Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The EDB Postgres Advanced Server must be configured on a platform that has a NIST certified FIPS 140-2 installation of OpenSSL.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-213668 | PPS9-00-013200 | SV-213668r508024_rule | High |
| Description |
|---|
| Postgres uses OpenSSL for the underlying encryption layer. Currently only Red Hat Enterprise Linux is certified as a FIPS 140-2 distribution of OpenSSL. For other operating systems, users must obtain or build their own FIPS 140-2 OpenSSL libraries. |
| STIG | Date |
|---|---|
| EDB Postgres Advanced Server Security Technical Implementation Guide | 2020-09-23 |
Details
| Check Text ( C-14890r290316_chk ) |
|---|
| If the Postgres Plus Advanced Server is not installed on Red Hat Enterprise Linux (RHEL), this is a finding. |
| Fix Text (F-14888r290317_fix) |
|---|
| Install Postgres Plus Advanced Server on RHEL or ensure that FIPS 140-2 certified OpenSSL libraries are used by the DBMS. |