Password hash synchronization and FIPS: workaround fails

[A9G-Data-Droid]

We are unable to run Azure-AD connect with FIPS mode on. The workaround cited on this page isn't working. Sync still fails until FIPS mode is disabled on the system. This is an unacceptable solution.

---

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: c900f942-4456-5238-9f4c-a7a5bd685c04
• Version Independent ID: a5d7d971-765f-0977-f531-232ea5924121
• Content: Implement password hash synchronization with Azure AD Connect sync
• Content Source: articles/active-directory/hybrid/how-to-connect-password-hash-synchronization.md
• Service: active-directory
• Sub-service: hybrid
• GitHub Login: @billmath
• Microsoft Alias: billmath

[MarileeTurscak-MSFT]

@A9G-Data-Droid
Thanks for your feedback! We will investigate and update as appropriate.

[amicone]

Adding additional information: Not only does the change for FIPS compliance not work, but the documentation is also incorrect. The miiserver.exe.config is not stored relative to %programfiles%, it is stored relative to the data storage directory chosen during AD Connect installation.

[billmath]

Thanks for your dedication to our documentation. Unfortunately, at this time we have been unable to review your issue in a timely manner and we sincerely apologize for the delayed response. Though the scope of our feedback channel here on GitHub covers specific documentation fixes, we can help redirect you to the right support channel to get an answer to your question: [reference to alternative product/service or community endpoint]. Because this issue does not relate to documentation, we are closing this issue. #please-close

[A9G-Data-Droid]

The documentation is wrong and needs to be edited. The whole section "Password hash synchronization and FIPS" needs to be edited or removed. It's both technically wrong and doesn't work.

You also failed to fill in the critical detail of your canned message:

redirect you to the right support channel to get an answer to your question: [reference to alternative product/service or community endpoint].

That's where you are supposed to put something helpful.