---
title: FIPS Verified Agent Integrations
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: Docs > Integrations > Integration Guides > FIPS Verified Agent Integrations
---

# FIPS Verified Agent Integrations

{% callout %}
# Important note for users on the following Datadog sites: app.datadoghq.com, us3.datadoghq.com, us5.datadoghq.com, app.datadoghq.eu, ap1.datadoghq.com, ap2.datadoghq.com

{% alert level="danger" %}
This product is not supported for your selected [Datadog site](https://docs.datadoghq.com/getting_started/site). ().
{% /alert %}

{% /callout %}

## Overview{% #overview %}

As part of the FedRAMP High effort, several integrations have been verified for **FIPS 140-2** compliance. Integrations that are not mentioned below may function in compliance with FIPS 140-2 but have not been tested internally.

This guide is for customers that require FIPS compliant services and use Datadog integrations.

## Enabling FIPS mode for a supported integration{% #enabling-fips-mode-for-a-supported-integration %}

To ensure compliance, make sure to use an HTTPS endpoint whenever possible and follow the integration-specific instructions below.

Integrations marked out of the box ("OOTB") require no further configuration.

| Integration            | Configuration                                                                                                                                    |
| ---------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------ |
| Amazon MSK             | OOTB                                                                                                                                             |
| Apache                 | OOTB                                                                                                                                             |
| ArgoCD                 | OOTB                                                                                                                                             |
| Azure Active Directory | OOTB                                                                                                                                             |
| CoreDNS                | OOTB                                                                                                                                             |
| Elasticsearch          | OOTB                                                                                                                                             |
| Envoy                  | OOTB                                                                                                                                             |
| Haproxy                | OOTB                                                                                                                                             |
| Istio                  | OOTB                                                                                                                                             |
| Kafka                  | To enable TLS make sure to follow the [JMXFetch FIPS-140 mode](https://docs.datadoghq.com/integrations/guide/jmxfetch-fips) guide.               |
| MongoDB                | The `tls` option must be set to `true` through the integration configuration.                                                                    |
| MySQL                  | The `ssl` option must be set through the integration configuration.                                                                              |
| Nginx                  | OOTB                                                                                                                                             |
| Php-fpm                | Even though the `php_fpm` integration uses the random module, that use is restricted to randomizing the retry delay.                             |
| Postfix                | OOTB                                                                                                                                             |
| RabbitMQ               | OOTB                                                                                                                                             |
| Redis                  | The `ssl` option must be enabled through the integration configuration.                                                                          |
| SSH                    | OOTB                                                                                                                                             |
| TLS                    | OOTB                                                                                                                                             |
| Tomcat                 | To enable TLS make sure to follow the [JMXFetch FIPS-140 mode](https://docs.datadoghq.com/integrations/guide/jmxfetch-fips) guide.               |
| Vault                  | OOTB                                                                                                                                             |
| vSphere                | Both `ssl_verify` and `rest_api_options > tls_verify` need to be set to `true` if using the vSphere REST API to get tags (`collect_tags: true`). |
| Windows Service        | OOTB                                                                                                                                             |
| Zookeeper              | The `use_tls` option must be enabled through the integration configuration.                                                                      |

{% alert level="danger" %}
Configuring the **IIS integration**to query remote systems is discouraged. It relies on a Windows API for cryptography, which Datadog cannot control.****
{% /alert %}

## Further reading{% #further-reading %}

- [Datadog FIPS Compliance](https://docs.datadoghq.com/agent/configuration/fips-compliance)