Ubuntu Pro FIPS
for Azure compliance
For Azure compliance in production environments.
Ubuntu Pro FIPS is the first and only FIPS 140-2 certified image for Azure. Built upon the enhanced stability and security features of Ubuntu Pro, Ubuntu FIPS is a critical foundation for federal programs and government contractors.
Launch Ubuntu Pro FIPS 20.04 LTS 18.04 LTS › 16.04 LTS ›
What's in Ubuntu Pro FIPS?
-
FIPS compliant by default
FIPS 140-2 Level 1 modules pre-enabled out of the box with Ubuntu Pro FIPS. No extra configuration steps required.
-
FedRAMP compliance
Operate environments under the FedRAMP compliance regime, with FIPS 140-2 Level 1 certified modules.
-
CIS and DISA STIG
Automated auditing and remediation for the DISA STIG and CIS security benchmarks through the Ubuntu Security Guide.
-
HIPAA, PCI, ISO compliance
Healthcare, financial services, insurance and other organisations that operate in heavily-regulated industries ensure compliance with HIPAA, PCI and ISO.
-
Predictable and Secure
Ubuntu Pro FIPS is based on Ubuntu Pro premium images, with Azure optimisations built-in and the most comprehensive open-source security coverage in the industry.
-
Common Criteria EAL2 certification
Ubuntu Pro FIPS has been evaluated to assurance level EAL2, with Common Criteria certification.
-
Open source security
Ubuntu Pro adds security coverage for the most important open source applications like Apache Kafka, NGINX, MongoDB, Redis and PostgreSQL...
-
10-year lifetime
Canonical backs Ubuntu Pro FIPS for 10 years, ensuring security updates are available throughout, with a guaranteed upgrade path.
-
Priced for the cloud
Ubuntu Pro FIPS pricing tracks the underlying compute cost, starting at under $0.01 for the smallest B1ls instance type, and ramping down to less than 1% of hourly compute.
Launch Ubuntu Pro FIPS for Azure
Ubuntu Pro FIPS 20.04 LTS
Ubuntu Pro FIPS 20.04 LTS includes an azure-optimised FIPS-certified 5.4 kernel and other FIPS-certified modules pre-enabled out of the box. Ubuntu Pro FIPS provides expanded security maintenance through April 2030.
Launch now 18.04 LTS › 16.04 LTS ›
Azure compliance made easy
Ubuntu Pro FIPS - Azure compliance made easy
With Azure, US government agencies and their partners have been able to combine unparalleled flexibility, breakthrough innovation, world-class security and Azure compliance. However, when it comes to running a secure and compliant enterprise Linux on Azure, IT departments are often left with expensive options that sacrifice innovation for compliance. Watch this webinar on-demand to see how Microsoft and Canonical, the publisher of Ubuntu, have collaborated to create a new way for government agencies to consume Linux on Azure.
FIPS certified Ubuntu components for Azure
| Ubuntu LTS | FIPS certified component | Description | Version | CMVP Certificate |
|---|---|---|---|---|
| 20.04 | Azure Kernel | Kernel optimised for use in Azure clouds | 5.4 | 4126 |
| 20.04 | OpenSSL | General purpose cryptographic library that includes TLS implementation | 3966 | |
| 20.04 | StrongSWAN | IPSec based VPN solution library | 4046 | |
| 20.04 | Libgcrypt | The GNUPG cryptographic general purpose library (provides fully certified full disk encryption) | 3902 |
| Ubuntu LTS | FIPS certified component | Description | Version | CMVP Certificate |
|---|---|---|---|---|
| 18.04 | Azure Kernel | Kernel optimised for use in Azure clouds | 4.15 | 3683 |
| 18.04 | OpenSSL | General purpose cryptographic library that includes TLS implementation | 1.1.1 | 3622 |
| 18.04 | OpenSSH client | SSH server application for operating systems | 7.9p1 | 3633 |
| 18.04 | OpenSSL server | SSH client application for operating systems | 7.9p1 | 3632 |
| 18.04 | StrongSWAN | IPSec based VPN solution library | 5.6.2 | 3648 |
| 18.04 | Libgcrypt | The GNUPG cryptographic general purpose library (provides fully certified full disk encryption) | 1.8.1 | 3748 |
| Ubuntu LTS | FIPS certified component | Description | Version | CMVP Certificate |
|---|---|---|---|---|
| 16.04 | Linux kernel (generic) | The Linux kernel cryptographic library | 4.4.0.1002 | 2962 |
| 16.04 | OpenSSL | General purpose cryptographic library that includes TLS implementation | 1.0.2g | 2888 |
| 16.04 | OpenSSH client | SSH server application for operating systems | 7.2p2 | 2907 |
| 16.04 | OpenSSL server | SSH client application for operating systems | 7.9p2 | 2906 |
| 16.04 | StrongSWAN | IPSec based VPN solution library | 5.3.5 | 2978 |
Pricing
| Instance | Azure Hourly * | Ubuntu Pro Hourly |
|---|---|---|
| DS11V2 | $0.185 | $0.022 |
| D2SV3 | $0.11 | $0.022 |
| D4SV3 | $0.22 | $0.04 |
| E2SV3 | $0.146 | $0.022 |
| DS1 | $0.077 | $0.01 |
| DS2 | $0.154 | $0.022 |
* For complete pricing, see Ubuntu Pro FIPS 20.04 LTS on the Azure Marketplace ›
Azure compliance and the most comprehensive open source security coverage - that's Ubuntu Pro
Ubuntu Pro FIPS images are based on Ubuntu Pro premium images, with security coverage included for the entire collection of software packages shipped with Ubuntu, tracking high and critical CVEs. This makes it ideal for companies that have embraced open source for their new products and need to ensure security for production and mission-critical workloads.
Getting the best of Ubuntu Pro for Azure
Operating open source securely
It's no longer just Linux, Apache, MySQL and PHP — open source ecosystems like Java, NodeJS, Python and Go are everywhere in the enterprise, as are modern workloads like Kafka, Elasticsearch and Cassandra. In opting for open source, development teams in every organisation are optimising for velocity, flexibility and ideal economics, and the result has been an incredible ramp-up in software product delivery.
Optimised scaling in the cloud
Building enterprise-grade infrastructure with open source quickly with stability seems impossible, but Ubuntu Pro for Azure allows organisations to do just that. Ubuntu Pro is a premium image delivering the most comprehensive security and compliance features and is suitable for small to large-scale Linux enterprise operations offering pay-as-you-go billing on a single invoice through Azure. This piece explains the new ways Ubuntu and Microsoft Azure are driving reliability and security at speed and scale.