title: Enable FIPS 140-2 on Win2012r2 and verify compliance using powershell
body: <p>I'm trying to enable FIPS 140-2 on one of the test windows 2012r2 server and was wondering if there are any other settings that I need to modify within group policy other than the one listed below to enable FIPS 140-2 and also how can I verify the compliance from powershell?</p>
  
  <ol>
  <li>Click Start, click Run, type gpedit.msc, and then press ENTER.</li>
  <li>In the Local Group Policy Editor, under the Computer Configuration node, double-click Windows Settings, and then double-click Security Settings.</li>
  <li>Under the Security Settings node, double-click Local Policies, and
  then click Security Options.</li>
  <li>In the details pane, double-click System cryptography: Use FIPS-compliant algorithms for encryption, hashing, and signing.</li>
  <li>In the System cryptography: Use FIPS-compliant algorithms for encryption, hashing, and signing dialog box, click Enabled, and then click OK to close the dialog box.</li>
  <li>Close the Local Group Policy Editor.</li>
  </ol>
  
  <p>or </p>
  
  <p>In order to do it manually, simply change the registry key HKLM\System\CurrentControlSet\Control\Lsa\FIPSAlgorithmPolicy\Enabled to 1</p>