FIPS 140-3 with FileCloud
FIPS 140-3, published by the National Institute of Standards and Technology (NIST), defines security requirements for cryptographic modules used by federal agencies and other organizations that must protect sensitive information. FIPS 140-3 supersedes FIPS 140-2 and is administered through the Cryptographic Module Validation Program (CMVP), a joint program of NIST and the Canadian Centre for Cyber Security.
FileCloud supports organizations with FIPS 140-3 requirements by providing a FIPS mode that combines FileCloud configuration controls with a supported FIPS-enabled operating system and validated cryptographic components. When properly licensed, configured, and deployed on a supported FIPS-enabled Linux operating system, FileCloud can operate in FIPS mode. FIPS mode is designed to ensure that FileCloud uses approved cryptographic algorithms and the appropriate cryptographic provider rather than simply displaying a FIPS status within the application.
Administrators should note that FIPS compliance depends on the complete deployment environment. Enabling a setting within FileCloud or installing a FIPS license by itself is not sufficient. The operating system, cryptographic modules, FileCloud license, configuration, and applicable application data must all meet the required conditions.
FileCloud currently supports FIPS 140-3 mode on supported Ubuntu Pro 22.04 and RHEL 9 deployments. Organizations planning a FIPS-enabled deployment should work with FileCloud to confirm licensing, operating system requirements, configuration, and upgrade considerations for their environment.
FileCloud FedRAMP
FileCloud offers a FedRAMP Certified, Class D (High) environment for U.S. federal agencies and organizations that require a cloud service aligned with the former FedRAMP High baseline.
FedRAMP and FIPS 140-3 are closely related federal security requirements, but they address different areas: FedRAMP evaluates the broader security controls and assurance requirements of a cloud service offering, while FIPS 140-3 focuses specifically on the security of cryptographic modules. Organizations that require both can work with FileCloud to determine the appropriate deployment and FIPS configuration for their needs.