# fips containers

Published articles for fips containers.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Owning the boundary: Introducing the Chainguard FIPS Provider for OpenSSL 3.4.0

DevFeed: [Owning the boundary: Introducing the Chainguard FIPS Provider for OpenSSL 3.4.0](<https://devfeed.tech/articles/owning-the-boundary-introducing-the-chainguard-fips-provider-for-openssl-3-4-0-13124.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/introducing-the-chainguard-fips-provider-for-openssl-3-4-0>)

Published: 2026-03-11T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [chainguard](<https://devfeed.tech/topics/chainguard.md>), [Cryptography](<https://devfeed.tech/topics/cryptography.md>), [container images](<https://devfeed.tech/topics/container-images.md>), [Security](<https://devfeed.tech/topics/security.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>)

Tags: [2026](<https://devfeed.tech/tags/2026.md>), [chainguard](<https://devfeed.tech/tags/chainguard.md>), [chainguard-containers](<https://devfeed.tech/tags/chainguard-containers.md>), [chainguard-fips](<https://devfeed.tech/tags/chainguard-fips.md>), [chainguard-fips-images](<https://devfeed.tech/tags/chainguard-fips-images.md>), [cmvp](<https://devfeed.tech/tags/cmvp.md>), [compliance](<https://devfeed.tech/tags/compliance.md>), [container-images](<https://devfeed.tech/tags/container-images.md>), [cryptographic](<https://devfeed.tech/tags/cryptographic.md>), [cve-remediation](<https://devfeed.tech/tags/cve-remediation.md>), [fips](<https://devfeed.tech/tags/fips.md>), [fips-containers](<https://devfeed.tech/tags/fips-containers.md>), [open-ssl-3-4-0](<https://devfeed.tech/tags/open-ssl-3-4-0.md>), [updates](<https://devfeed.tech/tags/updates.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>)

### AI overview

Chainguard announces the Chainguard FIPS Provider for OpenSSL 3.4.0, validated under CMVP certificate #5132. Beginning March 17, 2026, Chainguard FIPS container images will upgrade to it. The article explains that owning the validated cryptographic module lets Chainguard remediate vulnerabilities within the validated boundary and manage the required resubmission process without depending on third parties.

### Source excerpt

Chainguard is the first and only to FIPS-validate OpenSSL 3.4, owning the validated cryptographic module that powers our FIPS images.

## FIPS-ing the Un-FIPS-able: Apache Kafka

DevFeed: [FIPS-ing the Un-FIPS-able: Apache Kafka](<https://devfeed.tech/articles/fips-ing-the-un-fips-able-apache-kafka-13044.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/fips-ing-the-un-fips-able-apache-kafka>)

Published: 2026-03-05T00:00:00Z

Content type: release

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [Apache-Kafka](<https://devfeed.tech/topics/apache-kafka.md>), [chainguard](<https://devfeed.tech/topics/chainguard.md>), [Cryptography](<https://devfeed.tech/topics/cryptography.md>), [Security](<https://devfeed.tech/topics/security.md>), [Event-Streaming](<https://devfeed.tech/topics/event-streaming.md>), [TLS (Transport Layer Security)](<https://devfeed.tech/topics/tls.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>)

Tags: [apache](<https://devfeed.tech/tags/apache.md>), [apache-kafka](<https://devfeed.tech/tags/apache-kafka.md>), [apache-kafka-fips](<https://devfeed.tech/tags/apache-kafka-fips.md>), [chainguard](<https://devfeed.tech/tags/chainguard.md>), [chainguard-containers](<https://devfeed.tech/tags/chainguard-containers.md>), [chainguard-images](<https://devfeed.tech/tags/chainguard-images.md>), [chainguard-kafka-container](<https://devfeed.tech/tags/chainguard-kafka-container.md>), [chainguard-kafka-image](<https://devfeed.tech/tags/chainguard-kafka-image.md>), [cryptography](<https://devfeed.tech/tags/cryptography.md>), [event-streaming](<https://devfeed.tech/tags/event-streaming.md>), [fips](<https://devfeed.tech/tags/fips.md>), [fips-140-3](<https://devfeed.tech/tags/fips-140-3.md>), [fips-containers](<https://devfeed.tech/tags/fips-containers.md>), [kafka](<https://devfeed.tech/tags/kafka.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [tls](<https://devfeed.tech/tags/tls.md>)

### AI overview

Chainguard announces FIPS-validated images for Apache Kafka, describing targeted source changes, validated cryptographic providers, TLS and keystore requirements, testing, and image maintenance for regulated environments.

### Source excerpt

Chainguard delivers the FIPS-validated Apache Kafka images, enabling secure event streaming for FedRAMP and regulated environments.

## Chainguard FIPS enters 2026 with OpenSSL 3.1.2 and better CMVP visibility

DevFeed: [Chainguard FIPS enters 2026 with OpenSSL 3.1.2 and better CMVP visibility](<https://devfeed.tech/articles/chainguard-fips-enters-2026-with-openssl-3-1-2-and-better-cmvp-visibility-12944.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/chainguard-fips-enters-2026-with-openssl-3-1-2-and-better-cmvp-visibility>)

Published: 2026-01-07T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [chainguard](<https://devfeed.tech/topics/chainguard.md>), [Docker Hardened Images](<https://devfeed.tech/topics/docker-hardened-images.md>), [Cryptography](<https://devfeed.tech/topics/cryptography.md>), [Security, Privacy and Abuse Prevention](<https://devfeed.tech/topics/security-privacy-and-abuse-prevention.md>), [container images](<https://devfeed.tech/topics/container-images.md>)

Tags: [2026](<https://devfeed.tech/tags/2026.md>), [chainguard](<https://devfeed.tech/tags/chainguard.md>), [chainguard-containers](<https://devfeed.tech/tags/chainguard-containers.md>), [chainguard-fips](<https://devfeed.tech/tags/chainguard-fips.md>), [cmvp](<https://devfeed.tech/tags/cmvp.md>), [cmvp-sboms](<https://devfeed.tech/tags/cmvp-sboms.md>), [fips](<https://devfeed.tech/tags/fips.md>), [fips-140-3](<https://devfeed.tech/tags/fips-140-3.md>), [fips-compliance](<https://devfeed.tech/tags/fips-compliance.md>), [fips-containers](<https://devfeed.tech/tags/fips-containers.md>), [fips-validation](<https://devfeed.tech/tags/fips-validation.md>), [openssl](<https://devfeed.tech/tags/openssl.md>), [sboms](<https://devfeed.tech/tags/sboms.md>), [validation](<https://devfeed.tech/tags/validation.md>)

### AI overview

Chainguard updates its FIPS container images to use the Chainguard FIPS provider for OpenSSL 3.1.2, identified by CMVP certificate #5102. The images now expose CMVP and entropy certification numbers through SBOM packages, while future OpenSSL 3.4 and 3.6 upgrades remain under coordination and review with NIST.

### Source excerpt

We updated our FIPS container images with OpenSSL 3.1.2 (CMVP #5102), clearer CMVP visibility in SBOMs, and a roadmap for upcoming FIPS 140-3 cryptography.