FIPS for AlmaLinux

Get FIPS-validated AlmaLinux packages for regulated workloads, including the kernel,
OpenSSL, GnuTLS, NSS, and Libcrypt – kept secure with compliant patches.
TuxCare’s FIPS solutions ensure federal cryptographic compliance with
hassle-free implementation and continuous expert support.

Purchase Licenses Now Ask Us a Question

Read our comprehensive guide "Simplifying FIPS Compliance on AlmaLinux"

Read the Guide

Compliance with FIPS 140-3 from NIST is mandatory for:

U.S. and Canadian federal agencies
Government contractors
Companies providing services to the U.S. federal government

Certifying an operating system for this standard yourself requires significant investment, cryptographic expertise, and time.

Simplify your compliance process with TuxCare’s Extended Security Updates for AlmaLinux

You’ll gain a complete set of cryptographic packages validated by atsec, a NIST-accredited laboratory, ensuring ongoing security and stability for your regulated workloads – saving you time and resources while ensuring peace of mind.

FIPS 140-3 is required or recommended
under multiple compliance regimes, including:

Streamline your path to FedRAMP compliance with the all-in-one FedRAMP Bundle

Get FedRAMP

Unlock AlmaLinux FIPS 140-3 Compliance
with Extended Security Updates (ESU)

Ensure Painless FIPS 140-3
Compliance

Meet stringent US and Canadian government security standards with our FIPS-validated components, protecting against legal and financial penalties and making your products eligible for government contracts.

Accelerate Deployment and
Cut Costs

Bypass the lengthy and expensive certification process by implementing pre-certified AlmaLinux FIPS packages. This speeds up your time-to-market and reduces overall project costs, giving you a competitive edge.

Maintain Compliance-
Preserving Security

Keep your certified deployments secure with FIPS-compliant updates that fix vulnerabilities without altering validated cryptography, ensuring fast re-certification if a cryptographic vulnerability arises.

Read the Product Documentation Read About the Validation Process

Long-Term Security and Compliance for
FIPS-Certified AlmaLinux Deployments

Extended Security Updates provide high and critical security fixes to extend the AlmaLinux
lifecycle, so you can stay on a FIPS-validated AlmaLinux minor release (currently 9.2, 9.6 and
9.10) for over six years with at least a year overlap between each ESU release.

Prevent Unpatched CVEs from
Compromising Your AlmaLinux Security
Baseline Established by FIPS

Cryptographic modules are specific parts of FIPS-certified packages. Most vulnerabilities do not affect
these modules, allowing you to maintain AlmaLinux FIPS 140-3 compliance with our FIPS-compliant
security patches. If a cryptographic vulnerability arises, we will deliver a re-certified package.

FIPS 140-3 Validated Packages for
AlmaLinux 9.2

The following list contains information about the current validation statuses for FIPS-validated AlmaLinux
packages available with Extended Security Updates.

Cryptographic Module	Version String	Associated Packages	Validation Status	Certificate
Kernel Crypto API	kernel-5.14.0-284.1101.el9_2.tuxcare.11 libkcapi 1.3.1-3.el9	kernel-5.14.0-284.1101.el9_2.tuxcare.11 libkcapi-1.3.1-3.el9.x86 _64 libkcapi- hmaccalc-1.3.1-3.el9.x86 _64	Active	#5441 (ESV/CAVP)
OpenSSL	3.0.7-1d2bd88ee26b3 c90	openssl-3.0.7-20.el9_2.t uxcare.1 openssl- libs-3.0.7-20.el9_2.tuxcare.1	Active	#5482 (ESV/CAVP)
NSS	3.90.0- b84457b0165f79bf	nss- softokn-3.90.0-6.el9_2.t uxcare.1 nss-softokn- freebl-3.90.0-6.el9_2.tu xcare.1	Active	#5031 (ESV/CAVP)
Libgcrypt	1.10.0-9a1db72d64086a2f	libgcrypt-1.10.0-11.el9_2.tuxcare.1	Active	#5060 (ESV/CAVP)
GnuTLS	3.7.6-762dc32d471709a5	gnutls-3.7.6-23.el9_2.tuxcare.4 nettle-3.8-3.el9_2.tuxcare.1	Active	#5049 (ESV/CAVP)

FIPS 140-3 Validated Packages for
AlmaLinux 9.6

The following list contains information about the current validation statuses for FIPS-validated AlmaLinux
packages available with Extended Security Updates.

Cryptographic Module	Version String	Associated Packages	Validation Status	Certificate
Kernel Crypto API	5.14.0-570.62.1.el9_6.tuxcare.5 libkcapi-1.4.0-2.el9_6.tuxcare.1	kernel-5.14.0-570.62.1.el9_6.tuxcare.5 libkcapi-1.4.0-2.el9_6.tuxcare.1 libkcapi-hmaccalc-1.4.0-2.el9_6.tuxcare.1	Active	#5374 (ESV/CAVP)
OpenSSL	3.2.2-f9f9d133a30b6eb5	openssl-3.2.2-7.el9_6.tuxcare.1 openssl-libs-3.2.2-7.el9_6.tuxcare.1	Active	#5373 (ESV/CAVP)
NSS	3.101.0-5682b87ad8637390	nss-softokn-3.101.0-10.el9_6.tuxcare.4 nss-softokn-freebl-3.101.0-10.el9_6.tuxcare.4	Active	#5413 (ESV/CAVP)
Libgcrypt	1.10.0-9a1db72d64086a2f	libgcrypt-1.10.0-11.el9_2.tuxcare.1	Active	#5060 (ESV/CAVP)
GnuTLS	3.8.3-ee94f5887c35ac8f	gnutls-3.8.3-9.el9_6.tuxcare.1, nettle-3.10.1-1.el9_6.tuxcare.1	Active	#5317 (ESV/CAVP)