Who is this article for?
CrashPlan for Small Business, yes.
Code42 for Enterprise, yes.
Link: Product plans and features.
This article applies to versions 6 and 7.
Other available versions:
As of version 6.8.3, the Code42 app on Mac and Windows devices use the cryptographic module provided by their respective operating systems for encryption and decryption of backup data.
Although the Code42 app uses the same operating system-provided cryptographic module on all Windows devices, you must also enable "FIPS mode" on Windows devices to ensure FIPS compliance.
Windows devices running Code42 app version 6.8.3 and later, with the exception of Windows 7 and Windows Server 2008 R2.
Beginning with Code42 app version 6.9.2, devices running Windows 7 and Windows Server 2008 R2 use OpenSSL to encrypt and decrypt user backups. Devices using newer versions of Windows continue to use the FIPS 140-2 certified encryption module provided by the device's operating system.
The National Institute of Standards and Technology (NIST) is an organization of the U.S. Department of Commerce whose mission is to set standards that enhance economic security. Many organizations are required to comply with the following NIST security standards:
- NIST 800-53: Security and Privacy Controls for Federal Information Systems and Organizations
- NIST 800-171: Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations
One of the NIST 800-171 requirements is the Federal Information Processing Standards (FIPS) standard FIPS 140-2, which sets the requirements for cryptographic modules used for data encryption and decryption.
- Ensure that the Windows devices in your Code42 environment have Code42 apps version 6.8.3 or later installed, and run supported Windows versions later than Windows 7 or Windows 2008 R2. For supported Windows versions, see the following:
- Code42 for Enterprise: Code42 platform hardware and software requirements
- CrashPlan for Small Business: CrashPlan for Small Business requirements
- To set the "FIPS mode" flag to true on Windows devices, follow instructions in section "Information for System Integrators" in Microsoft's article FIPS 140 Validation.
- National Institute of Standards and Technology