Unable to import ADM template file for FIPS 140-2

[depasseg]

I just bought SecureCRT 5.1 and I am trying to enable FIPS 140-2. I get the following error message when trying to import the VanDykePolicy.adm into WinXP Pro:

The following error occured in C:\WINDOWS\system32\GroupPolicy\Adm\VanDykePolicy.adm on line 7:
Error 62: The corresponding string was not found in the [strings] section

Found: !!VanDykeSettings

The file can not be loaded.

[OK]

Any thoughts?

Here's a copy of the file. I can't figure out the reference to line 7:

; VanDyke Software Administrative Template file for use with the Group Policy snap-in.
; Copyright 2006 VanDyke Software, Inc. All rights reserved.
;
; -----------------------------------------------------------------------------------------
CLASS USER
CATEGORY !!VanDykeSettings

KEYNAME "SOFTWARE\Policies\VanDyke"

POLICY !!EnableFipsMode
EXPLAIN !!EnableFipsMode_Explain
VALUENAME "Enable FIPS Mode"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY

POLICY !!SavePasswords
EXPLAIN !!SavePasswords_Explain
VALUENAME "Save Passwords"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY

POLICY !!SaveUsernames
EXPLAIN !!SaveUsernames_Explain
VALUENAME "Save Usernames"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY

POLICY !!SendChatToAllTabs
EXPLAIN !!SendChatToAllTabs_Explain
VALUENAME "Send Chat to All Tabs"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY

POLICY !!DisableAllScripting
EXPLAIN !!DisableAllScripting_Explain
VALUENAME "Disable All Scripting"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY

POLICY !!HostKeyAlgorithms
EXPLAIN !!HostKeyAlgorithms_Explain
PART !!HostKeyAlgorithmsLabel EDITTEXT
DEFAULT ""
VALUENAME "Host Key Algorithms"
MAXLEN 260
END PART
END POLICY

POLICY !!SSH1PassphraseCaching
EXPLAIN !!SSH1PassphraseCaching_Explain
VALUENAME "Save Passphrase in Shared Memory"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY

POLICY !!CreateDumpFile
EXPLAIN !!CreateDumpFile_Explain
VALUENAME "Create Dump File"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
END CATEGORY

[strings]

// -----------------------------------------//
// Do not localize anything above this line //
// -----------------------------------------//

// ---------- //
// Categories //
// ---------- //

VanDykeSettings\""VanDyke Software Settings"

// -------- //
// Policies //
// -------- //

EnableFipsMode\""Enable FIPS Mode"
SavePasswords\""Save Passwords"
SaveUsernames\""Save Usernames"
SendChatToAllTabs\""Send Chat to All Tabs"
DisableAllScripting\""Disable All Scripting"
HostKeyAlgorithms\""Host Key Algorithms"
HostKeyAlgorithmsLabel\""&Host Key Algorithms List:"
SSH1PassphraseCaching\""SSH1 Passphrase Caching"
CreateDumpFile\""Create Dump File"

// --------- //
// Help Text //
// --------- //

EnableFipsMode_Explain\""If this policy is enabled, all installed VanDyke Software products will run in FIPS mode. This option will not take effect until all the VanDyke applications are stopped and restarted."
SavePasswords_Explain\""If this policy is disabled, users will not be able to save passwords."
SaveUsernames_Explain\""If this policy is disabled, users will not be able to save usernames."
SendChatToAllTabs_Explain\""If this policy is disabled, users will not be able to send text typed into the chat window to all active tabs."
DisableAllScripting_Explain\""If this policy is enabled, all scripting will be disabled."
HostKeyAlgorithms_Explain"Allows you to enter the acceptable host key algorithms."
SSH1PassphraseCaching_Explain\""If this policy is disabled, users will not be able to cache their SSH1 public-key passphrases in shared memory."
CreateDumpFile_Explain\""If this policy is enabled, SecureFX will create a dump file called SecureFX.dmp when it encounters an unhandled exception."

[depasseg]

Support sent me a new ADM which imported fine.
One minor problem was that after I applied the force FIPS option, I tried to start CRT but it complained that my default global setting of using SSH-1 was not compatible and it would not start. I had to change the FIPS policy back to no preference and restart CRT. Then I could change the global default to SSH-2. Then I re-applied the FIPS policy and restarted CRT. Works great now.

Thanks for the help!

[tnygren]

Hi Depasseg,

I'm glad to hear that the new template worked!

Please let us know if you have any other questions.