You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/fips.md
+14-6Lines changed: 14 additions & 6 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,10 +1,18 @@
1
1
# FIPS compliance
2
2
3
-
--8<--- "pro-build-announcement.md"
3
+
<!-- Percona Server for MySQL Pro includes the [capabilities](psmysql-pro.md#capabilities) that are typically requested by large enterprises. Percona Server for MySQL Pro contains packages created and tested by Percona. These packages are supported only for Percona Customers with a subscription. -->
4
4
5
-
The Federal Information Processing Standards (FIPS) are a set of U.S. government standards that ensure the security of computer systems for non-military government agencies and contractors. These standards specify how to perform cryptographic operations, such as encryption, hashing, and digital signatures. FIPS mode is a mode of operation that enforces these standards and rejects any non-compliant algorithms or parameters.
5
+
<!-- [Become a Percona Customer](https://www.percona.com/about/contact){.md-button} -->
6
6
7
-
Percona Server for MySQL implements the same level of FIPS support as MySQL. Percona Server for MySQL can run in FIPS mode if a FIPS-enabled OpenSSL library and FIPS Object Module are available at runtime or if compiled using a FIPS-validated version of OpenSSL. You can also receive this functionality by [building Percona Server for MySQL from source code](compile-percona-server.md).
7
+
The Federal Information Processing Standards (FIPS) are a set of regulations mandated by the United States government that ensure the security of computer systems for non-military government agencies and their contractors. These standards specify how to perform cryptographic operations, such as encryption, hashing, and digital signatures. FIPS mode is a mode of operation that enforces these standards and rejects any non-compliant algorithms or parameters.
8
+
9
+
Percona Server for MySQL can run in FIPS mode if a FIPS-enabled OpenSSL library and FIPS Object Module are available at runtime or if compiled using a FIPS-validated version of OpenSSL. FIPS mode remains off by default and must be enabled via [OS/OpenSSL configuration](#prerequisites).
10
+
11
+
## Version changes
12
+
13
+
Introduced in Percona Server for MySQL Pro build for [8.4.0-1](release-notes/8.4.0-1.md). You can also receive this functionality by [building Percona Server for MySQL from source code](compile-percona-server.md).
14
+
15
+
[Percona Server for MySQL 8.4.0-5](release-notes/8.4.7-7.md) includes the FIPS-capable binaries in all builds. No Pro build is required for FIPS compatibility.
8
16
9
17
## Prerequisites
10
18
@@ -26,7 +34,7 @@ To prepare Percona Server for MySQL for FIPS certification, do the following:
26
34
27
35
If you enable FIPS on Ubuntu Pro with `$ sudo pro enable fips-updates` and then disable FIPS with `$ sudo pro disable fips-updates`, Percona Server for MySQL may stop operating properly. For example, if you disable FIPS on Ubuntu Pro with `$ sudo pro disable fips-updates` and enable the FIPS mode on Percona Server with `ssl-fips-mode=ON`, Percona Server may not load the SSL certificate.
28
36
29
-
* Deploy [Percona Server for MySQL from the Pro build](psmysql-pro.md), which is built and tested on operating systems with FIPS pre-approved OpenSSL packages.
37
+
<!--* Deploy [Percona Server for MySQL from the Pro build](psmysql-pro.md), which is built and tested on operating systems with FIPS pre-approved OpenSSL packages.-->
30
38
31
39
## The FIPS mode variables
32
40
@@ -66,10 +74,10 @@ To ensure that the FIPS mode is enabled, do the following:
66
74
A FIPS-approved version of the OpenSSL cryptographic library has been detected in the operating system with a properly configured FIPS module available for loading. Percona Server for MySQL will load this module and run in FIPS mode.
67
75
```
68
76
69
-
## Next steps
77
+
<!-- ## Next steps
70
78
71
79
[Install Percona Server for MySQL Pro](install-pro.md){.md-button}
72
80
73
81
If you already use Percona Server for MySQL, you can
74
82
75
-
[Upgrade to Percona Server for MySQL Pro](upgrade-pro.md){.md-button}
83
+
[Upgrade to Percona Server for MySQL Pro](upgrade-pro.md){.md-button} -->
Copy file name to clipboardExpand all lines: docs/installation.md
+4-4Lines changed: 4 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -4,15 +4,15 @@ Before installing, read the [Percona Server for MySQL {{vers}} Release notes](re
4
4
5
5
We gather [Telemetry data] in the Percona packages and Docker images.
6
6
7
-
## Install Percona Server for MySQL from Repositories
7
+
## Install Percona Server for MySQL from repositories
8
8
9
-
Percona provides repositories for yum (`RPM` packages for Red Hat, CentOS and Amazon Linux AMI) and apt (`.deb` packages for Ubuntu and Debian) for software such as Percona Server for MySQL, Percona XtraBackup, and Percona Toolkit. This makes it easy to install and update your software and its dependencies through your operating system’s package manager. This is the recommended way of installing where possible.
9
+
Percona provides repositories for yum (`RPM` packages for Red Hat) and apt (`.deb` packages for Ubuntu and Debian) for software such as Percona Server for MySQL, Percona XtraBackup, and Percona Toolkit. This makes it easy to install and update your software and its dependencies through your operating system’s package manager. This is the recommended way of installing where possible.
10
10
11
11
The following guides describe the installation process for using the official Percona repositories for the `.deb` and `.rpm` packages.
12
12
13
-
[Install Percona Server for MySQL on Debian and Ubuntu](apt-repo.md){.md-button} [Install Percona Server for MySQL on Red Hat Enterprise Linux and CentOS](yum-repo.md){.md-button}
13
+
[Install Percona Server for MySQL on Debian and Ubuntu](apt-repo.md){.md-button} [Install Percona Server for MySQL on Red Hat Enterprise Linux](yum-repo.md){.md-button}
14
14
15
-
## Other Installation Methods
15
+
## Other installation methods
16
16
17
17
[Install Percona Server for MySQL from Binaries](binary-tarball-install.md){.md-button} <br> [Compile Percona Server for MySQL from Source](source-tarball.md){.md-button} <br> [Run Percona Server for MySQL in a Docker container](docker.md){.md-button}
Copy file name to clipboardExpand all lines: docs/quickstart-overview.md
-3Lines changed: 0 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -37,9 +37,6 @@ The following guides walk you through the setup process and working with a datab
37
37
[Choose your next steps:material-arrow-right:](quickstart-next-steps.md){.md-button}
38
38
39
39
40
-
41
-
42
-
43
40
[the Quickstart for the Percona Operator for MySQL based on the Percona Server for MySQL using Helm]: https://docs.percona.com/percona-operator-for-mysql/ps/helm.html
44
41
45
42
[the Quickstart for the Percona Operator for MySQL based on the Percona Server for MySQL using Minikube]: https://docs.percona.com/percona-operator-for-mysql/ps/minikube.html
Copy file name to clipboardExpand all lines: docs/yum-repo.md
-7Lines changed: 0 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -41,13 +41,6 @@ The RPM builds contain ARM packages with the `aarch64.rpm` extension.
41
41
42
42
RHEL 8+ and other EL8+ systems enable the MySQL module by default. This module hides the Percona-provided packages and the module must be disabled to make these packages visible.
43
43
44
-
45
-
## Percona Server for MySQL PRO
46
-
47
-
--8<--- "pro-build-announcement.md"
48
-
49
-
[Install Percona Server for MySQL Pro](install-pro.md){.md-button}
0 commit comments