FIPS Certification
ConnectWise Control should seek a FIPS certification. It already has FIPS compliance, but our remote support software requires FIPS certification to be used to service law enforcement customers.
Welcome to our community!
Replies 9
Caitlin M Barnes Team Member
ConnectWise Control is FIPS-compliant but not FIPS-certified. Our Relay service is responsible for handling traffic to and from your ConnectWise Control server. All traffic is automatically encrypted with AES-256 block encryption and RSA provided by the Microsoft RSA/Schannel Cryptographic Provider. These particular implementations of the AES-256 and RSA algorithms have been designated as FIPS compliant for ConnectWise Control servers on Windows. For more information, see Microsoft's documentation on FIPS 140 Validation.
If you need an official compliance letter, contact Sales at controlsales@connectwise.com.
Caitlin M Barnes Team Member
Hi Kalebdienelt,
No, it is not possible to avoid the relay.
Caitlin
We have been notified that for law enforcement (LEADS) agencies (in Ohio) and soon state and local government that FIPS compliance is no longer acceptable. They are requiring FIPS certificate number. I am submitting this request so we don't have to move products elsewhere in order to support those clients.
Due to Law Enforcement requirements this is something that would be incredibly beneficial for us too.