What does FIPS Status: unverified mean? #11824
-
|
Heho |
Beta Was this translation helpful? Give feedback.
Replies: 2 comments
-
|
FIPS is a set of standards used mostly in the context of the US federal government and its vendors/customers. Right now, licensed instances see this API check by default, which verifies that only FIPS-validated modules are installed/used across the instance. This mode needs to be manually enabled at build time, and we work with a few customers who require this feature to enable it. From a practical standpoint, if you don't care about this specific compliance standard, whether the check passes does not negatively affect the security of your installation. (We can actually use more up-to-date packages when not limited to FIPS-validated modules.) Longer term, we will make the appearance of the admin dashboard more configurable. At that point, we would also make it optional to show or hide this FIPS validation check. |
Beta Was this translation helpful? Give feedback.
FIPS is a set of standards used mostly in the context of the US federal government and its vendors/customers. Right now, licensed instances see this API check by default, which verifies that only FIPS-validated modules are installed/used across the instance. This mode needs to be manually enabled at build time, and we work with a few customers who require this feature to enable it.
From a practical standpoint, if you don't care about this specific compliance standard, whether the check passes does not negatively affect the security of your installation. (We can actually use more up-to-date packages when not limited to FIPS-validated modules.)
Longer term, we will make the appearance of th…