Security

Maintaining a secure MongoDB deployment requires administrators to implement controls to ensure that users and applications have access to only the data that they require. MongoDB provides features that allow administrators to implement these controls and restrictions for any MongoDB deployment.

If you are already familiar with security and MongoDB security practices, consider the Security Checklist for a collection of recommended actions to protect a MongoDB deployment.

You can download this section in PDF form as MongoDB Security.

• Security Checklist
• Authentication
  • Users
  • Authentication Mechanisms
    • SCRAM-SHA-1
    • MONGODB-CR
    • x.509
  • Enterprise Authentication Mechanisms
    • Kerberos Authentication
    • LDAP Proxy Authority Authentication
  • Internal Authentication
• Role-Based Access Control
  • Built-In Roles
  • User-Defined Roles
  • Collection-Level Access Control
• Encryption
  • Transport Encryption
  • Encryption At Rest
• Auditing
• Security Hardening
  • MongoDB Configuration Hardening
  • Hardening Network Infrastructure
• Security Tutorials
  • Enable Access Control
    • Enable Client Access Control
    • Enable Internal Authentication
  • Authentication Mechanisms
    • Use x.509 Certificates to Authenticate Clients
    • Use x.509 Certificate for Membership Authentication
    • Upgrade from Keyfile Authentication to x.509 Authentication
    • Configure MongoDB with Kerberos Authentication on Linux
    • Configure MongoDB with Kerberos Authentication on Windows
    • Troubleshoot Kerberos Authentication
    • Authenticate Using SASL and LDAP with ActiveDirectory
    • Authenticate Using SASL and LDAP with OpenLDAP
  • Configure Users and Roles
    • Manage User and Roles
    • Change Your Password and Custom Data
  • Network
    • Configure mongod and mongos for TLS/SSL
    • TLS/SSL Configuration for Clients
    • Upgrade a Cluster to Use TLS/SSL
    • Configure MongoDB for FIPS
    • Configure Linux iptables Firewall for MongoDB
    • Configure Windows netsh Firewall for MongoDB
  • Encryption
    • Configure Encryption
    • Rotate Encryption Keys
  • Auditing
    • Configure Auditing
    • Configure Audit Filters
  • Miscellaneous
    • Implement Field Level Redaction
    • Create a Vulnerability Report
• Security Reference
  • Built-In Roles
  • system.roles Collection
  • system.users Collection
  • Resource Document
  • Privilege Actions
  • System Event Audit Messages

Additional Resources

• Making HIPAA Compliant MongoDB Applications
• Security Architecture White Paper
• Webinar: Securing Your MongoDB Deployment

←   FAQ: MongoDB Storage Security Checklist  →

Was this page helpful?

Yes No

Thank you for your feedback!

We're sorry! You can Report a Problem to help us improve this page.

© MongoDB, Inc 2008-2016. MongoDB, Mongo, and the leaf logo are registered trademarks of MongoDB, Inc.