FIPS Compliance in Tableau Resource Monitoring Tool
This topic introduces the FIPS-compliant version of Tableau Resource Monitoring Tool (RMT). FIPS (Federal Information Processing Standard) compliance was added to RMT in version 2025.3.
FIPS 140-2 is a U.S. government computer security standard used to approve cryptographic modules. This compliance ensures that all cryptographic operations within RMT meet rigorous security requirements, providing a more secure environment for your data.
Supported operating systems
RMT is FIPS 140-2 compliant on the following operating systems:
-
Linux: RMT is FIPS compliant on RHEL 8 distros. If your RHEL 8 os is FIPS-enabled, install RMT with FIPS enabled. If your RHEL 8 OS is not FIPS-enabled, install RMT without enabling FIPS. All other supported distros must be running in non-FIPS mode for RMT to install successfully, and RMT must be installed without FIPS enabled.
What FIPS compliance means for you
The functionality of RMT is largely unchanged from the user's point of view. FIPS compliance is primarily an under-the-hood enhancement that strengthens the security posture of the RMT.
-
Enhanced Security: All data in transit and at rest, when protected by cryptographic modules, will use FIPS-validated algorithms.
-
Installation: For new installations the process is the same as with previous versions. Learn more about installing RMT in the topic Install the Tableau Resource Monitoring Tool.
-
Upgrades:
-
If you are installing and do not want to run RMT in FIPS mode, your upgrade process remains the same. See Upgrading Resource Monitoring Tool for more information.
-
If you want to install RMT in FIPS mode, you must do a fresh install. For details, see Upgrading to a FIPS compliant version of RMT below.
-
Installing and upgrading RMT 2025.3.0 or later
FIPS compliant RMT (version 2025.3.0 and later) uses a different algorithm for log files than previous versions. You cannot switch modes without uninstalling completely and reinstalling a fresh instance of RMT.
The steps you follow to install or upgrade to RMT version 2025.3.0 or later depend on several factors including:
-
What operating system you are using
-
Whether that operating system is FIPS-enabled
-
Whether you want to run RMT in FIPS mode
Installing RMT 2025.3.0 or later
Installing a new instance of RMT 2025.3+ is no different than installing previous versions, except if you are installing on RHEL 8. If you are installing RMT on RHEL 8, you need to decide whether to install in FIPS mode.
Note: All components of RMT (server and agents) must be installed with the same FIPS setting, either all FIPS enabled, or none FIPS enabled. You cannot mix FIPS states in RMT components.
Installing on Windows
There are no special steps you need to take to install RMT on Windows. RMT will run on a FIPS enabled Windows system without error, but is not FIPS compliant. RMT is only FIPS compliant on RHEL 8.
Installing on Linux
-
RHEL 8 systems
-
If the RHEL 8 operating system is FIPS enabled, you must use the
--enable-fipsswitch when you install. The install will fail if you don't use the switch. -
If the RHEL 8 operating system is not FIPS enabled, you cannot use the
--enable-fipsswitch. The install will fail if you use the switch.
-
-
all other Linux distros
-
You can install RMT as long as you are not installing in FIPS mode. Installing RMT in FIPS mode will fail.
-
Upgrading to a FIPS compliant version of RMT
When upgrading from a pre-2025.3.0 version of RMT to version 2025.3.0 or later, your process depends on whether or not you want to run RMT in FIPS mode.
-
No FIPS: if you want to upgrade to 2025.3.0 or later but do not need FIPS, you can follow the steps for a regular upgrade of RMT.
-
FIPS mode: if you want to run RMT in FIPS mode on RHEL 8, you must do a full uninstall of your existing version, and then install the new version with FIPS enabled. Your configuration and logs are not preserved.
When upgrading from 2025.3.x version of RMT to any later version, your process depends on whether or not you want to change the FIPS status.
-
No FIPS: if you do not need FIPS and the version you are upgrading from is not FIPS enabled, you can follow the steps for a regular upgrade of RMT.
-
FIPS mode: if you want to run RMT in FIPS mode on RHEL 8 and you are upgrading an installation that is already running in FIPS mode, you can do a regular upgrade.
-
Changing FIPS mode (going from a FIPS enabled installation to a non-FIPS installation, or from a non-FIPS installation to a FIPS enabled installation): you must do a full uninstall of your existing version, and then install the new version with FIPS enabled. Your configuration and logs are not preserved.
