Unrecognized option: net.tls.FIPSMode

[Eric_Barberan (EB)]

We are moving to v6 on rhel9 from Community v5 on rhel8. This parameter is fine on community. What am I missing here?

Here is part of the v6 config:

# network interfaces
net:
  tls:
    FIPSMode: true
  port: 27017
#  bindIp: 127.0.0.1
  bindIp: 0.0.0.0

Error log

Unrecognized option: net.tls.FIPSMode
try '/usr/bin/mongod --help' for more information

Community version v5

test> use admin
switched to db admin
admin> db.version()
5.0.14
admin> db.getSiblingDB("admin").runCommand({getCmdLineOpts: 1}).parsed.net.tls.FIPSMode
true
admin>

Comminuty v5 config

# network interfaces
net:
  tls:
    FIPSMode: true
    mode: requireTLS
    certificateKeyFile: /etc/ssl/mongodb.pem
    CAFile: /etc/ssl/ca.pem
    allowConnectionsWithoutCertificates: false

[chris (Chris Dellaway)]

FIPSMode is documented as an Enterprise Edition only feature.

Surprising that the option worked on 5.0.x, if the v6 is Community Edition I would say this is working as expected.

[Eric_Barberan (EB)]

Thanks! Yeah it’s odd to be working on 5.0.14 version.

[root@]# yum list installed | grep -i mongo
mongodb-database-tools.x86_64                 100.6.1-1                                @@commandline
mongodb-mongosh.x86_64                        1.6.2-1.el8                              @@commandline
mongodb-org.x86_64                            5.0.14-1.el8                             @@commandline
mongodb-org-database.x86_64                   5.0.14-1.el8                             @@commandline
mongodb-org-database-tools-extra.x86_64       5.0.14-1.el8                             @@commandline
mongodb-org-mongos.x86_64                     5.0.14-1.el8                             @@commandline
mongodb-org-server.x86_64                     5.0.14-1.el8                             @@commandline
mongodb-org-shell.x86_64                      5.0.14-1.el8                             @@commandline
mongodb-org-tools.x86_64                      5.0.14-1.el8                             @@com