Skip to content

Commit 37b0e51

Browse files
authored
Document FIPS mode configuration for App Service Environment
Added instructions for enabling FIPS mode in App Service Environment, including JSON configuration.
1 parent bf5d7dd commit 37b0e51

1 file changed

Lines changed: 17 additions & 0 deletions

File tree

articles/app-service/environment/app-service-app-service-environment-custom-settings.md

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -103,6 +103,23 @@ To configure your App Service Environment to use just the ciphers that it requir
103103
> [!WARNING]
104104
> If incorrect values are set for the cipher suite that SChannel can't understand, all TLS communication to your server might stop functioning. In such a case, you'll need to remove the *FrontEndSSLCipherSuiteOrder* entry from **clusterSettings** and submit the updated Resource Manager template to revert back to the default cipher suite settings. Use this functionality with caution.
105105
106+
## Enable FIPS mode
107+
108+
You can configure your App Service Environment to operate in FIPS (Federal Information Processing Standards) mode. When enabled, FIPS mode ensures that cryptographic operations comply with FIPS 140-2 standards.
109+
110+
To enable FIPS mode on your App Service Environment, you can set the following **clusterSettings** entry:
111+
112+
```json
113+
"clusterSettings": [
114+
{
115+
"name": "LinuxFipsModeEnabled",
116+
"value": "true"
117+
}
118+
],
119+
```
120+
121+
When LinuxFipsModeEnabled is set to true, your App Service Environment uses FIPS-compliant cryptographic modules for cryptographic operations. This setting applies to Linux-based workloads in your App Service Environment.
122+
106123
## Get started
107124

108125
The Azure Quickstart Resource Manager template site includes a template with the base definition for [creating an App Service Environment](https://azure.microsoft.com/resources/templates/web-app-asp-app-on-asev3-create/).

0 commit comments

Comments
 (0)