vCenter Server and FIPS

In vSphere 7.0 Update 2 and later, you can enable FIPS-validated cryptography on the vCenter Server Appliance.

FIPS 140-2 is a U.S. and Canadian government standard that specifies security requirements for cryptographic modules. vSphere uses FIPS-validated cryptographic modules to match those specified by the FIPS 140-2 standard. The goal of vSphere FIPS support is to ease the compliance and security activities in various regulated environments.

In vSphere 6.7 and later, ESXi and vCenter Server use FIPS-validated cryptography to protect management interfaces and the VMware Certificate Authority (VMCA).

vSphere 7.0 Update 2 and later includes additional FIPS-validated cryptography to the vCenter Server Appliance.

Note: vSphere favors compatibility over FIPS, so some components have considerations to be aware of. See Considerations When Using FIPS.