STIGQter: STIG Summary: MongoDB Enterprise Advanced 8.x Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 26 Jan 2026:

MongoDB must use NIST FIPS 140-2/140-3 validated cryptographic modules for cryptographic operations.

DISA Rule

SV-279354r1179510_rule

Vulnerability Number

V-279354

Group Title

SRG-APP-000179-DB-000114

Rule Version

MD8X-00-004200

Severity

CAT I

CCI(s)

• CCI-000803 - Implement mechanisms for authentication to a cryptographic module that meet the requirements of applicable laws, Executive Orders, directives, policies, regulations, standards, and guidance for such authentication.

Weight

10

Fix Recommendation

Enable FIPS mode for MongoDB Enterprise.

Edit the MongoDB database configuration file (default location /etc/mongod.conf) to contain the following parameter setting:

net:
tls:
FIPSMode: true

Restart the MongoDB service from the OS.

$ sudo systemctl restart mongod

For the operating system finding, refer to the appropriate operating system documentation for the procedure to install, configure, and test FIPS mode.

Check Contents

Verify that FIPSMode: true is configured in the mongod.conf file (default location /etc/mongod.conf) as shown below:

net:
tls:
FIPSMode: true

If net.tls.FIPSMode is not present or not configured as shown above in the MongoDB configuration file, this is a finding.

Alternatively, run the following command from the MongoDB shell:

> db.getSiblingDB("admin").runCommand({getCmdLineOpts: 1}).parsed.net.tls.FIPSMode

If the server is running with FIPS mode, this command will return "true". Any other output or no output is a finding.

Verify FIPS has been enabled at the OS level. Refer to the OS-specific documentation on how to verify.

Vulnerability Number

V-279354

Documentable

False

Rule Version

MD8X-00-004200

Severity Override Guidance

Verify that FIPSMode: true is configured in the mongod.conf file (default location /etc/mongod.conf) as shown below:

net:
tls:
FIPSMode: true

If net.tls.FIPSMode is not present or not configured as shown above in the MongoDB configuration file, this is a finding.

Alternatively, run the following command from the MongoDB shell:

> db.getSiblingDB("admin").runCommand({getCmdLineOpts: 1}).parsed.net.tls.FIPSMode

If the server is running with FIPS mode, this command will return "true". Any other output or no output is a finding.

Verify FIPS has been enabled at the OS level. Refer to the OS-specific documentation on how to verify.

Check Content Reference

M

Target Key

5728