The EDB Postgres Advanced Server must be configured on a platform that has a NIST certified FIPS 140-2 installation of OpenSSL.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-69085	PPS9-00-013200	SV-83689r1_rule		High

Description
Postgres uses OpenSSL for the underlying encryption layer. Currently only Red Hat Enterprise Linux is certified as a FIPS 140-2 distribution of OpenSSL. For other operating systems, users must obtain or build their own FIPS 140-2 OpenSSL libraries.

STIG	Date
EDB Postgres Advanced Server Security Technical Implementation Guide	2017-11-17

Details

Check Text ( C-69559r1_chk )
If the Postgres Plus Advanced Server is not installed on Red Hat Enterprise Linux (RHEL), this is a finding.

Fix Text (F-75271r1_fix)
Install Postgres Plus Advanced Server on RHEL or ensure that FIPS 140-2 certified OpenSSL libraries are used by the DBMS.