Encryption and FIPS
Encryption is the mechanism whereby human readable content is rendered incomprehensible. It is used extensively where a higher degree of security is required. Typically, this manifests itself in how communications are managed between endpoints. for example, the query and data that flows between a user and a database.
Inter-service and data connection encryption
In Pyramid's case this also applies to the communication between its various services, as data is moved from one service to another. As users interact with data, the connection between Pyramid and the underlying database engines may also need to be encrypted All queries sent to the database and all data returning from the database to the user can be encrypted such that should the messaging be intercepted, it is unintelligible,
- Click here to learn more about and enable inter service encryption
- Click here to learn more about data source connection encryption for different data sources
- Click here to learn about IMDB connection encryption
- Click here to learn more about Pyramid repository connection encryption
FIPS
Federal Information Processing Standard (FIPS) is a standard developed by the following two government bodies:
- The National Institute of Standards and Technology (NIST) in the United States
- The Communications Security Establishment (CSE) in Canada
FIPS standards are either recommended or mandated for use in federal government-operated IT systems in the United States and Canada.
For a detailed explanation of FIPS and information on how to configure the Pyramid Platform for FIPS, please consult the FIPS Compliance guide.