Chapter 7. Federal Information Processing Standard (FIPS)

Red Hat Ceph Storage is supported on Red Hat Enterprise Linux configured in Federal Information Processing Standard (FIPS) mode. FIPS mode ensures that cryptographic tools implement their algorithms properly. You do not need to change any Ceph configuration for Ceph to work with FIPS mode, FIPS just needs to enabled in the operating system.

Ceph supports FIPS mode on version 3.2.z2 or higher with Red Hat Enterprise Linux 7.6 or higher. See the knowledge base solution on Red Hat Ceph Storage releases and corresponding Ceph package versions to determine which version of the Ceph packages will work.

Prerequisites

  • Red Hat Enterprise Linux 7.6 or higher is used with FIPS mode enabled.
  • Red Hat Ceph Storage 3.2.z2 or higher is used.

Procedure

  1. Enable FIPS mode on Red Hat Enterprise Linux either during system installation or after it.

    1. Follow the instructions to enable FIPS mode in the Red Hat Enterprise Linux 7 Security Guide.

Additional Resources