Home
Security Hardening
EDB PostgreSQL Advanced Server OS Linux V2R1

EDB PostgreSQL Advanced Server OS Linux V2R1

PPS9-00-009500 – The EDB Postgres Advanced Server must maintain the confidentiality and integrity of information during preparation for transmission.
Details Information can be either unintentionally or maliciously disclosed or modified during preparation for transmission, including, for example, during aggregation,...
PPS9-00-009600 – The EDB Postgres Advanced Server must maintain the confidentiality and integrity of information during reception.
Details Information can be either unintentionally or maliciously disclosed or modified during reception, including, for example, during aggregation, at protocol...
PPS9-00-012700 – The EDB Postgres Advanced Server must implement NIST FIPS 140-2 validated cryptographic modules to provision digital signatures.
Details Use of weak or untested encryption algorithms undermines the purposes of utilizing encryption to protect data. The application must...
PPS9-00-012800 – The EDB Postgres Advanced Server must implement NIST FIPS 140-2 validated cryptographic modules to generate and validate cryptographic hashes.
Details Use of weak or untested encryption algorithms undermines the purposes of utilizing encryption to protect data. The application must...
PPS9-00-012900 – The EDB Postgres Advanced Server must implement NIST FIPS 140-2 validated cryptographic modules to protect unclassified information requiring confidentiality and cryptographic protection, in accordance with the requirements of the data owner.
Details Use of weak or untested encryption algorithms undermines the purposes of utilizing encryption to protect data. The application must...
PPS9-00-013200 – The EDB Postgres Advanced Server must be configured on a platform that has a NIST certified FIPS 140-2 installation of OpenSSL.
Details Postgres uses OpenSSL for the underlying encryption layer. Currently only Red Hat Enterprise Linux is certified as a FIPS...
PPS9-00-009100 – The EDB Postgres Advanced Server must only accept end entity certificates issued by DoD PKI or DoD-approved PKI Certification Authorities (CAs) for the establishment of all encrypted sessions – CAs
Details Only DoD-approved external PKIs have been evaluated to ensure that they have security controls and identity vetting procedures in...
PPS9-00-009200 – The EDB Postgres Advanced Server must implement cryptographic mechanisms to prevent unauthorized modification of organization-defined information at rest (to include, at a minimum, PII and classified information) on organization-defined information system components.
Details DBMSs handling data requiring ‘data at rest’ protections must employ cryptographic mechanisms to prevent unauthorized disclosure and modification of...

EDB PostgreSQL Advanced Server OS Linux V2R1

PPS9-00-009500 – The EDB Postgres Advanced Server must maintain the confidentiality and integrity of information during preparation for transmission.

PPS9-00-009600 – The EDB Postgres Advanced Server must maintain the confidentiality and integrity of information during reception.

PPS9-00-012700 – The EDB Postgres Advanced Server must implement NIST FIPS 140-2 validated cryptographic modules to provision digital signatures.

PPS9-00-012800 – The EDB Postgres Advanced Server must implement NIST FIPS 140-2 validated cryptographic modules to generate and validate cryptographic hashes.

PPS9-00-012900 – The EDB Postgres Advanced Server must implement NIST FIPS 140-2 validated cryptographic modules to protect unclassified information requiring confidentiality and cryptographic protection, in accordance with the requirements of the data owner.

PPS9-00-013200 – The EDB Postgres Advanced Server must be configured on a platform that has a NIST certified FIPS 140-2 installation of OpenSSL.

PPS9-00-009100 – The EDB Postgres Advanced Server must only accept end entity certificates issued by DoD PKI or DoD-approved PKI Certification Authorities (CAs) for the establishment of all encrypted sessions – CAs

PPS9-00-009200 – The EDB Postgres Advanced Server must implement cryptographic mechanisms to prevent unauthorized modification of organization-defined information at rest (to include, at a minimum, PII and classified information) on organization-defined information system components.