Cisco Aironet Lightweight AP1131, AP1142, AP1242, AP1252, AP1262, CAP3502e and CAP3502i Wireless LAN Access Points
Cisco Aironet Lightweight AP1131, AP1142, AP1242, AP1252, AP1262, CAP3502e and CAP3502i Wireless LAN Access Points, from Cisco Systems, Inc., holds FIPS 140-2 certificate #1448 at overall level 2. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: When operated in FIPS mode and with the tamper evident seals and security devices installed as indicated in the Security Policy
Certificate
| Certificate number | 1448 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 2 |
| Module type | Hardware |
| Embodiment | Multi-chip standalone |
| Vendor | Cisco Systems, Inc. · website |
| Hardware versions | AP1131 Revision S0, AP1142 Revision G0, AP1242 Revision P0, AP1252 Revision F0, AP1262 Revision B0, CAP3502e Revision B0 and CAP3502i Revision B0; FIPS Kit AIRLAP-FIPSKIT=, Version B0 |
| Firmware versions | 7.0.98.0, 7.0.98.213, 7.0.116.0, 7.0.230.0, 7.0.240.0, 7.0.250.0, 7.2.103.0, 7.2.115.1, 7.2.115.2 or 7.0.251.2 |
Module description
Quoted from the NIST CMVP entry for this certificate.
The Cisco Aironet Lightweight 3502i, 3502e, 1262, 1142, 1131, 1252, and 1242 access points deliver the versatility, high capacity and enterprise class security required for small, medium and large Government indoor and outdoor wireless deployments. In FIPS 140-2 mode of operation, the Cisco APs support the IEEE 802.11a/g/n, 802.11i & 802.1x standards, IETF CAPWAP standard and are Wi-Fi Alliance certified for WPA2 security.
Security level exceptions
- Design Assurance: Level 3
Approved algorithms (5)
| Algorithm | CAVP certificates |
|---|---|
| AES | 1352, 1353, 1354, 1355, 1356, 1357, 1358, 1359, 1360, 1361 |
| HMAC | 791, 792, 793, 794, 795, 796, 797 |
| RNG | 744, 745, 746, 747 |
| RSA | 658, 659, 660, 661 |
| SHS | 1235, 1236, 1237, 1238, 1239, 1240, 1241 |
Other algorithms
RSA (key wrapping; key establishment methodology provides 96 bits of encryption strength; non-compliant); RC4; MD5; HMAC MD5
Validation history
| Date | Type | Lab |
|---|---|---|
| 2010-11-15 | Initial | UL Verification Services, Inc. |
| 2011-02-24 | Update | UL Verification Services, Inc. |
| 2011-05-12 | Update | UL Verification Services, Inc. |
| 2011-08-22 | Update | |
| 2012-02-23 | Update | |
| 2012-05-10 | Update | UL Verification Services, Inc. |
| 2013-03-28 | Update | UL Verification Services, Inc. |
| 2013-05-03 | Update | UL Verification Services, Inc. |
| 2013-05-16 | Update | UL Verification Services, Inc. |
| 2013-07-12 | Update | UL Verification Services, Inc. |
| 2014-02-20 | Update | UL Verification Services, Inc. |
| 2015-02-20 | Update | UL Verification Services, Inc. |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2010-11-15, 2011-02-24, 2011-05-12, 2011-08-22, 2012-02-23, 2012-05-10, 2013-03-28, 2013-05-03, 2013-05-16, 2013-07-12, 2014-02-20, 2015-02-20