# CapaInstaller Agent Service Won't Start with FIPS Enabled

> Fix the CapaInstaller Agent service failing to start when FIPS is enabled.

Source: https://docs.capaone.com/capainstaller/troubleshooting/capainstaller-agent-service-won-t-start-with-fips-enabled/  
Product: CapaInstaller — a separate CapaSystems product; do not apply this page to any other.

## Problem

FIPS (Federal Information Processing Standards) is a security framework, that's usually only mandatory for non-military federal government agencies, contractors, and vendors in the United States.

With FIPS enabled, the **CapaInstaller Agent Service** cannot always start.

![image-20241022-081752.png](/attachments/capainstaller-kb/d4dcadaa-269b-41cd-8f67-8f93452a191d.png)

## Solution 1 - Disable FIPS for the CapaInstaller Agent

Disable FIPS for the CapaInstaller Agent Service by adding the line below to the "C:\Program Files\CapaInstaller\Services\Cistub\cistub.exe.config" file.

The line must be added exactly as shown in the \<runtime\> section of the file.

**\<enforceFIPSPolicy enabled=”false”/\>**

![image-20241022-082222.png](/attachments/capainstaller-kb/8b61304c-c928-444a-936c-6181d3be6b85.png)

Restart the CapaInstaller Agent Service to activate the changes.

## Solution 2 - Reconsider using FIPS

As previously mentioned, FIPS is designed for federal government agencies, contractors, and vendors in the United States. Maybe it’s not strictly necessary to enable FIPS in your organization ?

You can read more about FIPS on [Federal Information Processing Standards - Wikipedia](https://en.wikipedia.org/wiki/Federal_Information_Processing_Standards)
