Is JIRA FIPS 140-2 compliant on premises?

[AD]

Gov't regulation required FIPS 140-2 mode to be enable on the server. JIRA and Confluence are FIPS 140-2 compliant, means if installation of these tools on premises servers will not be a showstopper with FIPS 140-2 enabled on the server.

Please advise ASAP.

Thank you,

[Nic Brough -Adaptavist-]

That's a function of the operating system and security layers, not the application.

When it comes to compliance with assorted arbitrary rule sets, see https://www.atlassian.com/trust/faq on the subject.

[Matt Riley]

Sorry to revive a dead thread, but this is the top Google result.

This is not completely correct, if your app does not do encryption itself but depends on the operating system, then it is true.

However, if any code doing encryption is included in the app or is linked with a library that is not compliant, then it is incorrect.

There is no way to tell without a formal answer or inspecting all the code.

It would help if we had a formal answer from Atlassian.

[Christopher D Holcombe Sr_]

I would also like an answer to this question...