4.2 Ensure Federal Information Processing Standard (FIPS) is enabled

Information

The Federal Information Processing Standard (FIPS) is a computer security standard used to certify software modules and libraries that encrypt and decrypt data securely. You can configure MongoDB to run with a FIPS 140-2 certified library for OpenSSL.
Rationale:
FIPS is industry standard that dictates how data should be encrypted in rest and during transmission.

Solution

Configuring FIPS mode, ensure that your certificate is FIPS compliant. Run mongod or mongos instance in FIPS mode.
Make changes to configuration file, to configure your mongod or mongos instance to use FIPS mode, shut down the instance and update the configuration file with the following setting:
net:
ssl:
FIPSMode: true
Start mongod or mongos instance with a configuration file.
mongod --config /etc/mongod.conf
Default Value:
Not configured

See Also

https://workbench.cisecurity.org/files/1705

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-13, CSCv6|14.2, CSCv6|14.5

Plugin: Unix

Control ID: 55f554f70c48ed423c88231edb4f790f506ea2d8879a05214bb4a8c43f27131c