Azure Synapse/ADF Copy Activity with SFTP destination via Self-Hosted Integration Runtime.

Kishor kumar Reddy Akki 50 Reputation points
2026-09-17T19:11:10.2666667+00:00

We are using Azure Synapse/ADF Copy Activity with SFTP destination via Self-Hosted Integration Runtime.

Error:

ErrorCode=SftpFailedToConnectToSftpServer

Inner Exception:

System.InvalidOperationException: This implementation is not part of the Windows Platform FIPS validated cryptographic algorithms

Source:

Renci.SshNet

Customer has confirmed:

  • SHIR is being used.
  • Windows FIPS policy is enabled.
  • FIPS cannot be disabled due to regulatory/security requirements.

Requesting confirmation whether the current SHIR/SFTP connector supports operation under Windows FIPS mode and whether there is a supported workaround, hotfix, updated SHIR version, or recommended architecture that allows SFTP transfers while maintaining FIPS compliance.*

Azure Synapse Analytics
Azure Synapse Analytics

An Azure analytics service that brings together data integration, enterprise data warehousing, and big data analytics. Previously known as Azure SQL Data Warehouse.

0 comments

1 answer

Sort by: Oldest
Most helpful Newest Oldest
  1. Andriy Bilous 12,191 Reputation points MVP
    2026-09-18T03:47:35.4366667+00:00

    Hello Kishor kumar Reddy Akki

    This is a documented limitation with Self-Hosted Integration Runtime (SHIR) when Windows FIPS mode is enabled.

    Microsoft specifically documents that Copy Activity can fail for connectors including SFTP with:

    This implementation is not part of the Windows Platform FIPS validated cryptographic algorithms.

    The documented workaround is to add: <enforceFIPSPolicy enabled="false"/> to diawp.exe.config and restart SHIR. However, this bypasses .NET FIPS enforcement for the SHIR process, so it does not meet a requirement where FIPS enforcement must remain enabled.
    Updating SHIR is generally recommended, but the current documentation still lists this FIPS issue.

    If not consider using Azure Integration Runtime instead of SHIR where network connectivity permits. The SFTP connector supports both Azure IR and SHIR, and Microsoft also documents Managed VNet IR as an option for private network access.

    Official documentation:

    ADF/Synapse connector troubleshooting – FIPS issue

    SFTP connector documentation

    Self-hosted Integration Runtime considerations

    Was this answer helpful?

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.