Services that support FIPS
The Federal Information Processing Standard (FIPS) standards and guidelines for federal computer systems that are developed by National Institute of Standards and Technology (NIST) in accordance with the Federal Information Security Management Act (FISMA).
Most IBM Cloud Pak for Data software can be installed on a Red Hat® OpenShift® Container Platform cluster that is FIPS-enabled (FIPS-tolerant).
IBM Cloud Pak for Data is designed to run in FIPS mode and to be compliant with FIPS 140-2 and FIPS 140-3. However, not all versions of the Red Hat OpenShift Container Platform are certified by the National Institute of Standards and Technology (NIST) Cryptographic Module Validation Program (CMVP).
IBM Cloud Pak for Data products include OpenSSL and other cryptography modules that are in different states of CVMP certification. For an overview of the validation status of cryptographic modules for selected RHEL minor releases, see the FIPS 140-2 and FIPS 140-3 section of the Compliance Activities and Government Standards. Certain versions of the FIPS 140-2 certified module might have reached Historical Validation status. You are encouraged to perform a risk determination on whether to continue using the module based on an assessment of where and how the module is used.
If you need to run Cloud Pak for Data in a FIPS environment, use the following information to confirm that the services that you plan to install can run when FIPS is enabled.
| Service | Runs on FIPS-enabled cluster (FIPS tolerant) |
Additional information |
|---|---|---|
| IBM Cloud Pak for Data control plane | ✓ | For known issues and limitations, see Known issues on FIPS-enabled clusters. |
| Cloud Pak for Data command-line interface | ✓ | |
| Common core services | ✓ | For known issues and limitations, see Known issues on FIPS-enabled clusters. |
| Scheduling service | ✓ | |
| AI Factsheets | ✓ | |
| Anaconda Repository for IBM Cloud Pak for Data | No | |
| Analytics Engine powered by Apache Spark | ✓ | |
| Cognos Analytics | ✓ | |
| Cognos Dashboards | ✓ | |
| Data Gate | ✓ | |
| Data Privacy | ✓ | |
| Data Product Hub | ✓ | |
| Data Refinery | ✓ | |
| Data Replication | ✓ | |
| Data Virtualization | ✓ | |
| DataStage | ✓ | For known issues and limitations, see Known issues on FIPS-enabled clusters. |
| Db2 | ✓ | FIPS support includes the data replication feature for Db2. |
| Db2 Big SQL | ✓ | |
| Db2 Data Management Console | ✓ | |
| Db2 Warehouse | ✓ | FIPS support includes the data replication feature for Db2 Warehouse. |
| Decision Optimization | ✓ | |
| EDB Postgres | No | |
| Execution Engine for Apache Hadoop | ✓ |
For known issues and limitations, see Known issues on FIPS-enabled clusters. |
| IBM Knowledge Catalog | ✓ | For known issues and limitations, see Known issues on FIPS-enabled clusters. |
| IBM Knowledge Catalog Premium | ✓ | |
| IBM Knowledge Catalog Standard | ✓ | |
| IBM Match 360 with Watson | ✓ | |
| Informix | ✓ | |
| MANTA Automated Data Lineage | ✓ | |
| MongoDB | No | |
| OpenPages | ✓ | |
| Orchestration Pipelines | ✓ | |
| Planning Analytics | ✓ | |
| Product Master | ✓ | |
| RStudio® Server Runtimes | ✓ | For known issues and limitations, see Known issues on FIPS-enabled clusters. |
| SPSS Modeler | ✓ | |
| Synthetic Data Generator | ✓ | |
| Voice Gateway | No | |
| Watson Discovery | ✓ | |
| Watson Machine Learning | ✓ | For known issues and limitations, see Known issues on FIPS-enabled clusters. |
| Watson Machine Learning Accelerator | ✓ | |
| Watson OpenScale | ✓ | |
| Watson Speech services | ✓ | |
| Watson Studio | ✓ | For known issues and limitations, see Known issues on FIPS-enabled clusters. |
| Watson Studio Runtimes | ✓ | |
| watsonx.ai | ✓ | |
| watsonx Assistant | ✓ | |
| watsonx Code Assistant for Red Hat Ansible® Lightspeed | ✓ | |
| watsonx Code Assistant for Z | ✓ | |
| watsonx Code Assistant for Z Code Explanation | No | |
| watsonx.data | ✓ | |
| watsonx.governance | ✓ | |
| watsonx Orchestrate | ✓ |
|