EDR: Is EDR FIPS Compliant?

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Is EDR FIPS Compliant?

Environment

• EDR Server: All Supported Versions
• EDR Sensor: All Supported Versions

Resolution

• All EDR Server versions since 6.5 on RHEL7/Centos7 are FIPS 140-2 Compliant
• EDR Windows Sensors are FIPS 140-2 Compliant
• Currently EDR Linux and Mac Sensors are not FIPS Compliant
• Please see the sensor support grid at the following location

Additional Information

https://docs.vmware.com/en/VMware-Carbon-Black-EDR/7.7.1/vmw-cb-edr-ug/GUID-CD9AA48E-7890-4BE7-951D-073856C64840.html?hWord=N4IghgNiBcIKIBEBKACAygUwHYGcD2ATigGICSACmiAL5A
https://community.carbonblack.com/t5/Knowledge-Base/EDR-Services-fail-to-start-with-FIPS-enabled/ta-p/78939
https://community.carbonblack.com/t5/Endpoint-Detection-and-Response/VMware-Carbon-Black-EDR-Announcement-EDR-Server-FIPS-140-2/m-p/117186/thread-id/5255
https://community.carbonblack.com/t5/Knowledge-Base/CB-Response-Is-the-CB-Response-Linux-sensor-FIPS-compliant/ta-p/86882