808bits

BigFix Cryptographic Module

FIPS 140-2 certificate #1080 · BigFix, Inc. · data as of 2026-09-13

BigFix Cryptographic Module, from BigFix, Inc., holds FIPS 140-2 certificate #1080 at overall level 2. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. RNG SP800-131A Revision 1 Transition. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode

Certificate

Certificate number1080
StandardFIPS 140-2
Statushistorical
Overall level2
Module typeSoftware
EmbodimentMulti-chip standalone
VendorBigFix, Inc. · website
Software versions1.0

Module description

Quoted from the NIST CMVP entry for this certificate.

The BigFix Cryptographic Module 1.0 is a software library that runs on a wide variety of computing platforms and performs encryption, hashing, and random number generation functions.

Security level exceptions

  • Roles, Services, and Authentication: Level 3

Approved algorithms (7)

AlgorithmCAVP certificates
AES806
DSA298
HMAC446
RNG464
RSA388
SHS804
Triple-DES688

Other algorithms

Diffie-Hellman; RSA (key wrapping; key establishment methodology provides between 112 and 256 bits of encryption strength; non-compliant less than 112 bits of encryption strength)

Tested configurations

  • AIX 5.2 running on IBM P610
  • HP-UX 11.11 running on HP C3000
  • Mac OS X 10.3.6 running on iMac G4
  • Red Hat Enterprise Linux 4 Update 2 Advanced Server 64-bit running on HP ProLiant DL145 G2
  • Red Hat Enterprise Linux 4 Update 2 Advanced Server running on HP XW4100 Pentium 4
  • Solaris 10 SPARC running on Sun Blade 150
  • Solaris 10 x86 running on Dell Precision 650
  • Solaris 9 SPARC running on Sun Blade 150
  • SUSE Linux Enterprise Server 9 running on IBM eServer 325
  • Windows 2000 Pro with SP3 running on Dell Optiplex GX400
  • Windows 2003 Enterprise Edition with SP1 running on Dell Optiplex GX270
  • Windows XP Pro with SP2 running on Dell Optiplex GX270

Validation history

DateTypeLab
2009-01-07InitialDOMUS

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2009-01-07

Source documents