Skip to content

Commit 8633965

Browse files
Adam Lockeelasticmachine
Adam Locke
andauthored
[DOCS] Update FIPS verbiage for the bundled JVM (#89949) (#90059)
* [DOCS] Update FIPS verbiage for the bundled JVM * Fix links (this isn't Markdown) Co-authored-by: Elastic Machine <[email protected]> (cherry picked from commit 9e80f36)
1 parent c34f4fb commit 8633965

File tree

2 files changed

+8
-5
lines changed

2 files changed

+8
-5
lines changed

x-pack/docs/en/security/fips-140-compliance.asciidoc

Lines changed: 6 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -8,14 +8,16 @@ government computer security standard used to approve cryptographic modules.
88
{es} offers a FIPS 140-2 compliant mode and as such can run in a FIPS 140-2
99
configured JVM.
1010

11-
IMPORTANT: The JVM bundled with {es} is not configured for FIPS 140-2. You must
12-
either configure the bundled JVM to run with a FIPS 140-2 certified Java
13-
Security Provider or use an external JVM configured for FIPS 140-2.
11+
IMPORTANT: The JVM bundled with {es} is not configured for FIPS 140-2. You must
12+
configure an external JDK with a FIPS 140-2 certified Java Security Provider.
13+
Refer to the {es}
14+
https://www.elastic.co/support/matrix#matrix_jvm[JVM support matrix] for
15+
supported JVM configurations.
1416

1517
After configuring your JVM for FIPS 140-2, you can run {es} in FIPS 140-2 mode by
1618
setting the `xpack.security.fips_mode.enabled` to `true` in `elasticsearch.yml`.
1719

18-
For {es}, adherence to FIPS 140-2 is ensured by
20+
For {es}, adherence to FIPS 140-2 is ensured by:
1921

2022
- Using FIPS approved / NIST recommended cryptographic algorithms.
2123
- Delegating the implementation of these cryptographic algorithms to a NIST

x-pack/docs/en/security/fips-java17.asciidoc

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,5 +5,6 @@ If you run in FIPS 140-2 mode, you will either need to request
55
an exception from your security organization to upgrade to {es} {version},
66
or remain on {es} 7.x until Java 17 is certified.
77
ifeval::["{release-state}"=="released"]
8-
Alternatively, consider using {ess} in the FedRAMP-certified GovCloud region.
8+
Alternatively, consider using {ess} in the
9+
https://www.elastic.co/industries/public-sector/fedramp[FedRAMP-certified GovCloud region].
910
endif::[]

0 commit comments

Comments
 (0)