Cloudera Docs

Transition from FIPS 140-2 to FIPS 140-3

Review the compliance timeline and critical upgrade limitations for transitioning from FIPS 140-2 to FIPS 140-3 in Cloudera Base on premises.

The NIST Cryptographic Module Validation Program (CMVP) has set a strict timeline for the transition from FIPS 140-2 to FIPS 140-3, with all active FIPS 140-2 certificates moving to Historical status on September 21, 2026.

To maintain federal compliance requirements, Cloudera recommends updating your security modules to FIPS 140-3. FIPS 140-3 support is available from Cloudera Base on premises 7.3.2 SP1 release. For more information about the differences between FIPS 140-2 and FIPS 140-3, see Key differences between FIPS 140-2 and FIPS 140-3.