808bits

Cisco 881, Cisco 881G and Cisco 891 Integrated Services Routers (ISRs)

FIPS 140-2 certificate #1529 · Cisco Systems, Inc. · data as of 2026-10-21

Cisco 881, Cisco 881G and Cisco 891 Integrated Services Routers (ISRs), from Cisco Systems, Inc., holds FIPS 140-2 certificate #1529 at overall level 2. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. RNG SP800-131A Revision 1 Transition. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode with tamper evident labels installed as indicated in the Security Policy

Certificate

Certificate number1529
StandardFIPS 140-2
Statushistorical
Overall level2
Module typeHardware
EmbodimentMulti-chip standalone
VendorCisco Systems, Inc. · website
Hardware versions881, 881G, 891 and [FIPS Kit (CISCO-FIPS-KIT=), Revision -B0]
Firmware versions15.1(2)T2A and 15.1(2)T3

Module description

Quoted from the NIST CMVP entry for this certificate.

Cisco 880, and Cisco 890 series ISRs provide Internet, VPN, voice, data, and backup capability to corporate teleworkers and remote and small offices of fewer than 20 users. These routers are capable of bridging and multiprotocol routing between LAN and WAN ports, and provide advanced features such as antivirus protection.

Security level exceptions

  • Roles, Services, and Authentication: Level 3
  • Design Assurance: Level 3

Approved algorithms (6)

AlgorithmCAVP certificates
AES1527, 962, 1535
HMAC891, 537
RNG823
RSA743
SHS1359, 933
Triple-DES1010, 757

Other algorithms

DES; HMAC-MD5; MD5; RC4; Diffie-Hellman (key agreement; key establishment methodology provides 112 bits of encryption strength; non-compliant less than 112 bits of encryption strength); RSA (key wrapping; key establishment methodology provides 112 bits of encryption strength; non-compliant less than 112 bits of encryption strength)

Validation history

DateTypeLab
2011-04-01InitialSAIC-VA
2011-07-27UpdateSAIC-VA
2012-02-23Update

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2011-04-01, 2011-07-27, 2012-02-23

Source documents