I had a question today from a customer wondering if Laserfiche is compliant with FIPS-140-2. Does anybody know this?
Thanks
Laserfiche should be compliant with FIPS as most of the products(Forms, Workflow for example) should have tested that once FIPS is enabled from Windows, the products can work as well.
Thank you so much!
Does anyone know what FIPS 140-2 Certification Number this would use? We have to show a copy of the actual cert this is using.
Work for law enforcement agency and need to know if laserfiche is FIP 140-2 compliant and what measures need to be enabled to make it that? What certification number it would use?
I'm just guessing, but I wonder if you would use the certification number for Windows itself, since it's the software that's enforcing the compliance (e.g. blocking the use of non-compliant algorithms). Laserfiche software hasn't been separately certified, as far as I am aware.
Adding for reference:
The FIPS program validates low-level cryptographic modules, not applications that can use those validated modules such as Laserfiche. Here is a link to Microsoft's FIPS Validation page that describes how to enable FIPS mode in Windows and lists the FIPS Certificate #s for each version: https://technet.microsoft.com/en-us/library/cc750357.aspx
For example, Windows Server 2016's is #2937: https://csrc.nist.gov/projects/cryptographic-module-validation-program/Certificate/2937
More information from Microsoft's Trust Center: https://www.microsoft.com/en-us/trustcenter/Compliance/FIPS
Does Laserfiche have a FIPS 140-2 Compliance Certificate? Our customers want to refer to the certificate to which can help them validate that Laserfiche products are FIPS compliant.
Hi Nishit,
Please see my post on this thread that addresses your question: https://answers.laserfiche.com/questions/124590/FIPS1402-Compliance#143474
Laserfiche utilizes Microsoft's underlying FIPS certified cryptomodules when FIPS-mode is enabled on Windows Server.
There is a great free utility called IISCrypto by Nartac software that can help you enable FIPS-mode on your servers: https://www.nartac.com/Products/IISCrypto