Services that support FIPS
The Federal Information Processing Standard (FIPS) standards and guidelines for federal computer systems that are developed by National Institute of Standards and Technology (NIST) in accordance with the Federal Information Security Management Act (FISMA).
Most IBM® Software Hub software can be installed on a Red Hat® OpenShift® Container Platform cluster that is FIPS-enabled (FIPS-tolerant).
IBM Software Hub is designed to run in FIPS mode and to be compliant with FIPS 140-2 and FIPS 140-3. However, not all versions of the Red Hat OpenShift Container Platform are certified by the National Institute of Standards and Technology (NIST) Cryptographic Module Validation Program (CMVP).
IBM Software Hub products include OpenSSL and other cryptography modules that are in different states of CVMP certification. For an overview of the validation status of cryptographic modules for selected RHEL minor releases, see the FIPS 140-2 and FIPS 140-3 section of the Compliance Activities and Government Standards. Certain versions of the FIPS 140-2 certified module might have reached Historical Validation status. You are encouraged to perform a risk determination on whether to continue using the module based on an assessment of where and how the module is used.
If you need to run IBM Software Hub in a FIPS environment, use the following information to confirm that the services that you plan to install can run when FIPS is enabled.
| Service |
Runs on FIPS-enabled cluster
(FIPS tolerant) |
Runs on FIPS strict mode
(FIPS compliant) |
Additional information |
|---|---|---|---|
| IBM Software Hub control plane | ✓ |
|
For known issues and limitations, see Known issues on FIPS-enabled clusters. |
| Cloud Pak for Data command-line interface | ✓ | ||
| Common core services | ✓ | For known issues and limitations, see Known issues on FIPS-enabled clusters. | |
| Scheduling service | ✓ | ||
| AI Factsheets | ✓ | ||
| Anaconda Repository for IBM Cloud Pak for Data | No | No | |
| Analytics Engine powered by Apache Spark | ✓ | ||
| Cognos Analytics | ✓ | ||
| Cognos Dashboards | ✓ | ||
| Data Gate | ✓ | ||
| Data Privacy | ✓ | ||
| Data Product Hub | ✓ | ||
| Data Refinery | ✓ | For known issues and limitations, see Known issues on FIPS-enabled clusters. | |
| Data Replication | ✓ |
|
|
| Data Virtualization | ✓ | ||
| DataStage | ✓ | For known issues and limitations, see Known issues on FIPS-enabled clusters. | |
| Db2 | ✓ | FIPS support includes the data replication feature for Db2. | |
| Db2 Big SQL | ✓ | ||
| Db2 Data Management Console | ✓ | ||
| Db2 Warehouse | ✓ | FIPS support includes the data replication feature for Db2 Warehouse. | |
| Decision Optimization | ✓ | ||
| EDB Postgres | No | ||
| Execution Engine for Apache Hadoop | ✓ | For known issues and limitations, see Known issues on FIPS-enabled clusters. | |
| IBM Knowledge Catalog | ✓ | For known issues and limitations, see Known issues on FIPS-enabled clusters. | |
| IBM Knowledge Catalog Premium | ✓ | ||
| IBM Knowledge Catalog Standard | ✓ | ||
| IBM Manta Data Lineage | ✓ | ||
| IBM Master Data Management | ✓ | ||
| IBM StreamSets | No | ||
| Informix | ✓ | ||
| MANTA Automated Data Lineage | ✓ | ||
| MongoDB | No | ||
| OpenPages | ✓ | ||
| Orchestration Pipelines | ✓ | ||
| Planning Analytics | ✓ | ||
| Product Master | ✓ | ||
| RStudio® Server Runtimes | ✓ | For known issues and limitations, see Known issues on FIPS-enabled clusters. | |
| SPSS Modeler | ✓ | ||
| Synthetic Data Generator | ✓ | ||
| Unstructured Data Integration | |||
| Voice Gateway | No | ||
| Watson Discovery | ✓ | ||
| Watson Machine Learning | ✓ | For known issues and limitations, see Known issues on FIPS-enabled clusters. | |
| Watson OpenScale | ✓ | ||
| Watson Speech services | ✓ | ||
| Watson Studio | ✓ | For known issues and limitations, see Known issues on FIPS-enabled clusters. | |
| Watson Studio Runtimes | ✓ | ||
| watsonx.ai™ | ✓ | For known issues and limitations, see Known issues on FIPS-enabled clusters. | |
| watsonx Assistant | ✓ | ||
| watsonx Code Assistant™ | ✓ | ||
| watsonx Code Assistant for Red Hat Ansible® Lightspeed | ✓ | ||
| watsonx Code Assistant for Z | ✓ | ||
| watsonx Code Assistant for Z Agentic | No | ||
| watsonx Code Assistant for Z Code Explanation | No | ||
| watsonx Code Assistant for Z Code Generation | No | ||
| watsonx Code Assistant for Z Understand | No | ||
| watsonx.data™ | ✓ | ||
| watsonx.data Premium | |||
| watsonx.data integration | No | No | |
| watsonx.data intelligence | ✓ | ||
| watsonx.governance™ | ✓ | ||
| watsonx™ Orchestrate | ✓ |