Aruba AP-120 Series Wireless Access Points
Aruba AP-120 Series Wireless Access Points, from Aruba Networks, Inc., holds FIPS 140-2 certificate #1109 at overall level 2. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: When operated in FIPS mode and with the tamper evidence seals installed as indicated in the Security Policy
Certificate
| Certificate number | 1109 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 2 |
| Module type | Hardware |
| Embodiment | Multi-chip standalone |
| Vendor | Aruba Networks, Inc. · website |
| Hardware versions | AP-124-F1 Rev. 01and AP-125-F1 Rev. 01 |
| Firmware versions | ArubaOS 3.3.2.18-FIPS, ArubaOS 3.3.2.19-FIPS, ArubaOS 3.3.2.20-FIPS, ArubaOS 3.3.2.21-FIPS, ArubaOS 3.4.2.3-FIPS, ArubaOS 3.4.4.0-FIPS or ArubaOS 3.4.5.1-FIPS |
Module description
Quoted from the NIST CMVP entry for this certificate.
Aruba's single and multi-radio wireless access points serve as secure network on-ramps, aggregating wireless user traffic and forwarding it to Aruba's highly secure Multi-Service Mobility Controllers, where per-user role based access controls are applied. In the FIPS 140-2 mode of operation, Aruba APs in conjunction with the Mobility Controller support the IEEE 802.11i client standard, the xSec client and 256-bit AES encryption. Also, Aruba APs can provide Air Monitoring for intrusion detection and have Wi-Fi Alliance certification for IEEE 802.11a, IEEE 802.11b, IEEE 802.11g, and IEEE 802.11
Approved algorithms (6)
| Algorithm | CAVP certificates |
|---|---|
| AES | 861, 900 |
| HMAC | 478, 503 |
| RNG | 516 |
| RSA | 435, 436 |
| SHS | 891, 856, 892 |
| Triple-DES | 708, 734 |
Other algorithms
MD5; Diffie-Hellman (key agreement; key establishment methodology provides 80 bits of encryption strength; non-compliant)
Validation history
| Date | Type | Lab |
|---|---|---|
| 2009-03-26 | Initial | SAIC-VA |
| 2009-05-18 | Update | |
| 2009-07-24 | Update | |
| 2009-12-10 | Update | SAIC-VA |
| 2010-02-12 | Update | |
| 2010-05-05 | Update | |
| 2010-10-25 | Update | SAIC-VA |
| 2011-01-31 | Update | SAIC-VA |
| 2011-03-14 | Update | |
| 2011-07-19 | Update | SAIC-VA |
| 2013-02-06 | Update | Leidos Accredited Testing & Evaluation (AT&E) Lab |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2009-03-26, 2009-05-18, 2009-07-24, 2009-12-10, 2010-02-12, 2010-05-05, 2010-10-25, 2011-01-31, 2011-03-14, 2011-07-19, 2013-02-06