Skip to content

[DOCS] Update FIPS verbiage for the bundled JVM #89949

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 3 commits into from
Sep 13, 2022
Merged

[DOCS] Update FIPS verbiage for the bundled JVM #89949

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
c70891e
[DOCS] Update FIPS verbiage for the bundled JVM
Sep 8, 2022
59da7c6
Fix links (this isn't Markdown)
Sep 8, 2022
2c065de
Merge branch 'main' into docs__update-fips-verbiage
elasticmachine Sep 9, 2022
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 6 additions & 4 deletions x-pack/docs/en/security/fips-140-compliance.asciidoc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,14 +8,16 @@ government computer security standard used to approve cryptographic modules.
{es} offers a FIPS 140-2 compliant mode and as such can run in a FIPS 140-2
configured JVM.

IMPORTANT: The JVM bundled with {es} is not configured for FIPS 140-2. You must
either configure the bundled JVM to run with a FIPS 140-2 certified Java
Security Provider or use an external JVM configured for FIPS 140-2.
IMPORTANT: The JVM bundled with {es} is not configured for FIPS 140-2. You must
configure an external JDK with a FIPS 140-2 certified Java Security Provider.
Refer to the {es}
https://www.elastic.co/support/matrix#matrix_jvm[JVM support matrix] for
supported JVM configurations.

After configuring your JVM for FIPS 140-2, you can run {es} in FIPS 140-2 mode by
setting the `xpack.security.fips_mode.enabled` to `true` in `elasticsearch.yml`.

For {es}, adherence to FIPS 140-2 is ensured by
For {es}, adherence to FIPS 140-2 is ensured by:

- Using FIPS approved / NIST recommended cryptographic algorithms.
- Delegating the implementation of these cryptographic algorithms to a NIST
Expand Down
3 changes: 2 additions & 1 deletion x-pack/docs/en/security/fips-java17.asciidoc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,5 +5,6 @@ If you run in FIPS 140-2 mode, you will either need to request
an exception from your security organization to upgrade to {es} {version},
or remain on {es} 7.x until Java 17 is certified.
ifeval::["{release-state}"=="released"]
Alternatively, consider using {ess} in the FedRAMP-certified GovCloud region.
Alternatively, consider using {ess} in the
https://www.elastic.co/industries/public-sector/fedramp[FedRAMP-certified GovCloud region].
endif::[]