Skip to content

Commit

Permalink
[DOCS] Minor doc edits
Browse files Browse the repository at this point in the history
  • Loading branch information
lcawl committed Jun 18, 2024
1 parent d871efc commit c37004a
Show file tree
Hide file tree
Showing 2 changed files with 7 additions and 5 deletions.
11 changes: 6 additions & 5 deletions docs/user/security/fips-140-2.asciidoc
Original file line number Diff line number Diff line change
@@ -1,20 +1,21 @@
[role="xpack"]
[[xpack-security-fips-140-2]]
=== FIPS 140-2

experimental[] The Federal Information Processing Standard (FIPS) Publication 140-2, (FIPS PUB 140-2),
experimental::[]

The Federal Information Processing Standard (FIPS) Publication 140-2, (FIPS PUB 140-2),
titled "Security Requirements for Cryptographic Modules" is a U.S. government computer security standard
used to approve cryptographic modules.

{kib} offers a FIPS 140-2 compliant mode and as such can run in a Node.js environment configured with a FIPS
140-2 compliant OpenSSL3 provider.

To run {kib} in FIPS mode, your cluster must be have a Platinum or Enterprise license.
To run {kib} in FIPS mode, you must have the appropriate {subscriptions}[subscription].

[IMPORTANT]
============================================================================
The Node bundled with {kib} is not configured for FIPS 140-2. You must configure a FIPS 140-2 compliant OpenSSL3
provider. Please consult the Node.js documentation to learn how to configure your environment.
provider. Consult the Node.js documentation to learn how to configure your environment.
============================================================================

For {kib}, adherence to FIPS 140-2 is ensured by:
Expand All @@ -39,7 +40,7 @@ strength of 112 bits. As such, the Kibana keystore that stores the application
password protected with a password that satisfies this requirement. This means that the password needs to be 14 bytes
long which is equivalent to a 14 character ASCII encoded password, or a 7 character UTF-8 encoded password.

For more information on how to set this password, please see the <<change-password,keystore documentation>>.
For more information on how to set this password, refer to the <<change-password,keystore documentation>>.

===== TLS keystore and keys

Expand Down
1 change: 1 addition & 0 deletions docs/user/security/index.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -46,3 +46,4 @@ include::authorization/index.asciidoc[]
include::authorization/kibana-privileges.asciidoc[]
include::api-keys/index.asciidoc[]
include::role-mappings/index.asciidoc[]
include::fips-140-2.asciidoc[]

0 comments on commit c37004a

Please sign in to comment.