---
title: "Security Compliance & Certifications for 22.04\n    | Ubuntu"
description: Ubuntu is an open source software operating system that runs from the
  desktop, to the cloud, to all your internet connected things.
url: https://ubuntu.com/security/certifications/docs/2204?format=md
keywords: index, follow
---

*Submit*

Version 24.04
Version 22.04
Version 20.04
Version 16.04 / 18.04

# Security Compliance & Certifications for 22.04

Ubuntu goes through several rigorous security certifications and programs to meet common compliance requirements. All these security features are available with an [Ubuntu Pro subscription](https://ubuntu.com/pro).

## [[FIPS 140-3](https://ubuntu.com/security/certifications/docs/2204/fips)](https://ubuntu.com/security/certifications/docs/2204?format=md#p-89888-fips-140-3httpsdiscourseubuntucomtfips-for-ubuntu-22-0439869)

Federal Information Processing Standards Publications (FIPS) are issued by the National Institute of Standards and Technology (NIST). FIPS 140 specifies the security requirements for cryptographic modules. These requirements address the areas of secure design and implementation.

Ubuntu LTS releases have optional FIPS validated cryptographic packages, including the Linux kernel and OpenSSL, which are available with Ubuntu Pro. The full list of packages and certificates [is available here](https://ubuntu.com/security/fips#modules).

[Ubuntu 22.04 LTS](https://ubuntu.com/security/certifications/docs/2204/fips) is certified against the new FIPS 140-3 standard. The cryptographic modules have been reviewed by an independent testing lab and officially certified by NIST. The list of validated modules is [here](https://csrc.nist.gov/projects/cryptographic-module-validation-program/validated-modules/search?SearchMode=Basic&Vendor=canonical&CertificateStatus=Active&ValidationYear=0).

## [[CIS](https://ubuntu.com/security/certifications/docs/usg/cis/customization)](https://ubuntu.com/security/certifications/docs/2204?format=md#p-89888-cishttpsdiscourseubuntucomtcustomizing-the-cis-profile26088)

Ubuntu LTS releases have compliance benchmark documents developed by the Center for Internet Security (CIS). Ubuntu has developed the [Ubuntu Security Guide](https://ubuntu.com/security/certifications/docs/usg) to automate hardening Ubuntu LTS systems based off of the published CIS benchmarks. CIS benchmarks are available with the Ubuntu Security Guide for 22.04 LTS.

For more information see

* [CIS Compliance with Ubuntu Security Guide for Ubuntu 20.04 and later](https://ubuntu.com/security/certifications/docs/usg/cis)
* [CIS Compliance for Ubuntu 16.04 and 18.04](https://ubuntu.com/security/certifications/docs/16-18/cis).

## [[DISA-STIG](https://ubuntu.com/security/certifications/docs/disa-stig)](https://ubuntu.com/security/certifications/docs/2204?format=md#p-89888-disa-stighttpsdiscourseubuntucomtdisa-stig-on-ubuntu26080)

Security Technical Implementation Guides (STIG) are developed by the Defense Information System Agency (DISA) for the U.S. Department of Defense (DoD). Ubuntu 22.04 has undergone evaluation by DISA; they have published the first version of the STIG, and we have incorporated it into the Ubuntu Security Guide.

---

[Next

FIPS 140-3](https://ubuntu.com/security/certifications/docs/2204/fips)

This page was last modified 8 months ago. [Help improve this document in the forum](https://discourse.ubuntu.com/t/security-compliance-certifications-for-22-04/35840).