Tech Support
Documentation
Login
Contact Us
FIPS for AlmaLinux
Get a complete set of FIPS-validated AlmaLinux packages required for regulated
workloads, including the kernel, OpenSSL, GnuTLS, NSS, and Libcrypt, and
ensure their enduring security with FIPS-compliant patches.
Compliance with FIPS 140-3 from NIST is mandatory for:
U.S. and Canadian federal agencies
Government contractors
Companies providing services to the U.S. federal government
Certifying an operating system for this standard yourself requires significant investment, cryptographic expertise, and time.
Simplify your compliance process with TuxCare’s Extended Security Updates for AlmaLinux
You’ll gain a complete set of cryptographic packages validated by atsec, a NIST-accredited laboratory, ensuring ongoing security and stability for your regulated workloads – saving you time and resources while ensuring peace of mind.
FIPS 140-3 is required or recommended
under multiple compliance regimes, including:
-
Federal Risk and Authorization Management Program 
Federal Information Security Modernization Act
Cybersecurity Maturity Model Certification
Defense Information Systems Agency Security Technical Implementation Guide
Health Insurance Portability and Accountability Act
Payment Card Industry Data Security Standard
Criminal Justice Information Services Security Policy
The Common Criteria for Information Technology Security Evaluation
International Traffic in Arms Regulation
Gramm–Leach–Bliley Act
Unlock AlmaLinux FIPS 140-3 Compliance
with Extended Security Updates (ESU)
Ensure Painless FIPS 140-3
Compliance
Meet stringent US and Canadian government security standards with our FIPS-validated components, protecting against legal and financial penalties and making your products eligible for government contracts.
Accelerate Deployment
and
Cut Costs
Bypass the lengthy and expensive certification process by implementing pre-certified AlmaLinux FIPS packages. This speeds up your time-to-market and reduces overall project costs, giving you a competitive edge.
Maintain Compliance-
Preserving Security
Keep your certified deployments secure with FIPS-compliant updates that fix vulnerabilities without altering validated cryptography, ensuring fast re-certification if a cryptographic vulnerability arises.
Long-Term Security and Compliance for
FIPS-Certified AlmaLinux Deployments
Extended Security Updates provide high and critical security fixes to extend the AlmaLinux
lifecycle, so you can stay on a FIPS-validated AlmaLinux minor release (currently 9.2, 9.6 and
9.10) for over six years with at least a year overlap between each ESU release.
Prevent Unpatched CVEs from
Compromising Your AlmaLinux Security
Baseline Established by FIPS
Cryptographic modules are specific parts of FIPS-certified packages. Most vulnerabilities do not affect
these modules, allowing you to maintain AlmaLinux FIPS 140-3 compliance with our FIPS-compliant
security patches. If a cryptographic vulnerability arises, we will deliver a re-certified package.
FIPS 140-3 Validated Packages for
AlmaLinux 9.2
The following list contains information about the current validation statuses for FIPS-validated AlmaLinux
packages available with Extended Security Updates. Cryptographic modules that are on the Modules In Process
list have passed all lab testing, have received intermediate CAVP and ESV certificates, and the report has been
submitted to NIST to issue the final certificates.
| Cryptographic Module |
Version String | Associated Packages |
Validation Status |
Certificate |
|---|---|---|---|---|
| Kernel Crypto API | 5.14.0-284.11.1.el9_2.tux care.5 5.14.0-284.11.1.el9_2.tux care.6 libkcapi 1.3.1-3.el9 |
kernel-5.14.0-284.11.1.el9 _2.tuxcare.5 kernel-5.14.0-284.11.1.el9 _2.tuxcare.6 libkcapi-1.3.1-3.el9.x86 _64 libkcapi- hmaccalc-1.3.1-3.el9.x86 _64 |
Active | #4750 (ESV/CAVP) |
| OpenSSL | 3.0.7-1d2bd88ee26b3 c90 |
openssl-3.0.7-20.el9_2.t uxcare.1 openssl- libs-3.0.7-20.el9_2.tuxcare.1 |
Review Pending (submitted for interim validation) |
TBA (ESV/CAVP) |
| NSS | 3.90.0- b84457b0165f79bf |
nss- softokn-3.90.0-6.el9_2.t uxcare.1 nss-softokn- freebl-3.90.0-6.el9_2.tu xcare.1 |
Review Pending | TBA (ESV/CAVP) |
| Libgcrypt | 1.10.0-19b8f37bc86846fe | libgcrypt-1.10.0-10.el9_2. tuxcare.3 |
Review Pending | TBA (ESV/CAVP) |
| GnuTLS | 3.7.6-396796fe0a32b434 | gnutls-3.7.6-23.el9_2.tu xcare.3 nettle-3.8-3.el9_2.tuxcare.1 |
Review Pending | TBA (ESV/CAVP) |
24/7/365 Technical
Support Access
Get round-the-clock access to our technical support engineers.
Our ESU support includes assistance with:
- ESU repository setup issues
- Package update problems (package conflicts, missing dependencies)
- AlmaLinux FIPS and CVE-related questions
- ePortal issues
- AlmaLinux kernel crash issues (root cause analysis)
Ready to Purchase Your
Extended Support Updates
Licenses Online?
Have More Questions
About FIPS or Extended
Security Updates?
