Skip to content

docs(gateway): mark FIPS 140-2 packages as historical #7306

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
cv1002 wants to merge 1 commit into
base: main
Choose a base branch
from
Open

docs(gateway): mark FIPS 140-2 packages as historical #7306

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 5 additions & 1 deletion app/gateway/fips-140-2-support.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -31,7 +31,11 @@ works_on:
---

{:.warning}
> For FIPS 140-3, see [FIPS 140-3 compliance in {{site.base_gateway}}](/gateway/fips-support/). FIPS 140-2 support will be deprecated in a future release.
> For FIPS 140-3, see [FIPS 140-3 compliance in {{site.base_gateway}}](/gateway/fips-support/).
> NIST moved FIPS 140-2 module validations to the Historical List on 22 September 2026.
> New {{site.base_gateway}} builds no longer publish FIPS 140-2 packages or images.
> Existing FIPS 140-2 packages for previously released versions remain available.
> Migrate new deployments to the FIPS 140-3 package.

The Federal Information Processing Standard (FIPS) 140-2 is a federal standard defined by the National Institute of Standards and Technology. It specifies the security requirements that must be satisfied by a cryptographic module. The FIPS {{site.base_gateway}} package is FIPS 140-2 compliant. Compliance means that {{site.base_gateway}} only uses FIPS 140-2 approved algorithms while running in FIPS mode, but the product has not been submitted to a NIST testing lab for validation.

Expand Down
2 changes: 2 additions & 0 deletions app/gateway/fips-support.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -47,6 +47,8 @@ The package uses the OpenSSL FIPS Provider 3.1.2 to provide FIPS 140-3 validated

{:.info}
> **Note**: If you are looking for instructions on using the FIPS 140-2 package, see [FIPS 140-2 compliance in {{site.base_gateway}}](/gateway/fips-140-2-support/).
> NIST moved FIPS 140-2 module validations to the Historical List on 22 September 2026.
> New {{site.base_gateway}} builds publish FIPS 140-3 packages and images only.

## Configure FIPS

Expand Down
Loading