Connect to a remote machine using FIPS mode in Dameware Mini Remote Control

10/7/2018 1:39 AM

3/10/2020 4:43 PM

 

FIPS (Federal Information Processing Standards) are a set of standards that describe document processing, encryption algorithms and other information technology standards for use within non-military government agencies and by government contractors and vendors who work with the agencies.
 

Dameware Remote Support & Mini Remote Control

 

Install the FIPS libraries on the remote machine:

The RSA FIPS libraries should already be located on the local machine after version 6.7 or later of the Dameware Mini Remote Control (MRC) software is installed. Installing the necessary libraries on the remote machine can be accomplished in many different ways.
 

For example:
 

• During an update of the Client Agent Service (on the fly):

• During an update of the Client Agent Service (at a later time) via the File/Update Client Agent menu:  

• During the initial installation of the Client Agent Service via the File/Install Service menu in Dameware MRC: 

• During the initial installation of the Client Agent Service (on the fly):  

• Via the Dameware NT Utilities (DNTU) software, via the Batch pane in the Services View:

• Via the Dameware MSI Builder: 

Once the necessary FIPS libraries are installed on the remote machine, a connection using FIPS mode can be made.

 

How to connect using FIPS Mode in Dameware MRC:

1. FIPS mode can be enabled by selecting the Host Entry, then clicking on Settings.

2. Select the Encryption Options tab and check the Use FIPS Mode checkbox.

3. Click OK to save the settings for this Host Entry. 
   Now a connection to the remote machine can be made in FIPS mode. 

4. Click Connect on the Remote Connect dialog.

   Note the initialization of the FIPS mode libraries (on the Status Bar). Once completed, a FIPS mode connection is established.
   
   
   
   
   

 

How to enforce FIPS Mode in Dameware MRC:

There are additional options within the Dameware MRC Client Agent Service on the remote machine to force every connection to this machine to use all encryption options within the Dameware MRC program.

Within the properties of the Dameware MRC Client Agent Service, select the General tab, then click Session to open the Session Negotiation settings. By enabling the FIPS Mode option within the Dameware MRC Client Agent Service, even if users forget to enable the additional Encryption Options, the Dameware MRC software will automatically enable FIPS Mode encryption over this Dameware MRC connection.

Note about Aero and FIPS Mode:

Due to a known bug during initialization of the RSA FIPS libraries, each time a connection is made to a remote machine using FIPS mode and AERO is enabled either locally or remotely, this connection may take up to an additional 15-20 seconds (depending on the machine). RSA has already confirmed this to be a bug that should be resolved in the next release of their BSAFE Crypto-C ME libraries later in 2008.

Therefore, when using FIPS mode to connect, SolarWinds recommends temporarily turning off AERO, both locally and remotely.

Disclaimer: Please note, any content posted herein is provided as a suggestion or recommendation to you for your internal use. This is not part of the SolarWinds software or documentation that you purchased from SolarWinds, and the information set forth herein may come from third parties. Your organization should internally review and assess to what extent, if any, such custom scripts or recommendations will be incorporated into your environment. You elect to use third party content at your own risk, and you will be solely responsible for the incorporation of the same, if any.