Home
  •  

SQL Server Service Broker, or Database Mirroring is running in FIPS compliance mode

Microsoft.SQLServer.2012.SQL_Server_Service_Broker_or_Database_Mirroring_is_running_in_FIPS_compliance_mode_5_Rule (Rule)

Knowledge Base article:

Summary

SQL Server Service Broker, or Database Mirroring is running in Federal Information Processing Standard (FIPS) compliance mode. This rule is raised when SQL Server logs MSSQLSERVER event ID 28077 to the Windows application log. The Windows application log specifies whether the message is related to Service Broker, or Database Mirroring.

Resolutions

This message is informational only. There is no action required.

If this rule is not a concern for the database:

Overrideable Parameters

Name

Description

Default Value

Enabled

Enables or disables the workflow.

No

Priority

Defines Alert Priority.

0

Severity

Defines Alert Severity.

0

Element properties:

TargetMicrosoft.SQLServer.2012.DBEngine
CategoryEventCollection
EnabledFalse
Event_ID28077
Event Source$Target/Property[Type="SQL!Microsoft.SQLServer.DBEngine"]/ServiceName$
Alert GenerateTrue
Alert SeverityInformation
Alert PriorityLow
RemotableTrue
Alert Message
SQL Server Service Broker, or Database Mirroring is running in FIPS compliance mode
{0}
Event LogApplication
CommentMom2012ID='{49362F00-4B10-49A2-B20D-1346289BFFB2}';MOM2012GroupID={467ECC75-C5DA-42BD-955C-A73BBB51AF74}

Member Modules:

ID Module Type TypeId RunAs 
_F6DA1507_12AF_11D3_AB21_00A0C98620CE_ DataSource Microsoft.Windows.EventProvider Microsoft.SQLServer.SQLDefaultAccount
GenerateAlert WriteAction System.Health.GenerateAlert Default

Source Code:

<Rule ID="Microsoft.SQLServer.2012.SQL_Server_Service_Broker_or_Database_Mirroring_is_running_in_FIPS_compliance_mode_5_Rule" Target="SQL2012Core!Microsoft.SQLServer.2012.DBEngine" Enabled="false" ConfirmDelivery="true" Remotable="true" Comment="Mom2012ID='{49362F00-4B10-49A2-B20D-1346289BFFB2}';MOM2012GroupID={467ECC75-C5DA-42BD-955C-A73BBB51AF74}">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="_F6DA1507_12AF_11D3_AB21_00A0C98620CE_" Comment="{F6DA1507-12AF-11D3-AB21-00A0C98620CE}" TypeID="Windows!Microsoft.Windows.EventProvider" RunAs="SQL!Microsoft.SQLServer.SQLDefaultAccount">

      <ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <LogName>Application</LogName>

      <Expression>

        <And>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery>EventDisplayNumber</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>28077</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery>PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>$Target/Property[Type="SQL!Microsoft.SQLServer.DBEngine"]/ServiceName$</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="GenerateAlert" TypeID="SystemHealth!System.Health.GenerateAlert">

      <Priority>0</Priority>

      <Severity>0</Severity>

      <AlertMessageId>$MPElement[Name="Microsoft.SQLServer.2012.SQL_Server_Service_Broker_or_Database_Mirroring_is_running_in_FIPS_compliance_mode_5_Rule.AlertMessage"]$</AlertMessageId>

      <AlertParameters>

        <AlertParameter1>Event ID: $Data/EventDisplayNumber$. $Data/EventDescription$</AlertParameter1>

      </AlertParameters>

      <Suppression>

        <SuppressionValue/>

      </Suppression>

    </WriteAction>

  </WriteActions>

</Rule>