Fips 140-2 mode for the opensearch

Is there a way to enable the FIPS compliance mode in OpenSearch? It also needs to have FIPS 140-2 enabled JVM. If there is guidance somewhere can you point it to the documentation? I would like to start testing it. I don’t see any mention of the fips on the security plugin Github repo. Please help!



We are also interested in this. I see Make bouncycastle dependency abstracted · Issue #1500 · opensearch-project/security · GitHub has been triaged - does this mean it has been added to the roadmap?

Any information around FIPS compliance would be greatly appreciated.

1 Like