FIPS 140-3 Builds

​

Overview

FIPS 140-3 (Federal Information Processing Standard 140-3) is a cryptographic module validation standard published by NIST (National Institute of Standards and Technology). It certifies that a software module’s cryptographic implementations — encryption algorithms, key generation, hashing, and random number generation — meet federal security requirements for protecting sensitive information. FIPS 140-3 is the current version of the standard, superseding FIPS 140-2. The Maverics Orchestrator uses the Go Cryptographic Module v1.0.0 (CMVP certificate #5247, Geomys), a FIPS 140-3 Level 1 validated cryptographic module. FIPS-compliant builds of the Orchestrator are available today.

​

Who Needs FIPS 140-3

FIPS 140-3 compliant cryptography is typically required by:

• Federal and government agencies — Required by FISMA (Federal Information Security Modernization Act) for all federal information systems
• Defense contractors — Organizations handling classified or sensitive government data under contracts that mandate FIPS-validated cryptographic modules
• Healthcare organizations — Those handling CUI (Controlled Unclassified Information) under NIST SP 800-171 requirements
• Financial institutions — Organizations with specific regulatory requirements mandating FIPS-validated cryptography for data protection

​

Compliance Boundary

The Maverics Orchestrator achieves FIPS 140-3 compliance by consuming the Go Cryptographic Module in its approved mode. The relevant certificate is the module’s CMVP #5247. This compliance claim covers the Orchestrator data plane only. The Maverics Console sits outside this boundary and makes no FIPS claim. Offering a FIPS download from the Console does not extend the compliance claim to the Console itself.

​

Recommendation

Unless your organization specifically requires FIPS 140-3 compliant cryptography, use the standard Orchestrator builds for the most complete feature set. The standard builds include the same security best practices including TLS encryption, secure key management, and strong cryptographic defaults, without the algorithm restrictions imposed by FIPS compliance requirements.

​

Download

FIPS builds are available through the Maverics Console at maverics.strata.io. The download experience follows the same steps as the standard Orchestrator. Open any Deployment and use the Download Orchestrator Software modal. A dedicated FIPS 140-3 Compliant Build section appears below the standard platform installers. The FIPS archive (maverics-orchestrator_fips.zip) includes:

• Orchestrator binaries for Red Hat and Ubuntu
• Container image tarball
• FIPS 140-3 compliance guide (PDF)

It installs with the same package name, path, and service unit as the standard build. Verify the SHA-256 checksum shown in the modal after downloading.

​

Related Pages