FIPS 140-3 Validated Modules in Oracle Linux 10

The following sections describe how to review FIPS certifications and install FIPS 140-3 validated cryptographic modules in Oracle Linux 10.

Information About Modules That Have Received FIPS 140-3 Validation

The Oracle FIPS Certifications website provides the following information for each module:

• Name and description of the module.

• Status of the FIPS 140-3 validation process.

  Important:

  To achieve compliance with FIPS Publication 140-3, you must use the package version that the Security Policy document specifies for each respective module only.

• Package version for the module.

• Certificate number for the module.

Note:

Although compliance with FIPS requires that you must use the package version that was validated for each respective cryptographic module, it's considered good security practice to enable FIPS software update channels so that security patches can continue to be applied to those package versions.