# Fips 140-2?

**URL:** <https://forum.pritunl.com/t/fips-140-2/1873>\
**Category:** Pritunl VPN\
**Created:** [March 6, 2024, 7:37pm UTC](https://forum.pritunl.com/t/fips-140-2/1873 "2024-03-06T19:37:45Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![huafist](https://forum.pritunl.com/letter_avatar_proxy/v4/letter/h/c2a13f/32.png) [@huafist](https://forum.pritunl.com/u/huafist)\
**Post date:** [March 6, 2024, 7:37pm UTC](https://forum.pritunl.com/t/fips-140-2/1873/1 "2024-03-06T19:37:45Z")

</div>

Hey everyone, I have, what I would imagine, is a simple question - yet I cannot find an answer anywhere in the documentation. Is the PritUNL server FIPS 140-2 compliant? I know there’s an OpenSSL FIPS module, but I don’t see any mention of it.

---

<div class="post-metadata">

**Author:** ![zach](https://forum.pritunl.com/user_avatar/forum.pritunl.com/zach/32/1105_2.png) [@zach](https://forum.pritunl.com/u/zach)\
**Post date:** [March 6, 2024, 8:35pm UTC](https://forum.pritunl.com/t/fips-140-2/1873/2 "2024-03-06T20:35:53Z")

</div>

Configuring FIPS would require significant modifications, there’s no plans on adding support for it. The [**high security environment documentation**](https://docs.pritunl.com/docs/high-security) has more information on configuring security options.

---

<div class="post-metadata">

**Author:** ![huafist](https://forum.pritunl.com/letter_avatar_proxy/v4/letter/h/c2a13f/32.png) [@huafist](https://forum.pritunl.com/u/huafist)\
**Post date:** [March 7, 2024, 4:29pm UTC](https://forum.pritunl.com/t/fips-140-2/1873/3 "2024-03-07T16:29:02Z")

</div>

Thank you for the response. That’s unfortunate. We have a push to become DFARS certified, and one of the requirements is a FIPS 140-2 compliant VPN.

---

<div class="post-metadata">

**Author:** ![ellymarins](https://forum.pritunl.com/letter_avatar_proxy/v4/letter/e/49beb7/32.png) [@ellymarins](https://forum.pritunl.com/u/ellymarins)\
**Post date:** [September 19, 2025, 10:21am UTC](https://forum.pritunl.com/t/fips-140-2/1873/4 "2025-09-19T10:21:04Z")

</div>

The FIPS 140-2 is a standard for evaluating the efficacy of cryptographic devices. It is the industry standard for securing digital data and maintaining communication system integrity. Before being certified as compliant, cryptographic modules must fulfill stringent performance, security, and availability standards. The PritUNL server itself is not [FIPS 140-2](https://signmycode.com/blog/what-is-fips-detailed-guide-on-fips-140-2) certified. It relies on **OpenSSL** for its cryptography, and while there is an OpenSSL FIPS 140-2 validated module, PritUNL does not specifically advertise support or certification for running in a FIPS-compliant mode. If strict FIPS 140-2 compliance is required, you would need to verify that the server is built and configured against the OpenSSL FIPS module.