doing that in the meantime with some customers and its not an ideal solution especially for the smaller ones that don't have crazy amounts of extra hardware lying around. But it would be really nice in the future if this could get fixed so that there is less usability issues for small defense contractors struggling to get set up on GCC High Intune/Endpoint Manager for their Windows endpoints.