FIPS compliance

Version added: 6.0.9-7

FIPS (Federal Information Processing Standard) is the US government computer security standard for cryptography modules that include both hardware and software components. Percona Server for MongoDB supports FIPS certified module for OpenSSL, enabling US organizations to introduce FIPS-compliant encryption and thus meet the requirements towards data security.

The FIPS compliance in Percona Server for MongoDB is implemented in the same way as in MongoDB Enterprise Advanced.

Platform support

You can run Percona Server for MongoDB in FIPS mode on all supported operating systems. To use FIPS mode for Percona Server for MongoDB, your Linux system must be configured with the OpenSSL FIPS certified module.

Note, that FIPS modules on Ubuntu 24.04 are not available yet as they are awaiting final certification by CMVP.

Availability

FIPS modules were available in Pro packages, but those have been sunsetted.

Since version 6.0 has reached end of life, regular packages are not rebuilt to include FIPS.

If you require FIPS functionality, you have two options:

• Compile Percona Server for MongoDB yourself with FIPS enabled. See source build instructions.
• Reach out to your Percona representative for guidance on accessing Percona Server for MongoDB with FIPS support.

See Configure MongoDB for FIPS in MongoDB documentation for configuration guidelines.