The FIDO2 Component can be configured to use a FIPS 140-2 certified cryptographic module.
You may need to use a FIPS certified Cryptographic API in scenarios where regulatory compliance or security mandates dictate the use of validated cryptographic modules. For instance, if you’re developing software for government agencies, financial institutions, or healthcare organizations that are subject to regulatory frameworks.
To enable FIPS Approved mode you can use the IFidoBuilder extension method EnableFIPSApprovedMode. Enabling or disabling FIPS approved mode will not affect the validation of previously registered FIDO keys.
FIPS Configuration
services.AddFido(options =>
{
options.Licensee = //...
options.LicenseKey = //...
})
.EnableFIPSApprovedMode()