--- title: "Ubuntu Pro FIPS for GCP\n | Ubuntu" description: 'Ubuntu Pro FIPS for Google Cloud: FIPS 140 certified cryptographic modules for FedRAMP, HIPAA, and PCI-DSS compliance.' url: https://ubuntu.com/gcp/fips?format=md keywords: index, follow --- # Ubuntu Pro FIPS for Google Cloud compliance ## For Google Cloud compliance in production environments. Ubuntu Pro FIPS is a FIPS 140-3 out-of-the-box certified image for Google Cloud. Built upon the enhanced stability and security features of [Ubuntu Pro](https://ubuntu.com/pro), Ubuntu FIPS is a critical foundation for federal programs and government contractors. [Launch Ubuntu Pro FIPS 22.04 LTS ›](https://console.cloud.google.com/compute/instancesAdd?imageId=4467206581577450407&imageProjectId=ubuntu-os-pro-cloud) --- ## What’s included in Ubuntu Pro FIPS? --- FIPS compliant by default FIPS 140-3 modules pre-enabled out of the box with Ubuntu Pro FIPS. No extra configuration steps required. --- FedRAMP compliance Operate environments under the FedRAMP compliance regime, with FIPS 140-3 certified modules. --- CIS and DISA STIG Automated auditing and remediation for the DISA For companies looking to leverage industry benchmarks for hardening, Ubuntu Pro makes two leading [implementation guides](https://ubuntu.com/security/certifications/docs/disa-stig/installation) available. --- HIPAA, PCI, ISO compliance Healthcare, financial services, insurance, and other organizations that operate in heavily-regulated industries ensure compliance with HIPAA, PCI, and ISO. --- Predictable and Secure Ubuntu Pro FIPS is based on [Ubuntu Pro premium images](https://ubuntu.com/gcp/pro), with Google Cloud optimizations built-in and the most comprehensive open-source security coverage in the industry. --- Common Criteria EAL2 certification Ubuntu Pro FIPS has been evaluated to assurance level EAL2, with Common Criteria certification. --- Open-source security Ubuntu Pro adds security coverage for the most important open-source applications, such as Apache Kafka, NGINX, MongoDB, Redis, PostgreSQL, and more. --- Up to 15-year lifetime Canonical backs Ubuntu Pro FIPS for up to 15 years, ensuring security updates are available throughout, with a guaranteed upgrade path. --- Priced for the cloud Ubuntu Pro FIPS pricing tracks the underlying compute cost, starting at under $0.01 for the smallest f1-micro instance type, and ramping down to less than 1% of hourly compute. --- [Let's talk Ubuntu FIPS](https://ubuntu.com/gcp#get-in-touch) --- ## Launch Ubuntu Pro FIPS for Google Cloud * ### Ubuntu Pro FIPS 22.04 LTS Ubuntu Pro FIPS 22.04 LTS includes a Google Cloud-optimized FIPS-certified 5.15 kernel and other FIPS-certified modules pre-enabled out of the box. It also provides extended security maintenance through April 2032. [Launch now](https://console.cloud.google.com/compute/instancesAdd?imageId=4467206581577450407&imageProjectId=ubuntu-os-pro-cloud) * ### Ubuntu Pro FIPS 20.04 LTS Ubuntu 20.04 LTS includes a Google Cloud-optimized, FIPS-certified 5.4 kernel and other FIPS-certified modules pre-enabled out of the box. Ubuntu Pro FIPS provides extended security maintenance through April 2030. [Launch now](https://console.cloud.google.com/compute/) * ### Ubuntu Pro FIPS 18.04 LTS Ubuntu Pro FIPS 18.04 LTS includes a Google Cloud-optimized FIPS-certified 4.15 kernel and other FIPS-certified modules pre-enabled out of the box. Ubuntu Pro FIPS provides extended security maintenance through April 2028. [Launch now](https://console.cloud.google.com/compute/) --- ## Google Cloud compliance made easy ### Ubuntu Pro FIPS Google Cloud compliance made easy With Google Cloud, US government agencies and their partners have been able to combine unparalleled flexibility, breakthrough innovation, world class security, and Google Cloud compliance. However, when it comes to running a secure and compliant enterprise Linux on Google Cloud, IT departments are often left with expensive options that sacrifice innovation for compliance. --- [Read the blog](https://ubuntu.com/blog/enable-fips-on-google-cloud?_ga=2.141689265.244939625.1673447269-831484753.1620826435) --- ## FIPS-certified Ubuntu components for Google Cloud | Ubuntu LTS | FIPS certified component | Description | Version | CMVP Certificate | | --- | --- | --- | --- | --- | | 22.04 | Google Cloud Kernel | Kernel optimized for use in Google Cloud | 5.15 | (pending) | | 22.04 | openssl | General purpose cryptographic library that includes TLS implementation | 3.0.2 | [4794](https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/4794) | | 22.04 | strongswan | IPSec-based VPN solution library | 5.9.5 | [4911](https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/4911) | | 22.04 | libgnutls30 | A portable library which implements the TLS and DTLS protocols | 3.7.3 | [4855](https://csrc.nist.gov/projects/cryptographic-module-validation-program/Certificate/4855) | | 22.04 | libgcrypt20 | The GNUPG cryptographic general purpose library (provides fully certified full disk encryption) | 1.9.4 | [4793](https://csrc.nist.gov/projects/cryptographic-module-validation-program/Certificate/4793) | | 22.04 | libkcapi1 | Linux Kernel Crypto API User Space Interface Library | 1.4.0 | [4894](https://csrc.nist.gov/projects/cryptographic-module-validation-program/Certificate/4894) | | Ubuntu LTS | FIPS certified component | Description | Version | CMVP Certificate | | --- | --- | --- | --- | --- | | 18.04 | Google Cloud Kernel | Kernel optimized for use in Google Cloud clouds | 4.15 | [3954](https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/3954) | | 18.04 | OpenSSL | General purpose cryptographic library that includes TLS implementation | 1.1.1 | [3622](https://csrc.nist.gov/projects/cryptographic-module-validation-program/Certificate/3622) | | 18.04 | OpenSSH client | SSH client application for operating systems | 7.9p1 | [3633](https://csrc.nist.gov/projects/cryptographic-module-validation-program/Certificate/3633) | | 18.04 | OpenSSH server | SSH server application for operating systems | 7.9p1 | [3632](https://csrc.nist.gov/projects/cryptographic-module-validation-program/Certificate/3632) | | 18.04 | StrongSWAN | IPSec based VPN solution library | 5.6.2 | [3648](https://csrc.nist.gov/projects/cryptographic-module-validation-program/Certificate/3648) | | 18.04 | Libgcrypt | The GNUPG cryptographic general purpose library (provides fully certified full disk encryption) | 1.8.1 | [3748](https://csrc.nist.gov/projects/cryptographic-module-validation-program/Certificate/3748) | | Ubuntu LTS | FIPS certified component | Description | Version | CMVP Certificate | | --- | --- | --- | --- | --- | | 20.04 | Linux kernel (generic) | The Linux kernel cryptographic library | 5.4.0-1021 | [4127](https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/4127) | | 20.04 | OpenSSL, OpenSSH client, OpenSSH server | General purpose cryptographic library that includes TLS implementation | 1:8.2p1 | [3966](https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/3966) | | 20.04 | StrongSWAN | IPSec based VPN solution library | 5.8.2 | [4046](https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/4046) | [Read the Ubuntu Pro FIPS datasheet ›](https://assets.ubuntu.com/v1/8ad870d4-Ubuntu-Pro-FIPS-for-Google-Cloud-compliance-DS-14-12.22.pdf) --- ## Pricing | Machine type | vCPUs | Memory | VM cost | Ubuntu Pro cost | Total cost (/hour) | | --- | --- | --- | --- | --- | --- | | n1-standard-1 | 1 | 3.75GB | $0.047 | $0.002 | $0.049 | | e2-standard-2 | 2 | 8GB | $0.067 | $0.004 | $0.071 | | n2d-standard-4 | 4 | 16GB | $0.169 | $0.008 | $0.177 | | n2-standard-8 | 8 | 32GB | $0.389 | $0.014 | $0.403 | | n2d-standard-16 | 16 | 64GB | $0.676 | $0.26 | $0.702 | | e2-standard-32 | 32 | 128GB | $1.072 | $0.050 | $0.122 | For complete pricing, see [Ubuntu Pro pricing on the Google Cloud ›](https://cloud.google.com/compute/disks-image-pricing#premiumimages) --- ## Get Ubuntu Pro FIPS on Google Cloud now: * [22.04 LTS ›](https://console.cloud.google.com/compute) * [20.04 LTS ›](https://console.cloud.google.com/compute) * [18.04 LTS ›](https://console.cloud.google.com/compute) --- ## Google Cloud compliance plus the most comprehensive open-source security coverage — that's Ubuntu Pro Ubuntu Pro FIPS images are based on Ubuntu Pro premium images, with up to 15 years of security coverage included for the entire collection of software packages shipped with Ubuntu, tracking high and critical CVEs. This makes it ideal for companies that have embraced open source for their new products and need to ensure security for production and mission-critical workloads. --- [Learn more about Ubuntu Pro on Google Cloud ›](https://ubuntu.com/gcp/pro)