808bits

IBM 4758-023 PCI Cryptographic Coprocessor (Miniboot Layers 0 and 1)

FIPS 140-1 certificate #117 · IBM® Corporation · data as of 2026-10-21

IBM 4758-023 PCI Cryptographic Coprocessor (Miniboot Layers 0 and 1), from IBM® Corporation, holds FIPS 140-1 certificate #117 at overall level 3. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Validation Sunsetting Policy - FIPS 140-1 Certificate. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When configured for DSS Authentication

Certificate

Certificate number117
StandardFIPS 140-1
Statushistorical
Overall level3
Module typeHardware
EmbodimentMulti-chip embedded
VendorIBM® Corporation · website
Hardware versionsID: PN 04K9036, EC C75600M, Miniboot 0 version A, Miniboot 1 version A

Module description

Quoted from the NIST CMVP entry for this certificate.

The 4758 is a tamper-responding, programmable, cryptographic PCI card, containing CPU, encryption hardware, RAM, EEPROM, hardware random number generator, time of day clock, firmware, and software. The Coprocessor is available for use in typical PC servers and as features in IBM eServer iSeries, pSeries, and zSeries servers.

Security level exceptions

  • Physical Security: Level 3 +EFP/EFT
  • Cryptomodule Design: Level 4
  • Module Interfaces: Level 4
  • Roles and Services: Level 4
  • Finite State Machine Model: Level 4
  • Software Security: Level 4
  • EMI/EMC: Level 4
  • Self Tests: Level 4
  • Key Mgmnt.: Level 4

Approved algorithms (2)

AlgorithmCAVP certificates
DSA/SHA-1
Triple-DES4

Other algorithms

DES (Cert. #86); DES MAC; RSA

Validation history

DateTypeLab
2000-09-18InitialUL Verification Services, Inc.
2002-08-08Update
2002-09-23Update

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2000-09-18, 2002-08-08, 2002-09-23

Source documents