diff --git a/Dockerfile b/Dockerfile
index 360eb3c1b8bf73666326f5413444f8ad545ac15a..d54c17b16d74ccddd9b47f7ee1a7625f3f50b5cc 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,6 +1,6 @@
 ARG BASE_REGISTRY=registry1.dso.mil
 ARG BASE_IMAGE=ironbank/redhat/ubi/ubi8
-ARG BASE_TAG=8.6
+ARG BASE_TAG=8.7
 
 FROM ${BASE_REGISTRY}/${BASE_IMAGE}:${BASE_TAG}
 
diff --git a/hardening_manifest.yaml b/hardening_manifest.yaml
index 63fffd79bc949f7c4c580355f016b1233b17c9a8..9ef0c1cccfda1a0853714b1fa51200e29c185e24 100644
--- a/hardening_manifest.yaml
+++ b/hardening_manifest.yaml
@@ -1,27 +1,27 @@
 apiVersion: v1
 name: hashicorp/vault-enterprise-fips
 tags:
-    - 1.10.8
+    - 1.10.9
     - "1.10"
 args:
     BASE_IMAGE: redhat/ubi/ubi8
-    BASE_TAG: "8.6"
+    BASE_TAG: "8.7"
 labels:
     org.opencontainers.image.title: vault-enterprise
     org.opencontainers.image.description: Vault Enterprise
     org.opencontainers.image.licenses: MPL-2.0
     org.opencontainers.image.url: https://www.vaultproject.io/
     org.opencontainers.image.vendor: HashiCorp
-    org.opencontainers.image.version: 1.10.8+ent.fips1402
+    org.opencontainers.image.version: 1.10.9+ent.fips1402
     mil.dso.ironbank.image.keywords: vault,secrets,golang,kubernetes
     mil.dso.ironbank.image.type: commercial
     mil.dso.ironbank.product.name: vault
 resources:
-    - url: https://releases.hashicorp.com/vault/1.10.8+ent.fips1402/vault_1.10.8+ent.fips1402_linux_amd64.zip
+    - url: https://releases.hashicorp.com/vault/1.10.9+ent.fips1402/vault_1.10.9+ent.fips1402_linux_amd64.zip
       filename: vault.zip
       validation:
         type: sha256
-        value: 70e31ef8a3ff43349c398f9259858f825f34d160ee8c7115d816e9d0c42595a8
+        value: 4ac073b021aa59f7d4ea5fafb997a004e0be55910e89f1a312c0567005b9bd70
 maintainers:
     - email: ironbank-notifications@hashicorp.com
       name: Engineering Services