---
title: FIPS 140-2 compliance
description: The Federal Information Processing Standard (FIPS) Publication 140-2, (FIPS PUB 140-2), titled "Security Requirements for Cryptographic Modules" is a...
url: https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4226/deploy-manage/security/fips
products:
  - APM
  - Beats
  - Elastic Agent
  - Elasticsearch
  - Fleet
  - Kibana
---

# FIPS 140-2 compliance
The Federal Information Processing Standard (FIPS) Publication 140-2, (FIPS PUB 140-2), titled "Security Requirements for Cryptographic Modules" is a U.S. government computer security standard used to approve cryptographic modules.
- [Elasticsearch](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4226/deploy-manage/security/fips-es) offers a FIPS 140-2 compliant mode and as such can run in a FIPS 140-2 configured JVM.
- [Kibana](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4226/deploy-manage/security/fips-kib) offers a FIPS 140-2 compliant mode and as such can run in a Node.js environment configured with a FIPS 140-2 compliant OpenSSL3 provider.
- Some [Ingest tools](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4226/deploy-manage/security/fips-ingest), including Elastic Agent, Fleet, Filebeat, Metricbeat, and APM Server, are available as FIPS compatible binaries and can be configured to use FIPS 140-2 compliant cryptography.

<note>
  If you are running Elasticsearch through Elastic Cloud on Kubernetes, refer to [ECK FIPS compatibility](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4226/deploy-manage/deploy/cloud-on-k8s/deploy-fips-compatible-version-of-eck).FIPS compliance is not officially supported in Elastic Cloud Enterprise (ECE). While ECE may function on FIPS-enabled systems, this configuration has not been validated through our testing processes and is not recommended for production environments.
</note>