Compliance automation with Ubuntu Pro | Security

<!DOCTYPE html> <html prefix="og: http://ogp.me/ns#" class=" " lang="en" dir="ltr"> <head> <meta charset="UTF-8"> <meta name="keywords" content="index, follow"> <meta name="viewport" content="width=device-width, initial-scale=1"> <title>Compliance automation with Ubuntu Pro | Security | Ubuntu</title> <link rel="preconnect" href="https://res.cloudinary.com" /> <script src="/static/js/dist/cookie-policy.js?v=e389ac9"></script> <script src="/static/js/src/cookie-policy-with-callback.js?v=7656ec3" type="module"></script> <script src="https://assets.ubuntu.com/v1/703e23c9-lazysizes+noscript+native-loading.5.1.2.min.js" defer></script> <script src="/static/js/src/navigation.js?v=2e02fbc" defer></script> <script src="/static/js/dist/main.js?v=bb48d30" defer></script> <script src="/static/js/src/infer-preferred-language.js?v=b69e09e" defer></script> <link rel="stylesheet" type="text/css" media="screen" href="/static/css/styles.css?v=b49846a" /> <link rel="stylesheet" type="text/css" media="print" href="/static/css/print.css?v=96ecf37" /> <script> performance.mark("Stylesheets finished"); </script> <link rel="canonical" href="https://ubuntu.com/security/compliance-automation" /> <link rel="apple-touch-icon" sizes="180x180" href="https://assets.ubuntu.com/v1/f38b9c7e-COF%20apple-touch-icon.png" /> <link rel="icon" type="image/png" sizes="32x32" href="https://assets.ubuntu.com/v1/be7e4cc6-COF-favicon-32x32.png" /> <link rel="icon" type="image/png" sizes="16x16" href="https://assets.ubuntu.com/v1/16c27f81-COF%20favicon-16x16.png" /> <link rel="manifest" href="/static/files/site.webmanifest?v=fbabd71" />  <link rel="icon" type="image/png" sizes="48x48" href="/static/favicons/COF-favicon-48x48.png?v=fa3c63f" /> <link rel="preload" as="font" type="font/woff2" href="https://assets.ubuntu.com/v1/f1ea362b-Ubuntu%5Bwdth,wght%5D-latin-v0.896a.woff2" crossorigin /> <link rel="preload" as="font" type="font/woff2" href="https://assets.ubuntu.com/v1/90b59210-Ubuntu-Italic%5Bwdth,wght%5D-latin-v0.896a.woff2" crossorigin /> <link rel="preload" as="font" type="font/woff2" href="https://assets.ubuntu.com/v1/d5fc1819-UbuntuMono%5Bwght%5D-latin-v0.869.woff2" crossorigin /> <link rel="preload" as="font" type="font/woff2" href="https://assets.ubuntu.com/v1/77cd6650-Ubuntu%5Bwdth,wght%5D-cyrillic-extended-v0.896a.woff2" crossorigin /> <link rel="preload" as="font" type="font/woff2" href="https://assets.ubuntu.com/v1/2702fce5-Ubuntu%5Bwdth,wght%5D-cyrillic-v0.896a.woff2" crossorigin /> <link rel="preload" as="font" type="font/woff2" href="https://assets.ubuntu.com/v1/5c108b7d-Ubuntu%5Bwdth,wght%5D-greek-extended-v0.896a.woff2" crossorigin /> <link rel="preload" as="font" type="font/woff2" href="https://assets.ubuntu.com/v1/0a14c405-Ubuntu%5Bwdth,wght%5D-greek-v0.896a.woff2" crossorigin /> <link rel="preload" as="font" type="font/woff2" href="https://assets.ubuntu.com/v1/19f68eeb-Ubuntu%5Bwdth,wght%5D-latin-extended-v0.896a.woff2" crossorigin /> <meta name="description" content=" Technical details on all the security certifications for which Ubuntu Pro offers system hardening and compliance automation tools. "> <meta name="facebook-domain-verification" content="zxp9j79g1gy2xenbu9ll964pttk5hu"> <meta name="twitter:account_id" content="4503599627481511"> <meta name="twitter:site" content="@ubuntu"> <meta property="og:type" content="website"> <meta property="og:url" content="https://ubuntu.com/security/compliance-automation"> <meta property="og:site_name" content="Ubuntu"> <meta name="copydoc" content=" https://docs.google.com/document/d/13RcVvHBAoywfk3o5Dy-16F3KrMytL9-2v6wWbW444Ko/edit "> <meta name="google-site-verification" content="ddh2iq7ZuKf1LpkL_gtM_T7DkKDVD7ibq6Ceue4a_3M"> <meta name="twitter:title" content="Compliance automation with Ubuntu Pro | Security | Ubuntu"> <meta property="og:title" content="Compliance automation with Ubuntu Pro | Security | Ubuntu"> <meta name="twitter:description" content=" Technical details on all the security certifications for which Ubuntu Pro offers system hardening and compliance automation tools. "> <meta property="og:description" content=" Technical details on all the security certifications for which Ubuntu Pro offers system hardening and compliance automation tools. ">   <script>(function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){ (i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o), m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m) })(window,document,'script','https://www.google-analytics.com/analytics.js','ga'); ga('create', 'UA-1018242-59', 'auto', {'allowLinker': true}); ga('require', 'GTM-N2MDH37'); ga('require', 'linker'); ga('linker:autoLink', ['conjure-up.io', 'login.ubuntu.com', 'www.ubuntu.com', 'ubuntu.com', 'insights.ubuntu.com', 'developer.ubuntu.com', 'cn.ubuntu.com', 'design.ubuntu.com', 'maas.io', 'canonical.com', 'landscape.canonical.com', 'pages.ubuntu.com', '/tutorials', 'docs.ubuntu.com']); </script>  <script> const userIDCookie = document.cookie.match(new RegExp("(^| )" + "user_id" + "=([^;]+)")); if (userIDCookie !== null) { let idValue = userIDCookie[2]; if (idValue) { dataLayer.push({ user_id: idValue, }); } } </script>  <script>(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start': new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0], j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src= '//www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f); })(window,document,'script','dataLayer','GTM-K92JCQ');</script>  <style>#rememberMe {display: none;}</style> </head> <body class=" is-paper ">  <noscript> <iframe src="https://www.googletagmanager.com/ns.html?id=GTM-K92JCQ" height="0" width="0" style="display: none; visibility: hidden" title="Google Tag Manager"></iframe> </noscript>   <script> window.lightningjs || function(n) { var e = "lightningjs"; function t(e, t) { var r, i, a, o, d, c; return t && (t += (/\?/.test(t) ? "&" : "?") + "lv=1"), n[e] || (r = window, i = document, a = e, o = i.location.protocol, d = "load", c = 0, function() { n[a] = function() { var t = arguments, i = this, o = ++c, d = i && i != r && i.id || 0; function s() { return s.id = o, n[a].apply(s, arguments) } return (e.s = e.s || []).push([o, d, t]), s.then = function(n, t, r) { var i = e.fh[o] = e.fh[o] || [], a = e.eh[o] = e.eh[o] || [], d = e.ph[o] = e.ph[o] || []; return n && i.push(n), t && a.push(t), r && d.push(r), s }, s }; var e = n[a]._ = {}; function s() { e.P(d), e.w = 1, n[a] } e.fh = {}, e.eh = {}, e.ph = {}, e.l = t ? t.replace(/^\/\//, ("https:" == o ? o : "http:") + "//") : t, e.p = { 0: +new Date }, e.P = function(n) { e.p[n] = new Date - e.p[0] }, e.w && s(), r.addEventListener ? r.addEventListener(d, s, !1) : r.attachEvent("onload", s); var l = function() { function n() { return ["<!DOCTYPE ", o, "><", o, "><head></head><", t, "><", r, ' src="', e.l, '"></', r, "></", t, "></", o, ">"].join("") } var t = "body", r = "script", o = "html", d = i[t]; if (!d) return setTimeout(l, 100); e.P(1); var c, s = i.createElement("div"), h = s.appendChild(i.createElement("div")), u = i.createElement("iframe"); s.style.display = "none", d.insertBefore(s, d.firstChild).id = "lightningjs-" + a, u.frameBorder = "0", u.id = "lightningjs-frame-" + a, /MSIE[ ]+6/.test(navigator.userAgent) && (u.src = "javascript:false"), u.allowTransparency = "true", h.appendChild(u); try { u.contentWindow.document.open() } catch (n) { e.domain = i.domain, c = "javascript:var d=document.open();d.domain='" + i.domain + "';", u.src = c + "void(0);" } try { var p = u.contentWindow.document; p.write(n()), p.close() } catch (e) { u.src = c + 'd.write("' + n().replace(/"/g, String.fromCharCode(92) + '"') + '");d.close();' } e.P(2) }; e.l && l() }()), n[e].lv = "1", n[e] } var r = window.lightningjs = t(e); r.require = t, r.modules = n }({}); window.usabilla_live = lightningjs.require("usabilla_live", "//w.usabilla.com/ecdf1756070a.js"); </script>  <div id="success" class="p-popup-notification"> <div class="p-notification--positive u-no-margin--bottom"> <div class="p-notification__content"> <p class="p-notification__message"> Your submission was sent successfully! <a href="#" onclick="location.href = document.referrer; return false;"><i class="p-notification__close">Close</i></a> </p> </div> </div> </div> <div id="contact-form-success" class="p-popup-notification"> <div class="p-notification--positive u-no-margin--bottom"> <div class="p-notification__content"> <p class="p-notification__message"> Thank you for contacting us. A member of our team will be in touch shortly. <a href="#" onclick="location.href = document.referrer; return false;"><i class="p-notification__close">Close</i></a> </p> </div> </div> </div> <div id="unsubscribed" class="p-popup-notification"> <div class="p-notification--positive u-no-margin--bottom"> <div class="p-notification__content"> <p class="p-notification__message"> You have successfully unsubscribed! <a href="#" onclick="location.href = ''; return false;"><i class="p-notification__close">Close</i></a> </p> </div> </div> </div> <div id="newsletter-signup" class="p-popup-notification"> <div class="p-notification--positive u-no-margin--bottom"> <div class="p-notification__content"> <p class="p-notification__message"> Thank you for signing up for our newsletter! <br /> In these regular emails you will find the latest updates about Ubuntu and upcoming events where you can meet our team.<a href="#" onclick="(e) => e.preventDefault()"><i class="p-notification__close">Close</i></a> </p> </div> </div> </div> <div id="updated" class="p-popup-notification"> <div class="p-notification--positive u-no-margin--bottom"> <div class="p-notification__content"> <p class="p-notification__message"> Your preferences have been successfully updated. <a href="#" onclick="location.href = document.referrer; return false;"><i class="p-notification__close">Close notification</i></a> </p> </div> </div> </div> <header id="navigation" class="p-navigation--sliding is-dark is-reduced "> <div class="p-navigation__row--25-75"> <div class="p-navigation__banner"> <div class="p-navigation__tagged-logo"> <a class="p-navigation__link" href="/"> Canonical Ubuntu </a> </div> <ul class="p-navigation__items"> <li class="p-navigation__item"> <a href="/search" class="js-search-button p-navigation__link--search-toggle" aria-label="Search"></a> </li> <li class="p-navigation__item"> <a href="/navigation" class="js-menu-button p-navigation__link">Menu</a> </li> </ul> </div> <nav class="p-navigation__nav js-show-nav" aria-label="Categories"> <ul class="p-navigation__items" role="menu"> <li class="p-navigation__item--dropdown-toggle" role="menuitem" id="products" onmouseenter="fetchDropdown('/templates/meganav/products', 'products', event); this.onmouseenter = null;"> <a class="p-navigation__link" href="/navigation#products-navigation" aria-controls="products-content" tabindex="0" onfocus="fetchDropdown('/templates/meganav/products', 'products');">Products</a> </li> <li class="p-navigation__item--dropdown-toggle" role="menuitem" id="use-case" onmouseenter="fetchDropdown('/templates/meganav/use-case', 'use-case', event); this.onmouseenter = null;"> <a class="p-navigation__link" href="/navigation#use-case-navigation" aria-controls="use-case-content" tabindex="0" onfocus="fetchDropdown('/templates/meganav/use-case', 'use-case');">Use cases</a> </li> <li class="p-navigation__item--dropdown-toggle" role="menuitem" id="support" onmouseenter="fetchDropdown('/templates/meganav/support', 'support', event); this.onmouseenter = null;"> <a class="p-navigation__link" href="/navigation#support-navigation" aria-controls="support-content" tabindex="0" onfocus="fetchDropdown('/templates/meganav/support', 'support');">Support</a> </li> <li class="p-navigation__item--dropdown-toggle" role="menuitem" id="community" onmouseenter="fetchDropdown('/templates/meganav/community', 'community', event); this.onmouseenter = null;"> <a class="p-navigation__link" href="/navigation#community-navigation" aria-controls="community-content" tabindex="0" onfocus="fetchDropdown('/templates/meganav/community', 'community');">Community</a> </li> <li class="p-navigation__item--dropdown-toggle" role="menuitem" id="download-ubuntu" onmouseenter="fetchDropdown('/templates/meganav/download-ubuntu', 'download-ubuntu', event); this.onmouseenter = null;"> <a class="p-navigation__link" href="/navigation#download-ubuntu-navigation" aria-controls="download-ubuntu-content" tabindex="0" onfocus="fetchDropdown('/templates/meganav/download-ubuntu', 'download-ubuntu');">Download Ubuntu</a> </li> <li class="p-navigation__item--dropdown-toggle global-nav-mobile global-nav" role="menuitem" id="all-canonical"></li> <li class="p-navigation__item--dropdown-toggle js-account" role="menuitem" id="canonical-login"></li> <li class="p-navigation__item"> <a href="/search" class="js-search-button p-navigation__link--search-toggle"></a> </li> </ul> <div class="p-navigation__search"> <form action="/search" class="p-search-box is-light js-search-form">  <input type="search" id="search" class="p-search-box__input u-hide " name="search" placeholder="Search our sites" aria-label="Search our sites" value=""/>  <input type="search" class="p-search-box__input" name="q" placeholder="Search our sites" required="" aria-label="Search our sites" /> <button type="reset" class="p-search-box__reset"> <i class="p-icon--close"></i> </button> <button type="submit" class="p-search-box__button"> <i class="p-icon--search"></i> </button> </form> </div> </nav> </div> <div class="p-navigation__search-overlay"></div> <div id="control-height"></div> </header> <div class="dropdown-window-overlay fade-animation"></div> <div class="dropdown-window is-dark slide-animation is-reduced "> <div class="u-hide dropdown-content-desktop" id="products-content"></div> <div class="u-hide dropdown-content-desktop" id="use-case-content"></div> <div class="u-hide dropdown-content-desktop" id="support-content"></div> <div class="u-hide dropdown-content-desktop" id="community-content"></div> <div class="u-hide dropdown-content-desktop" id="download-ubuntu-content"></div> <div class="u-hide dropdown-content-desktop global-nav-desktop" id="all-canonical-content"></div> </div> <div id="secondary-navigation" class="p-navigation is-secondary is-dark"> <div class="p-navigation__row--25-75"> <div class="p-navigation__banner"> <div class="p-navigation__tagged-logo"> <a class="p-navigation__link" href="/security"> <div class="p-navigation__logo-tag"> <img class="p-navigation__logo-icon" src="https://assets.ubuntu.com/v1/82818827-CoF_white.svg" alt="" /> </div> <span class="p-navigation__logo-title">Security</span> </a> </div> <a href="#" class="p-navigation__toggle--open" title="Toggle navigation"><i class="p-icon--chevron-down is-light"></i></a> </div> <nav class="p-navigation__nav" aria-label="Security navigation"> <ul class="p-navigation__items"> <li class="p-navigation__item "> <a class="p-navigation__link" href="/security/esm" >ESM</a> </li> <li class="p-navigation__item "> <a class="p-navigation__link" href="/security/livepatch" >Livepatch</a> </li> <li class="p-navigation__item is-selected"> <a class="p-navigation__link" href="/security/compliance-automation" aria-current="page">Certifications & Hardening</a> </li> <li class="p-navigation__item "> <a class="p-navigation__link" href="/security/cves" >CVEs</a> </li> <li class="p-navigation__item "> <a class="p-navigation__link" href="/security/notices" >Notices</a> </li> <li class="p-navigation__item "> <a class="p-navigation__link" href="/security/docker-images" >Docker Images</a> </li> </ul> </nav> </div> </div> <div class="wrapper u-no-margin--top"> <main id="main-content" class="inner-wrapper"> <section class="p-section--hero"> <div class="row--50-50-on-large"> <div class="col"> <h1 class="u-no-margin--bottom"> Compliance automation </h1> </div> <div class="col"> <div class="p-section--shallow"> <p class="p-heading--2"> Run regulated and high security workloads on Ubuntu </p> </div> <div class="p-section--shallow"> <p> <a href="/pro">Ubuntu Pro</a> has been designed to simplify your security compliance burden for frameworks such as NIST, FedRAMP, PCI-DSS, ISO27001, or CIS. Pro includes security vulnerability patching for up to 12 years, FIPS-validated cryptographic modules, and automated system hardening for CIS and DISA STIG, and can be deployed on-premise or in the <a href="/public-cloud">public cloud</a>. </p> </div> <div class="p-cta-block"> <p> <a class="p-button--positive js-invoke-modal" href="/security/contact-us">Contact us</a> <a href="/security/certifications/docs">Read the documentation &rsaquo;</a> </p> </div> </div> <div class="p-section--shallow"> <div class="p-image-container--cinematic is-cover is-highlighted"> <img src="https://res.cloudinary.com/canonical/image/fetch/f_auto,q_auto,fl_sanitize,w_1848,h_770/https://assets.ubuntu.com/v1/77af70e2-hero-img-new.png" srcset="https://res.cloudinary.com/canonical/image/fetch/c_limit,f_auto,q_auto,fl_sanitize,w_3696,h_1540/https://assets.ubuntu.com/v1/77af70e2-hero-img-new.png 2x" alt="" width="1848" height="770" loading="auto" class="p-image-container__image" /> </div> </div> <div class="row"> <div class="p-notification--information is-light"> <div class="p-notification__content"> <div class="p-notification__message"> Need information about the Cyber Resilience Act (CRA)? Canonical is committed to delivering CRA-compliant Ubuntu. To learn more, <a href="https://canonical.com/solutions/open-source-security/cyber-resilience-act">visit our dedicated webpage</a> for understanding the CRA and its requirements, or <a href="/security/contact-us" class="js-invoke-modal">contact our sales team</a>. </div> </div> </div> </div></div> </section><section class="p-section"><div class="u-fixed-width"> <hr class="p-rule"> <div class="u-fixed-width"> <div class="p-section--shallow"> <h2>An OS you can trust</h2> </div> </div> <div class="p-section--shallow"> <div class="row"> <div class="col-9 col-start-large-4"> <hr class="is-muted"> </div> </div> <div class="row"> <div class="col-3 col-start-large-4"> <h3 class="p-heading--5"> Access certifications <br /> for high security environments </h3> </div> <div class="col-6"> <p> <a href="/pro">Ubuntu Pro</a> provides access to FIPS 140 certified cryptographic packages, allowing you to deploy workloads that need to operate under compliance regimes like FedRAMP, HIPAA, and PCI-DSS. Canonical works with NIST-approved testing labs to certify the core cryptographic modules within Ubuntu for FIPS 140 requirements, enabling applications to use these libraries in compliance with the FIPS standard. </p> <div class="p-section--shallow"> <div class="p-cta-block"> <a href="#compliance-profiles">Explore our certifications &rsaquo;</a> </div> </div> </div> </div> <div class="row"> <div class="col-9 col-start-large-4"> <hr class="is-muted"> </div> </div> <div class="row"> <div class="col-3 col-start-large-4"> <h3 class="p-heading--5"> Automate hardening <br /> with the Ubuntu Security Guide </h3> </div> <div class="col-6"> <p> The default configuration of Ubuntu balances usability and security. However, systems carrying dedicated workloads can be further hardened to reduce their attack surface. Canonical provides the Ubuntu Security Guide to automatically harden systems to DISA STIG and CIS benchmarks profiles, and generate audit reports. Available with <a href="/pro">Ubuntu Pro on-premise</a> or ready-built on <a href="/public-cloud">public clouds</a>. </p> <div class="p-section--shallow"> <div class="p-cta-block"> <a href="/security/compliance-automation#compliance-profiles">See our compliance profiles &rsaquo;</a> </div> </div> </div> </div> <div class="row"> <div class="col-9 col-start-large-4"> <hr class="is-muted"> </div> </div> <div class="row"> <div class="col-3 col-start-large-4"> <h3 class="p-heading--5"> Fix security vulnerabilities <br /> across the estate </h3> </div> <div class="col-6"> <p> Each Ubuntu LTS release enables <a href="https://wiki.ubuntu.com/Security/Features">state of the art protection</a> against vulnerability exploitation and malware. Canonical has a <a href="/security/disclosure-policy">public vulnerability disclosure policy</a> and vulnerabilities are fixed with automated security updates and <a href="/security/livepatch">kernel livepatches</a> and publicly disclosed with <a href="/security/notices">our security notices</a>. We further provide <a href="/security/oval">machine readable OVAL</a> CVE output to be used by OpenSCAP and other 3rd party vulnerability management tools. Critical CVEs are typically patched within 24 hours. </p> <div class="p-section--shallow"> <div class="p-cta-block"> <a href="https://wiki.ubuntu.com/Security/Features">See our security features &rsaquo;</a> </div> </div> </div> </div> </div> </div></section> <section class="p-section"> <div class="p-section--shallow"> <div class="u-fixed-width"> <hr class="p-rule" /> <h2>Available on-prem and in the cloud</h2> </div> </div> <div class="row"> <div class="col-start-large-4 col-3 col-medium-2"> <a href="/aws"> <div class="p-image-container is-highlighted"> <img src="https://res.cloudinary.com/canonical/image/fetch/f_auto,q_auto,fl_sanitize,w_852,h_481/https://assets.ubuntu.com/v1/7b612d59-aws.png" srcset="https://res.cloudinary.com/canonical/image/fetch/c_limit,f_auto,q_auto,fl_sanitize,w_1704,h_962/https://assets.ubuntu.com/v1/7b612d59-aws.png 2x" alt="" width="852" height="481" loading="lazy" /> </div> <p> Learn more about Ubuntu<br class="u-hide--small"/>on AWS &rsaquo; </p> </a> </div> <div class="col-3 col-medium-2"> <a href="/azure"> <div class="p-image-container is-highlighted"> <img src="https://res.cloudinary.com/canonical/image/fetch/f_auto,q_auto,fl_sanitize,w_852,h_481/https://assets.ubuntu.com/v1/cc0200cd-azure.png" srcset="https://res.cloudinary.com/canonical/image/fetch/c_limit,f_auto,q_auto,fl_sanitize,w_1704,h_962/https://assets.ubuntu.com/v1/cc0200cd-azure.png 2x" alt="" width="852" height="481" loading="lazy" /> </div> <p> Learn more about Ubuntu<br class="u-hide--small"/>on Azure &rsaquo; </p> </a> </div> <div class="col-3 col-medium-2"> <a href="/gcp"> <div class="p-image-container is-highlighted"> <img src="https://res.cloudinary.com/canonical/image/fetch/f_auto,q_auto,fl_sanitize,w_852,h_481/https://assets.ubuntu.com/v1/bc125de5-googlecloud.png" srcset="https://res.cloudinary.com/canonical/image/fetch/c_limit,f_auto,q_auto,fl_sanitize,w_1704,h_962/https://assets.ubuntu.com/v1/bc125de5-googlecloud.png 2x" alt="" width="852" height="481" loading="lazy" /> </div> <p> Learn more about Ubuntu <br class="u-hide--small"/> on Google Cloud Platform &rsaquo; </p> </a> </div> </div> </section> <section class="p-section"> <div class="u-fixed-width"> <hr class="p-rule" /> <div class="p-section--shallow"> <h2>Resources</h2> </div> </div> <div class="u-fixed-width"> <nav class="p-tabs js-tab-container"> <ul class="p-tabs__list js-tabbed-content" role="tablist" aria-label="Resources" data-maintain-hash="true"> <li class="p-tabs__item"> <a href="#videos-and-webinars" class="p-tabs__link" role="tab" aria-selected="true" aria-controls="videos-and-webinars-tab" id="videos-and-webinars">Videos and webinars</a> </li> <li class="p-tabs__item"> <a href="#whitepapers-and-industry-reports" class="p-tabs__link" role="tab" aria-selected="false" aria-controls="whitepapers-and-industry-reports-tab" id="whitepapers-and-industry-reports" tabindex="-1">Whitepapers and industry reports</a> </li> </ul> </nav> <div class="p-tabs__content" tabindex="0" role="tabpanel" id="videos-and-webinars-tab" aria-labelledby="videos-and-webinars"><div class="p-section--shallow"><div class="row"> <div class="col-3 col-medium-3"><p class="p-heading--5 u-no-margin--bottom u-hide--medium u-hide--small"> Henry Coggill, Chris Huffman </p><p class="u-hide--medium u-hide--small">24 January 2024</p><h2 class="p-heading--4 u-hide--large u-hide--small u-no-padding--top"> <a href="https://www.brighttalk.com/webcast/6793/591276">How does Ubuntu enable your compliance <br /> with FIPS, and DISA-STIG?</a> </h2></div> <div class="col-6 col-medium-3"><h3 class="p-heading--4 u-hide--medium" style="padding-top: 0.275rem;"> <a href="https://www.brighttalk.com/webcast/6793/591276">How does Ubuntu enable your compliance <br /> with FIPS, and DISA-STIG?</a> </h3><p><p> The operating system is the cornerstone of a security compliance program. Ubuntu Pro enables functionality such as FIPS-certified crypto libraries and system hardening with the Ubuntu Security Guide to help meet stringent government security standards. Watch this webinar to find out more. </p></p><hr class="p-rule--muted u-hide--large u-hide--small" /> <p class="p-heading--5 u-no-margin--bottom u-hide--large"> Henry Coggill, Chris Huffman </p><p class="u-hide--large">24 January 2024</p></div> <div class="col-3 u-hide--medium u-hide--small"><div class="p-image-container--16-9 is-cover"><img src="https://res.cloudinary.com/canonical/image/fetch/f_auto,q_auto,fl_sanitize,w_2400,h_1352/https://assets.ubuntu.com/v1/a8a4f114-how-does-ubuntu-transparent.png" srcset="https://res.cloudinary.com/canonical/image/fetch/c_limit,f_auto,q_auto,fl_sanitize,w_4800,h_2704/https://assets.ubuntu.com/v1/a8a4f114-how-does-ubuntu-transparent.png 2x" alt="" width="2400" height="1352" loading="lazy" class="p-image-container__image" style="background: #262626;" /></div></div> </div> </div> </div> <div class="p-tabs__content u-hide" tabindex="0" role="tabpanel" id="whitepapers-and-industry-reports-tab" aria-labelledby="whitepapers-and-industry-reports"><div class="p-section--shallow"><div class="row"> <div class="col-3 col-medium-3"><h2 class="p-heading--4 u-hide--large u-hide--small u-no-padding--top"> <a href="/engage/security-compliance-US-public-sector-FIPS-DISASTIG">Maximizing security and compliance <br /> in the US public sector with Ubuntu Pro</a> </h2></div> <div class="col-6 col-medium-3"><h3 class="p-heading--4 u-hide--medium" style="padding-top: 0.275rem;"> <a href="/engage/security-compliance-US-public-sector-FIPS-DISASTIG">Maximizing security and compliance <br /> in the US public sector with Ubuntu Pro</a> </h3><p><p> Navigating the maze of complex compliance requirements facing the US Public Sector is a daunting prospect. Confusing abbreviations and terminology only make charting this course more difficult. If you鈥檙e looking to understand what FIPS, FedRAMP, and DISA-STIG are all about, this whitepaper is for you. </p></p></div> <div class="col-3 u-hide--medium u-hide--small"><div class="p-image-container--16-9 is-cover"><img src="https://res.cloudinary.com/canonical/image/fetch/f_auto,q_auto,fl_sanitize,w_2400,h_1352/https://assets.ubuntu.com/v1/eeb67d88-maximizing-security-transparent.png" srcset="https://res.cloudinary.com/canonical/image/fetch/c_limit,f_auto,q_auto,fl_sanitize,w_4800,h_2704/https://assets.ubuntu.com/v1/eeb67d88-maximizing-security-transparent.png 2x" alt="" width="2400" height="1352" loading="lazy" class="p-image-container__image" style="background: #262626;" /></div></div> </div> </div><div class="p-section--shallow"><div class="row"> <div class="col-3 col-medium-3"><h2 class="p-heading--4 u-hide--large u-hide--small u-no-padding--top"> <a href="/engage/a-guide-to-infrastructure-hardening">A guide to Infrastructure Hardening</a> </h2></div> <div class="col-6 col-medium-3"><h3 class="p-heading--4 u-hide--medium" style="padding-top: 0.275rem;"> <a href="/engage/a-guide-to-infrastructure-hardening">A guide to Infrastructure Hardening</a> </h3><p><p> The ever-present threats of ransomware and data breaches make it imperative to lock down systems and prevent attackers from gaining a foothold. Using industry best-practice guidelines such as the CIS benchmarks, this whitepaper will walk you through the process of hardening Linux-based deployments. </p></p></div> <div class="col-3 u-hide--medium u-hide--small"><div class="p-image-container--16-9 is-cover"><img src="https://res.cloudinary.com/canonical/image/fetch/f_auto,q_auto,fl_sanitize,w_2400,h_1352/https://assets.ubuntu.com/v1/fec3b184-a-guide-to-transparent.png" srcset="https://res.cloudinary.com/canonical/image/fetch/c_limit,f_auto,q_auto,fl_sanitize,w_4800,h_2704/https://assets.ubuntu.com/v1/fec3b184-a-guide-to-transparent.png 2x" alt="" width="2400" height="1352" loading="lazy" class="p-image-container__image" style="background: #262626;" /></div></div> </div> </div> </div> </div> </section> <section class="p-section"> <div class="u-fixed-width"> <div class="p-image-container--cinematic u-hide--medium u-hide--small"> <img src="https://res.cloudinary.com/canonical/image/fetch/f_auto,q_auto,fl_sanitize,w_1848,h_771/https://assets.ubuntu.com/v1/a01f3eb3-servers.png" srcset="https://res.cloudinary.com/canonical/image/fetch/c_limit,f_auto,q_auto,fl_sanitize,w_3696,h_1542/https://assets.ubuntu.com/v1/a01f3eb3-servers.png 2x" alt="" width="1848" height="771" loading="lazy" /> </div> </div> </section> <section class="p-section" id="compliance-profiles"> <div class="p-section--shallow"> <div class="row--50-50"> <hr class="p-rule" /> <div class="col"> <h2> Ubuntu compliance <br /> & hardening profiles </h2> </div> <div class="col"> <p> The default configuration of Ubuntu LTS releases balances between usability, performance, and security. Mission-critical systems can be further hardened to reduce their attack surface. Reducing the attack surface is a widely accepted security best practice, and is often required by cybersecurity frameworks. Canonical works with industry leading organizations, such as CIS and DISA, to produce security hardening benchmarks for Ubuntu. </p> <p> These security benchmarks contain hundreds of steps which can be prohibitively time-consuming to apply manually, so we provide the <a href="/security/certifications/docs/usg">Ubuntu Security Guide (USG)</a> – a tool based on OpenSCAP – to automate the process. USG can generate remediation scripts to harden a system in one procedure, as well as producing audit reports detailing the hardening rules that have been applied. USG profiles are available for CIS benchmarks and DISA STIGs. </p> </div> </div> </div> <div class="row--50-50"> <hr class="p-rule--muted" /> <div class="col"> <div class="p-section--shallow"> <div class="row"> <div class="col-3"> <div class="p-image-container is-highlighted"> <img src="https://res.cloudinary.com/canonical/image/fetch/f_auto,q_auto,fl_sanitize,w_852,h_569/https://assets.ubuntu.com/v1/56bf9493-cis.png" srcset="https://res.cloudinary.com/canonical/image/fetch/c_limit,f_auto,q_auto,fl_sanitize,w_1704,h_1138/https://assets.ubuntu.com/v1/56bf9493-cis.png 2x" alt="" width="852" height="569" loading="lazy" /> </div> <p> <a href="/security/cis">Center for Internet Security (CIS) certified benchmarks for Ubuntu systems &rsaquo;</a> </p> </div> <div class="col-3"> <p>USG profile:</p> <hr class="p-rule--muted u-no-margin--bottom" /> <ul class="p-list--divided"> <li class="p-list__item is-ticked">Ubuntu 22.04 LTS</li> <li class="p-list__item is-ticked">Ubuntu 20.04 LTS</li> <li class="p-list__item is-ticked">Ubuntu 18.04 LTS</li> <li class="p-list__item is-ticked">Ubuntu 16.04 LTS</li> </ul> </div> </div> </div> </div> <div class="col"> <div class="p-section--shallow"> <div class="row"> <div class="col-3"> <div class="p-image-container is-highlighted"> <img src="https://res.cloudinary.com/canonical/image/fetch/f_auto,q_auto,fl_sanitize,w_852,h_569/https://assets.ubuntu.com/v1/1c385837-disa.png" srcset="https://res.cloudinary.com/canonical/image/fetch/c_limit,f_auto,q_auto,fl_sanitize,w_1704,h_1138/https://assets.ubuntu.com/v1/1c385837-disa.png 2x" alt="" width="852" height="569" loading="lazy" /> </div> <p> <a href="/security/disa-stig">Defence Information System Agency (DISA) Security Technical Implementation Guides (STIGs) &rsaquo;</a> </p> </div> <div class="col-3"> <p>USG profile:</p> <hr class="p-rule--muted u-no-margin--bottom" /> <ul class="p-list--divided"> <li class="p-list__item is-ticked">Ubuntu 22.04 LTS</li> <li class="p-list__item is-ticked">Ubuntu 20.04 LTS</li> </ul> <p>Configuration guides:</p> <hr class="p-rule--muted u-no-margin--bottom" /> <ul class="p-list--divided"> <li class="p-list__item is-ticked">Ubuntu 18.04 LTS</li> <li class="p-list__item is-ticked">Ubuntu 16.04 LTS</li> </ul> </div> </div> </div> </div> </div> <div class="row"> <hr class="p-rule--muted" /> <div class="col-start-large-7 col-6 col-start-medium-4 col-medium-3"> <a href="/security/contact-us" class="p-button js-invoke-modal">Contact us</a> </div> </div> </section> <section class="p-section" id="security-certifications"> <div class="p-section--shallow"> <div class="row--50-50"> <hr class="p-rule" /> <div class="col"> <h2>Ubuntu FIPS certifications</h2> </div> <div class="col"> <p> We strive to make Ubuntu the platform of choice in regulated and high-security environments. Ubuntu Pro enables access to the certification artifacts as well as the necessary tooling for such environments. The following is a list of the certifications available with <a href="/pro">Ubuntu Pro</a>. Click on each for more detailed information. </p> </div> </div> </div> <div class="row--50-50"> <hr class="p-rule--muted" /> <div class="col"> <div class="p-section--shallow"> <div class="row"> <div class="col-3"> <div class="p-image-container is-highlighted"> <img src="https://res.cloudinary.com/canonical/image/fetch/f_auto,q_auto,fl_sanitize,w_852,h_569/https://assets.ubuntu.com/v1/babd31f2-fips-140-2.png" srcset="https://res.cloudinary.com/canonical/image/fetch/c_limit,f_auto,q_auto,fl_sanitize,w_1704,h_1138/https://assets.ubuntu.com/v1/babd31f2-fips-140-2.png 2x" alt="" width="852" height="569" loading="lazy" /> </div> <p> <a href="/security/fips">FIPS 140-2 Level 1 &rsaquo;</a> </p> </div> <div class="col-3"> <p>These modules are NIST-certified:</p> <hr class="p-rule--muted u-no-margin--bottom" /> <ul class="p-list--divided"> <li class="p-list__item is-ticked">Ubuntu 20.04 LTS</li> <li class="p-list__item is-ticked">Ubuntu 18.04 LTS</li> <li class="p-list__item is-ticked">Ubuntu 16.04 LTS</li> </ul> </div> </div> </div> </div> <div class="col"> <div class="p-section--shallow"> <div class="row"> <div class="col-3"> <div class="p-image-container is-highlighted"> <img src="https://res.cloudinary.com/canonical/image/fetch/f_auto,q_auto,fl_sanitize,w_852,h_569/https://assets.ubuntu.com/v1/9ecfeade-fips-140-3.png" srcset="https://res.cloudinary.com/canonical/image/fetch/c_limit,f_auto,q_auto,fl_sanitize,w_1704,h_1138/https://assets.ubuntu.com/v1/9ecfeade-fips-140-3.png 2x" alt="" width="852" height="569" loading="lazy" /> </div> <p> <a href="/blog/ubuntu-22-04-fips-140-3-modules-available-for-preview">FIPS 140-3 Level 1 &rsaquo;</a> </p> </div> <div class="col-3"> <p> These modules have been assessed by a NIST-approved testing laboratory and are awaiting final certification by <a href="https://csrc.nist.gov/Projects/cryptographic-module-validation-program/modules-in-process/modules-in-process-list">CMVP</a>: </p> <hr class="p-rule--muted u-no-margin--bottom" /> <ul class="p-list--divided"> <li class="p-list__item is-ticked">Ubuntu 22.04 LTS</li> </ul> </div> </div> </div> </div> </div> <div class="row"> <hr class="p-rule--muted" /> <div class="col-start-large-7 col-6 col-start-medium-4 col-medium-3"> <a href="/security/contact-us" class="p-button js-invoke-modal">Contact us</a> </div> </div> </section> <section class="p-section"><div class="u-fixed-width"> <hr class="p-rule"> <div class="u-fixed-width"> <div class="p-section--shallow"> <h2>Frequently asked questions about security certifications</h2> </div> </div> <div class="p-section--shallow"> <div class="row"> <div class="col-9 col-start-large-4"> <hr class="is-muted"> </div> </div> <div class="row"> <div class="col-3 col-start-large-4"> <h3 class="p-heading--5">How do I harden my Ubuntu system?</h3> </div> <div class="col-6"> <p> Hardening always involves a tradeoff with usability and performance. The default configuration of Ubuntu LTS releases, as provided by Canonical, balances between usability, performance, and security. However, systems with a dedicated workload are well positioned to benefit from hardening. You can reduce your workload's attack surface by applying an Industry-accepted baseline. At Canonical we recommend applying <a href="/security/cis">the Center for Internet Security (CIS) benchmarks</a> for hardening the configuration of Ubuntu. </p> </div> </div> <div class="row"> <div class="col-9 col-start-large-4"> <hr class="is-muted"> </div> </div> <div class="row"> <div class="col-3 col-start-large-4"> <h3 class="p-heading--5">How do I comply with PCI-DSS?</h3> </div> <div class="col-6"> <p> PCI-DSS is a payment industry standard and any company that stores, processes, or transmits payment card or cardholder information is required to comply with it. The standard is defined by the Payment Card Industry council and defines measures and processes to secure online financial transactions. The standard is about making business as usual processes like monitoring of security controls, timely response, review of environmental and organizational changes, as well as review of hardware and software being under support by its vendors. For companies with large volumes of transactions compliance with the standard is enforced by an audit of a Qualified Security Assessor (QSA). </p> <p> Achieving and maintaining compliance is a complex and costly process that involves business processes in addition to software requirements. Ubuntu by Canonical contains software and security controls, such as disk encryption, password settings configuration, <a href="/security/fips">cryptographic compliance with FIPS140-2</a>, <a href="/security/cis">CIS hardening</a>, as well as <a href="/pro">a comprehensive Enterprise software maintenance program</a>, to achieve and maintain compliance with the standard. </p> </div> </div> </div> <div class="p-cta-block"> <div class="row"> <div class="col-6 col-start-large-7"> <a href="/security/contact-us" class="p-button js-invoke-modal">Contact us</a> </div> </div> </div> </div></section> <hr class="p-rule is-fixed-width" /> <section class="p-strip is-deep"> <div class="u-fixed-width"> <h2>Security Compliance and Certification documentation</h2> <h2> <a href="/security/certifications/docs">Read the docs &rsaquo;</a> </h2> </div> </section>  <div class="u-hide" id="contact-form-container" data-form-location="/shared/forms/interactive/general" data-form-id="1257" data-lp-id="2154" data-return-url="/contact-us/form/thank-you" data-lp-url="https://pages.ubuntu.com/things-contact-us.html"></div> <script src="/static/js/dist/tabbedContent.js?v=2228db7"></script> <script> function adjustScrollOffset() { const hash = window.location.hash; if (hash) { const element = document.querySelector(hash); if (element) { const offset = 100; const elementPosition = element.getBoundingClientRect().top + window.pageYOffset; const offsetPosition = elementPosition - offset; window.scrollTo({ top: offsetPosition, behavior: "smooth" }); } } } window.addEventListener("load", adjustScrollOffset); window.addEventListener("hashchange", adjustScrollOffset); </script> </main> </div>  <footer class="is-dark p-strip u-clearfix" style="background-color: #2d2d2d;"> <nav aria-label="Footer navigation" id="main-navigation" class="p-footer__nav p-section"> <div class="row"> <hr class="p-rule--muted u-no-margin--bottom" /> <div class="col-3 col-medium-2"> <h2 class="p-heading--5"> <a class="u-hide--small" href="/openstack"> OpenStack </a> <a class="u-hide--medium u-hide--large js-footer-accordion-cta" href="/openstack" aria-controls="/openstack-footer-nav"> OpenStack </a> </h2> </div> <div class="col-9 col-medium-4 u-hide--small"> <ul class="p-inline-list p-footer-list" id="/openstack-footer-nav"> <li class="p-inline-list__item"><a href="/openstack/what-is-openstack">What is OpenStack</a></li> <li class="p-inline-list__item"><a href="/openstack/features">Features</a></li> <li class="p-inline-list__item"><a href="/openstack/managed">Managed</a></li> <li class="p-inline-list__item"><a href="/openstack/consulting">Consulting</a></li> <li class="p-inline-list__item"><a href="/openstack/install">Install</a></li> <li class="p-inline-list__item"><a href="/openstack/support">Support</a></li> </ul> </div> </div> <div class="row"> <hr class="p-rule--muted u-no-margin--bottom" /> <div class="col-3 col-medium-2"> <h2 class="p-heading--5"> <a class="u-hide--small" href="/ceph"> Ceph </a> <a class="u-hide--medium u-hide--large js-footer-accordion-cta" href="/ceph" aria-controls="/ceph-footer-nav"> Ceph </a> </h2> </div> <div class="col-9 col-medium-4 u-hide--small"> <ul class="p-inline-list p-footer-list" id="/ceph-footer-nav"> <li class="p-inline-list__item"><a href="/ceph/what-is-ceph">What is Ceph</a></li> <li class="p-inline-list__item"><a href="/ceph/managed">Managed</a></li> <li class="p-inline-list__item"><a href="/ceph/consulting">Consulting</a></li> <li class="p-inline-list__item"><a href="/ceph/docs">Docs</a></li> <li class="p-inline-list__item"><a href="/ceph/install">Install</a></li> </ul> </div> </div> <div class="row"> <hr class="p-rule--muted u-no-margin--bottom" /> <div class="col-3 col-medium-2"> <h2 class="p-heading--5"> <a class="u-hide--small" href="/kubernetes"> Kubernetes </a> <a class="u-hide--medium u-hide--large js-footer-accordion-cta" href="/kubernetes" aria-controls="/kubernetes-footer-nav"> Kubernetes </a> </h2> </div> <div class="col-9 col-medium-4 u-hide--small"> <ul class="p-inline-list p-footer-list" id="/kubernetes-footer-nav"> <li class="p-inline-list__item"><a href="/kubernetes/what-is-kubernetes">What is Kubernetes</a></li> <li class="p-inline-list__item"><a href="/kubernetes/managed">Managed</a></li> <li class="p-inline-list__item"><a href="/kubernetes/install">Install</a></li> <li class="p-inline-list__item"><a href="/kubernetes/documentation">Docs</a></li> <li class="p-inline-list__item"><a href="/kubernetes/resources">Resources</a></li> </ul> </div> </div> <div class="row"> <hr class="p-rule--muted u-no-margin--bottom" /> <div class="col-3 col-medium-2"> <h2 class="p-heading--5"> <a class="u-hide--small" href="/managed"> Managed Services </a> <a class="u-hide--medium u-hide--large js-footer-accordion-cta" href="/managed" aria-controls="/managed-footer-nav"> Managed Services </a> </h2> </div> <div class="col-9 col-medium-4 u-hide--small"> <ul class="p-inline-list p-footer-list" id="/managed-footer-nav"> <li class="p-inline-list__item"><a href="/openstack/managed">OpenStack</a></li> <li class="p-inline-list__item"><a href="/kubernetes/managed">Kubernetes</a></li> <li class="p-inline-list__item"><a href="/ceph/managed">Ceph</a></li> <li class="p-inline-list__item"><a href="/managed/apps">Apps</a></li> <li class="p-inline-list__item"><a href="/managed/firefighting-support">Firefighting</a></li> </ul> </div> </div> <div class="row"> <hr class="p-rule--muted u-no-margin--bottom" /> <div class="col-3 col-medium-2"> <h2 class="p-heading--5"> <a class="u-hide--small" href="/ai"> AI / ML </a> <a class="u-hide--medium u-hide--large js-footer-accordion-cta" href="/ai" aria-controls="/ai-footer-nav"> AI / ML </a> </h2> </div> <div class="col-9 col-medium-4 u-hide--small"> <ul class="p-inline-list p-footer-list" id="/ai-footer-nav"> <li class="p-inline-list__item"><a href="/ai/mlops">MLOps</a></li> <li class="p-inline-list__item"><a href="/ai/what-is-kubeflow">Kubeflow</a></li> <li class="p-inline-list__item"><a href="/ai/mlflow">MLflow</a></li> <li class="p-inline-list__item"><a href="/ai/consulting">Consulting</a></li> <li class="p-inline-list__item"><a href="/ai/data-science">Data Science</a></li> <li class="p-inline-list__item"><a href="/ai/mlops-workshop">MLOps workshop</a></li> </ul> </div> </div> <div class="row"> <hr class="p-rule--muted u-no-margin--bottom" /> <div class="col-3 col-medium-2"> <h2 class="p-heading--5"> <a class="u-hide--small" href="/robotics"> Robotics </a> <a class="u-hide--medium u-hide--large js-footer-accordion-cta" href="/robotics" aria-controls="/robotics-footer-nav"> Robotics </a> </h2> </div> <div class="col-9 col-medium-4 u-hide--small"> <ul class="p-inline-list p-footer-list" id="/robotics-footer-nav"> <li class="p-inline-list__item"><a href="/robotics/ros-esm">ROS ESM</a></li> <li class="p-inline-list__item"><a href="/robotics/what-is-ros">What is ROS</a></li> <li class="p-inline-list__item"><a href="/robotics/community">Community</a></li> <li class="p-inline-list__item"><a href="/robotics/docs">Docs</a></li> </ul> </div> </div> <div class="row"> <hr class="p-rule--muted u-no-margin--bottom" /> <div class="col-3 col-medium-2"> <h2 class="p-heading--5"> <a class="u-hide--small" href="/internet-of-things"> IoT </a> <a class="u-hide--medium u-hide--large js-footer-accordion-cta" href="/internet-of-things" aria-controls="/internet-of-things-footer-nav"> IoT </a> </h2> </div> <div class="col-9 col-medium-4 u-hide--small"> <ul class="p-inline-list p-footer-list" id="/internet-of-things-footer-nav"> <li class="p-inline-list__item"><a href="/internet-of-things/appstore">App store</a></li> <li class="p-inline-list__item"><a href="/embedded">Embedded Linux</a></li> <li class="p-inline-list__item"><a href="/internet-of-things/management">Management</a></li> </ul> </div> </div> <div class="row"> <hr class="p-rule--muted u-no-margin--bottom" /> <div class="col-3 col-medium-2"> <h2 class="p-heading--5"> <a class="u-hide--small" href="/core"> Ubuntu Core </a> <a class="u-hide--medium u-hide--large js-footer-accordion-cta" href="/core" aria-controls="/core-footer-nav"> Ubuntu Core </a> </h2> </div> <div class="col-9 col-medium-4 u-hide--small"> <ul class="p-inline-list p-footer-list" id="/core-footer-nav"> <li class="p-inline-list__item"><a href="/core/features">Features</a></li> <li class="p-inline-list__item"><a href="/core/stories">Success stories</a></li> <li class="p-inline-list__item"><a href="/core/services">Services</a></li> <li class="p-inline-list__item"><a href="/core/docs">Docs</a></li> </ul> </div> </div> <div class="row"> <hr class="p-rule--muted u-no-margin--bottom" /> <div class="col-3 col-medium-2"> <h2 class="p-heading--5"> <a class="u-hide--small" href="/desktop"> Ubuntu Desktop </a> <a class="u-hide--medium u-hide--large js-footer-accordion-cta" href="/desktop" aria-controls="/desktop-footer-nav"> Ubuntu Desktop </a> </h2> </div> <div class="col-9 col-medium-4 u-hide--small"> <ul class="p-inline-list p-footer-list" id="/desktop-footer-nav"> <li class="p-inline-list__item"><a href="/desktop/organisations">Organisations</a></li> <li class="p-inline-list__item"><a href="/desktop/developers">Developers</a></li> <li class="p-inline-list__item"><a href="/desktop/flavours">Flavours</a></li> <li class="p-inline-list__item"><a href="/desktop/wsl">WSL</a></li> </ul> </div> </div> <div class="row"> <hr class="p-rule--muted u-no-margin--bottom" /> <div class="col-3 col-medium-2"> <h2 class="p-heading--5"> <a class="u-hide--small" href="/server"> Ubuntu Server </a> <a class="u-hide--medium u-hide--large js-footer-accordion-cta" href="/server" aria-controls="/server-footer-nav"> Ubuntu Server </a> </h2> </div> <div class="col-9 col-medium-4 u-hide--small"> <ul class="p-inline-list p-footer-list" id="/server-footer-nav"> <li class="p-inline-list__item"><a href="/server/hyperscale">Hyperscale</a></li> <li class="p-inline-list__item"><a href="/server/docs">Docs</a></li> </ul> </div> </div> <div class="row"> <hr class="p-rule--muted u-no-margin--bottom" /> <div class="col-3 col-medium-2"> <h2 class="p-heading--5"> <a class="u-hide--small" href="/cloud"> Cloud </a> <a class="u-hide--medium u-hide--large js-footer-accordion-cta" href="/cloud" aria-controls="/cloud-footer-nav"> Cloud </a> </h2> </div> <div class="col-9 col-medium-4 u-hide--small"> <ul class="p-inline-list p-footer-list" id="/cloud-footer-nav"> <li class="p-inline-list__item"><a href="/cloud/cloud-computing">What is cloud computing</a></li> <li class="p-inline-list__item"><a href="/cloud/private-cloud">What is private cloud</a></li> <li class="p-inline-list__item"><a href="/cloud/hybrid-cloud">What is hybrid cloud</a></li> <li class="p-inline-list__item"><a href="/cloud/multi-cloud">What is multi-cloud</a></li> <li class="p-inline-list__item"><a href="/cloud/public-cloud">Public cloud</a></li> </ul> </div> </div> <div class="row"> <hr class="p-rule--muted u-no-margin--bottom" /> <div class="col-3 col-medium-2"> <h2 class="p-heading--5"> <a class="u-hide--small" href="/security"> Security </a> <a class="u-hide--medium u-hide--large js-footer-accordion-cta" href="/security" aria-controls="/security-footer-nav"> Security </a> </h2> </div> <div class="col-9 col-medium-4 u-hide--small"> <ul class="p-inline-list p-footer-list" id="/security-footer-nav"> <li class="p-inline-list__item"><a href="/security/esm">ESM</a></li> <li class="p-inline-list__item"><a href="/security/livepatch">Livepatch</a></li> <li class="p-inline-list__item"><a href="/security/compliance-automation">Certifications & Hardening</a></li> <li class="p-inline-list__item"><a href="/security/cves">CVEs</a></li> <li class="p-inline-list__item"><a href="/security/notices">Notices</a></li> <li class="p-inline-list__item"><a href="/security/docker-images">Docker Images</a></li> </ul> </div> </div> <div class="row"> <hr class="p-rule--muted u-no-margin--bottom" /> <div class="col-3 col-medium-2"> <h2 class="p-heading--5"> <a class="u-hide--small" href="/landscape"> Landscape </a> <a class="u-hide--medium u-hide--large js-footer-accordion-cta" href="/landscape" aria-controls="/landscape-footer-nav"> Landscape </a> </h2> </div> <div class="col-9 col-medium-4 u-hide--small"> <ul class="p-inline-list p-footer-list" id="/landscape-footer-nav"> <li class="p-inline-list__item"><a href="/landscape/features">Features</a></li> <li class="p-inline-list__item"><a href="/landscape/managed">Managed</a></li> <li class="p-inline-list__item"><a href="/landscape/compare">Compare</a></li> <li class="p-inline-list__item"><a href="/landscape/docs/quickstart-deployment">Install</a></li> <li class="p-inline-list__item"><a href="/landscape/docs">Docs</a></li> <li class="p-inline-list__item"><a href="https://landscape.canonical.com/">Log in to Landscape</a></li> </ul> </div> </div> <div class="row"> <hr class="p-rule--muted u-no-margin--bottom" /> <div class="col-3 col-medium-2"> <h2 class="p-heading--5"> <a class="u-hide--small" href="/containers"> Containers </a> <a class="u-hide--medium u-hide--large js-footer-accordion-cta" href="/containers" aria-controls="/containers-footer-nav"> Containers </a> </h2> </div> <div class="col-9 col-medium-4 u-hide--small"> <ul class="p-inline-list p-footer-list" id="/containers-footer-nav"> <li class="p-inline-list__item"><a href="/containers/what-are-containers">What are containers</a></li> <li class="p-inline-list__item"><a href="/containers/chiseled">Chiseled Ubuntu</a></li> <li class="p-inline-list__item"><a href="/containers/chiseled/dotnet">Chiseled and .NET</a></li> </ul> </div> </div> <div class="row"> <hr class="p-rule--muted u-no-margin--bottom" /> <div class="col-3 col-medium-2"> <h2 class="p-heading--5"> <a class="u-hide--small" href="/download"> Downloads </a> <a class="u-hide--medium u-hide--large js-footer-accordion-cta" href="/download" aria-controls="/download-footer-nav"> Downloads </a> </h2> </div> <div class="col-9 col-medium-4 u-hide--small"> <ul class="p-inline-list p-footer-list" id="/download-footer-nav"> <li class="p-inline-list__item"><a href="/download/desktop">Desktop</a></li> <li class="p-inline-list__item"><a href="/download/server">Server</a></li> <li class="p-inline-list__item"><a href="/download/core">Core</a></li> <li class="p-inline-list__item"><a href="/download/cloud">Cloud</a></li> </ul> </div> </div> <div class="row"> <hr class="p-rule--muted u-no-margin--bottom" /> <div class="col-3 col-medium-2"> <h2 class="p-heading--5"> <a class="u-hide--small" href="/support"> Support </a> <a class="u-hide--medium u-hide--large js-footer-accordion-cta" href="/support" aria-controls="/support-footer-nav"> Support </a> </h2> </div> <div class="col-9 col-medium-4 u-hide--small"> <ul class="p-inline-list p-footer-list" id="/support-footer-nav"> <li class="p-inline-list__item"><a href="/pro/dashboard">Your subscriptions</a></li> <li class="p-inline-list__item"><a href="/pro/users">Account users</a></li> <li class="p-inline-list__item"><a href="/pricing/pro">Pricing</a></li> <li class="p-inline-list__item"><a href="https://discourse.ubuntu.com/c/project/ubuntu-pro/116/">Discourse</a></li> </ul> </div> </div> <div class="row"> <hr class="p-rule--muted u-no-margin--bottom" /> <div class="col-3 col-medium-2"> <h2 class="p-heading--5"> <a class="u-hide--small" href="/pricing"> Pricing </a> <a class="u-hide--medium u-hide--large js-footer-accordion-cta" href="/pricing" aria-controls="/pricing-footer-nav"> Pricing </a> </h2> </div> <div class="col-9 col-medium-4 u-hide--small"> <ul class="p-inline-list p-footer-list" id="/pricing-footer-nav"> <li class="p-inline-list__item"><a href="/pricing/consulting">Consulting</a></li> <li class="p-inline-list__item"><a href="/pricing/desktop">Desktops</a></li> <li class="p-inline-list__item"><a href="/pricing/devices">Devices</a></li> </ul> </div> </div>  <div class="row"> <hr class="p-rule--muted u-no-margin--bottom" /> <div class="col-3 col-medium-2"> <h2 class="p-heading--5"> Solutions </h2> </div> <div class="col-9 col-medium-4"> <ul class="p-inline-list p-footer-list u-responsive-realign"> <li class="p-inline-list__item"> <a href="https://canonical.com/solutions/ai">AI</a> </li> <li class="p-inline-list__item"> <a href="https://canonical.com/data">Data</a> </li> <li class="p-inline-list__item"> <a href="https://canonical.com/solutions/infrastructure">Infrastructure</a> </li> <li class="p-inline-list__item"> <a href="https://ubuntu.com/managed?_gl=1*e5c2b5*_gcl_au*NDE2OTY3MDMxLjE3MzgxNDUxNTA.">Managed IT services</a> </li> <li class="p-inline-list__item"> <a href="https://canonical.com/solutions/secure-open-source">Open source security</a> </li> <li class="p-inline-list__item"> <a href="https://canonical.com/solutions/iot-and-devices">IoT and devices</a> </li> <li class="p-inline-list__item"> <a href="https://canonical.com/solutions/cloud-native-development">Cloud native development</a> </li> </ul> </div> </div> <div class="row"> <hr class="p-rule--muted u-no-margin--bottom" /> <div class="col-3 col-medium-2"> <h2 class="p-heading--5"> Sectors </h2> </div> <div class="col-9 col-medium-4"> <ul class="p-inline-list p-footer-list u-responsive-realign"> <li class="p-inline-list__item"> <a href="/automotive">Automotive</a> </li> <li class="p-inline-list__item"> <a href="/industrial">Industrial</a> </li> <li class="p-inline-list__item"> <a href="/gov">Government</a> </li> <li class="p-inline-list__item"> <a href="/telco">Telco</a> </li> <li class="p-inline-list__item"> <a href="/financial-services">Finance</a> </li> </ul> </div> </div> </nav> <nav aria-label="Resources navigation"> <div class="row p-section"> <hr class="p-rule--muted" /> <div class="col-3 col-medium-2 col-small-2"> <a class="p-button--positive" href="/contact-us">Contact us</a> </div> <div class="col-6 col-large-2 col-medium-4"> <ul class="p-inline-list u-responsive-realign"> <li class="p-inline-list__item"> <a href="/about">About us</a> </li> <li class="p-inline-list__item"> <a href="/community">Community</a> </li> <li class="p-inline-list__item"> <a href="https://www.canonical.com/careers">Careers</a> </li> <li class="p-inline-list__item"> <a href="/blog">Blog</a> </li> <li class="p-inline-list__item"> <a href="/engage">Resources</a> </li> <li class="p-inline-list__item"> <a href="/blog/press-centre">Press centre</a> </li> </ul> </div> <div class="col-3 col-large-2 col-start-medium-3 col-medium-4"> <ul class="p-inline-list-icons u-no-margin--left u-no-padding--left"> <li class="p-inline-list__item"> <a class="p-inline-list__link--twitter" title="Follow Ubuntu on Twitter" href="https://twitter.com/ubuntu"> <svg xmlns="http://www.w3.org/2000/svg" height="25" width="25" viewBox="0 0 375 374.9999"> <defs> <style> .twitter-icon { fill: #666666; } .cls-2 { fill: #e5e5e5; } </style> </defs> <g> <path class="twitter-icon" d="M 187.46875 7.09375 C 87.851562 7.09375 7.09375 87.851562 7.09375 187.46875 C 7.09375 287.085938 87.851562 367.84375 187.46875 367.84375 C 287.085938 367.84375 367.84375 287.085938 367.84375 187.46875 C 367.84375 87.851562 287.085938 7.09375 187.46875 7.09375" /> </g> <g class="cls-2" transform="translate(85, 75)"> <svg xmlns="http://www.w3.org/2000/svg" x="-32" y="-30" height="280" width="280" viewBox="0 0 50 50"> <path d="M 6.9199219 6 L 21.136719 26.726562 L 6.2285156 44 L 9.40625 44 L 22.544922 28.777344 L 32.986328 44 L 43 44 L 28.123047 22.3125 L 42.203125 6 L 39.027344 6 L 26.716797 20.261719 L 16.933594 6 L 6.9199219 6 z" /> </svg> </g> </svg> </a> </li> <li class="p-inline-list__item"> <a class="p-inline-list__link--facebook" title="Follow Ubuntu on Facebook" href="https://www.facebook.com/ubuntulinux/"> <svg xmlns="http://www.w3.org/2000/svg" height="25" width="25" viewbox="0 0 32 32"> <defs> <style> .facebook-icon { fill: #666666; } .cls-2 { fill: #fff; } </style> </defs> <g> <path class="facebook-icon" d="M15.947 0C7.14 0 0 7.143 0 15.95 0 24.76 7.142 31.9 15.95 31.9s15.948-7.14 15.948-15.95c0-4.23-1.68-8.286-4.672-11.277C24.234 1.68 20.176 0 15.946 0z" /> </g> <path class="cls-2" d="M18.632 5.102c-2.91 0-4.904 1.776-4.904 5.04v2.55h-3.293v3.814h3.293V26.87c1.353-.18 2.678-.53 3.942-1.045v-9.31h3.285l.492-3.812h-3.784v-2.18c0-1.104.357-2.238 1.894-1.855h2.02V5.252c-.978-.103-1.96-.154-2.943-.15h-.002z" /> </svg> </a> </li> <li class="p-inline-list__item"> <a class="p-inline-list__link--linkedin" title="Find Canonical on LinkedIn" href="https://www.linkedin.com/company/234280"> <svg xmlns="http://www.w3.org/2000/svg" height="25" width="25" viewbox="0 0 33 33"> <defs> <style> .linkedin-icon { fill: #666666; } .cls-2 { fill: #fff; } </style> </defs> <g> <path class="linkedin-icon" d="M16.26 0C7.28 0 0 7.28 0 16.26s7.28 16.262 16.26 16.262 16.262-7.28 16.262-16.26C32.522 7.28 25.242 0 16.262 0z" /> </g> <path class="cls-2" d="M7 8.512v16.38c0 .758.63 1.37 1.404 1.37h16.192c.775 0 1.404-.612 1.404-1.37V8.512c0-.755-.63-1.37-1.404-1.37H8.404C7.63 7.143 7 7.757 7 8.513zm5.76 14.636H9.89v-8.634h2.87v8.634zm-1.435-9.812h-.02c-.962 0-1.585-.663-1.585-1.492 0-.847.642-1.492 1.624-1.492s1.586.645 1.604 1.492c0 .83-.623 1.492-1.623 1.492zm3.022 9.812s.038-7.824 0-8.634h2.87v1.252h-.02c.38-.59 1.058-1.454 2.607-1.454 1.888 0 3.303 1.234 3.303 3.885v4.95h-2.87V18.53c0-1.162-.415-1.953-1.453-1.953-.793 0-1.265.534-1.472 1.05-.076.184-.095.44-.095.7v4.82h-2.87z" /> </svg> </a> </li> <li class="p-inline-list__item"> <a class="p-inline-list__link--instagram" title="Follow Ubuntu on Instagram" href="https://www.instagram.com/ubuntu_os/"> <svg xmlns="http://www.w3.org/2000/svg" height="25" width="25" viewBox="0 0 375 375"> <defs> <style> .instagram-icon { fill: #666666; } .cls-2 { fill: #fff; } </style> </defs> <g clip-path="url(#clip0_11_324)"> <path class="instagram-icon" d="M187.469 7.09375C87.8516 7.09375 7.09375 87.8516 7.09375 187.469C7.09375 287.086 87.8516 367.844 187.469 367.844C287.086 367.844 367.844 287.086 367.844 187.469C367.844 87.8516 287.086 7.09375 187.469 7.09375Z" /> <path class="cls-2" d="M140.78 73.6689C128.777 74.2352 120.581 76.1507 113.415 78.9663C105.999 81.8564 99.7139 85.7347 93.4599 92.0113C87.2059 98.2878 83.3547 104.578 80.4849 112.005C77.7076 119.186 75.826 127.39 75.2958 139.399C74.7656 151.408 74.6483 155.269 74.7069 185.902C74.7656 216.536 74.9009 220.376 75.483 232.41C76.0561 244.411 77.9648 252.605 80.7804 259.773C83.675 267.189 87.5488 273.472 93.8276 279.728C100.106 285.984 106.392 289.827 113.837 292.701C121.012 295.474 129.217 297.364 141.224 297.89C153.232 298.416 157.096 298.538 187.721 298.479C218.346 298.42 222.201 298.285 234.233 297.714C246.265 297.143 254.417 295.221 261.587 292.419C269.003 289.518 275.29 285.651 281.542 279.369C287.794 273.088 291.643 266.794 294.51 259.362C297.29 252.188 299.178 243.982 299.7 231.984C300.225 219.943 300.349 216.099 300.291 185.469C300.232 154.84 300.094 151 299.524 138.97C298.953 126.941 297.042 118.771 294.228 111.599C291.329 104.183 287.46 97.9043 281.184 91.6435C274.907 85.3828 268.608 81.5361 261.178 78.6753C253.999 75.898 245.798 74.0051 233.791 73.4862C221.784 72.9673 217.919 72.8342 187.283 72.8928C156.647 72.9515 152.812 73.0824 140.78 73.6689ZM142.098 277.596C131.099 277.118 125.127 275.29 121.147 273.761C115.877 271.73 112.123 269.276 108.156 265.348C104.19 261.42 101.753 257.652 99.6958 252.393C98.1504 248.413 96.2891 242.448 95.7747 231.449C95.2151 219.562 95.0978 215.992 95.0324 185.875C94.967 155.758 95.082 152.194 95.6032 140.302C96.0725 129.312 97.9112 123.333 99.4386 119.356C101.469 114.079 103.915 110.331 107.852 106.367C111.789 102.403 115.545 99.9619 120.809 97.9043C124.784 96.3521 130.749 94.5066 141.743 93.9832C153.64 93.4191 157.205 93.3063 187.317 93.2409C217.43 93.1755 221.003 93.2883 232.905 93.8117C243.894 94.29 249.875 96.1107 253.848 97.6471C259.121 99.6776 262.873 102.117 266.837 106.06C270.801 110.004 273.244 113.747 275.302 119.022C276.856 122.986 278.702 128.949 279.221 139.95C279.787 151.846 279.916 155.413 279.97 185.523C280.024 215.634 279.918 219.21 279.397 231.097C278.916 242.096 277.093 248.07 275.561 252.054C273.531 257.323 271.083 261.079 267.144 265.041C263.204 269.003 259.452 271.444 254.187 273.501C250.216 275.051 244.244 276.901 233.259 277.425C221.362 277.984 217.798 278.101 187.674 278.167C157.55 278.232 153.996 278.111 142.1 277.596M234.06 125.395C234.064 128.073 234.863 130.689 236.354 132.913C237.845 135.136 239.963 136.868 242.438 137.888C244.914 138.908 247.636 139.172 250.261 138.645C252.886 138.118 255.296 136.824 257.186 134.927C259.076 133.03 260.361 130.616 260.878 127.989C261.396 125.362 261.122 122.64 260.093 120.168C259.064 117.697 257.324 115.586 255.095 114.103C252.866 112.619 250.247 111.831 247.569 111.836C243.98 111.843 240.54 113.276 238.007 115.818C235.474 118.361 234.054 121.806 234.06 125.395ZM129.578 185.799C129.641 217.791 155.623 243.666 187.608 243.605C219.593 243.544 245.487 217.565 245.426 185.573C245.365 153.581 219.377 127.699 187.387 127.762C155.397 127.825 129.517 153.811 129.578 185.799ZM149.897 185.758C149.882 178.321 152.073 171.046 156.193 164.854C160.313 158.663 166.176 153.831 173.041 150.972C179.906 148.112 187.466 147.352 194.763 148.789C202.06 150.225 208.767 153.793 214.036 159.042C219.306 164.29 222.9 170.983 224.366 178.275C225.831 185.566 225.101 193.128 222.269 200.005C219.436 206.882 214.628 212.764 208.453 216.908C202.277 221.052 195.012 223.272 187.574 223.287C182.636 223.297 177.744 222.334 173.178 220.454C168.612 218.573 164.461 215.812 160.962 212.327C157.463 208.842 154.685 204.702 152.787 200.143C150.888 195.584 149.906 190.696 149.897 185.758Z" /> </g> </svg> </a> </li> <li class="p-inline-list__item"> <a class="p-inline-list__link--rss" title="Use the Ubuntu Blog rss feed" href="/blog/feed"> <svg width="25" height="25" viewBox="0 0 40 40" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <defs> <style> .rss-icon { fill: #666666; } .cls-2 { fill: #E5E5E5; } </style> </defs> <g class="rss-icon"> <circle cx="20" cy="20" r="20"></circle> </g> <g class="cls-2" transform="translate(10.000000, 8.000000)"> <circle cx="3" cy="18.875" r="3"></circle> <path d="M14.5,21.875 L10.25,21.875 C10.25,16.2140813 5.66091869,11.625 3.55271368e-15,11.625 L3.55271368e-15,7.375 C8.00812887,7.375 14.5,13.8668711 14.5,21.875 Z" /> <path d="M17.5,21.875 C17.5,12.2100169 9.66498312,4.375 7.10542736e-15,4.375 L7.10542736e-15,0 C12.0812289,0 21.875,9.7937711 21.875,21.875 L17.5,21.875 Z" /> </g> </svg> </a> </li> </ul> </div> </div> </nav> <div class="row"> <hr class="p-rule--muted" /> <div class="col-3 col-medium-2"> <p class="p-footer--secondary__content">© 2025 Canonical Ltd.</p> </div> <div class="col-9 col-medium-4"> <p>Ubuntu and Canonical are registered trademarks of Canonical Ltd.</p> <hr class="p-rule--muted" /> <nav class="p-footer--secondary__nav"> <ul class="p-inline-list--inline u-responsive-realign u-no-margin--left u-no-padding--left"> <li class="p-inline-list__item"> <a accesskey="8" href="/legal">Legal information</a> </li> <li class="p-inline-list__item"> <a accesskey="9" href="/legal/data-privacy">Data privacy</a> </li> <li class="p-inline-list__item"> <a href="" class="js-revoke-cookie-manager">Manage your tracker settings</a> </li> <li class="p-inline-list__item"> <a href="https://github.com/canonical/ubuntu.com/issues/new?template=ISSUE_TEMPLATE.yaml" id="report-a-bug">Report a bug on this site</a> </li> </ul> </nav> </div> </div> <div class="u-fixed-width"> <p class="u-hide--large link-to-top"> <a href="#">Back to top</a> </p> <script> /* Add the page to the report a bug link */ var bugLink = document.querySelector('#report-a-bug'); bugLink.href += '&reported_from=' + location.href; </script> <span class="u-off-screen"><a href="#">Go to the top of the page</a></span> </div> </footer> </body> </html>

CINXE.COM

Compliance automation with Ubuntu Pro | Security | Ubuntu