STIGQter: STIG Summary: MongoDB Enterprise Advanced 7.x Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Jul 2026:

MongoDB must use NIST FIPS 140-2 or 140-3 validated cryptographic modules for cryptographic operations.

DISA Rule

SV-265922r1028799_rule

Vulnerability Number

V-265922

Group Title

SRG-APP-000179-DB-000114

Rule Version

MD7X-00-004400

Severity

CAT I

CCI(s)

CCI-000803 - Implement mechanisms for authentication to a cryptographic module that meet the requirements of applicable laws, Executive Orders, directives, policies, regulations, standards, and guidance for such authentication.
CCI-002450 - Implement organization-defined types of cryptography for each specified cryptography use.

Weight

Fix Recommendation

Enable FIPS mode for MongoDB Enterprise.

Edit the MongoDB database configuration file (default location: /etc/mongod.conf) to contain the following parameter setting:

net:
tls:
FIPSMode: true

Restart the MongoDB service from the OS.

$ sudo systemctl restart mongod

For the operating system finding, refer to the appropriate operating system documentation for the procedure to install, configure, and test FIPS mode.

Check Contents

Verify that FIPSMode: true is configured in the mongod.conf file (default location: /etc/mongod.conf) as shown below:

net:
tls:
FIPSMode: true

If net.tls.FIPSMode is not present or not configured as shown above in the MongoDB configuration file, this is a finding.

Alternatively, run the following command from the MongoDB shell:

> db.getSiblingDB("admin").runCommand({getCmdLineOpts: 1}).parsed.net.tls.FIPSMode

If the server is running with FIPS mode, this command will return "true". Any other output or no output is a finding.

Verify that FIPS has been enabled at the OS level. Refer to the OS specific documentation on how to verify.

Vulnerability Number

V-265922

Documentable

False

Rule Version

MD7X-00-004400

Severity Override Guidance

Check Content Reference

Target Key

5637