808bits

B200™, B300™ and B400™ Remote Support Appliances

FIPS 140-2 certificate #1868 · Bomgar Corporation · data as of 2026-09-15

B200™, B300™ and B400™ Remote Support Appliances, from Bomgar Corporation, holds FIPS 140-2 certificate #1868 at overall level 2. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. RNG SP800-131A Revision 1 Transition. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode and with the tamper evident labels and front bezels applied as indicated in the Security Policy

Certificate

Certificate number1868
StandardFIPS 140-2
Statushistorical
Overall level2
Module typeHardware
EmbodimentMulti-chip standalone
VendorBomgar Corporation · website
Software versions12.1.6FIPS [1,2,3], 13.1.3FIPS [1,2] and 14.3.3FIPS [1,2,4]
Hardware versionsB200 [1], B300r1 [2], B300r2 [4] and B400r1 [3]; Tamper Evident Label Kit: TEL135325 [1,2,3,4]; Front Bezels: (FB000300 [2,4] and FB000400 [3])
Firmware versions3.3.2FIPS [1,2,3], 3.4.0FIPS [1,2], 3.4.1FIPS [1,2] and 3.5.1FIPS [1,2,4]

Module description

Quoted from the NIST CMVP entry for this certificate.

Bomgar Remote Support Appliances provide technicians secure remote control of devices over the internet/LAN/WAN. Bomgar allows collaborative remote support to various operating systems, including desktops, servers, mobile and network devices. In addition, Bomgar provides extensive auditing and recording of support sessions.

Approved algorithms (6)

AlgorithmCAVP certificates
AES2219, 2543, 3033, 3340
HMAC1350, 1564, 1915, 2130
RNG1113, 1208, 1311, 1372
RSA1136, 1297, 1575, 1715
SHS1910, 2143, 2531, 2774
Triple-DES1389, 1538, 1774, 1909

Other algorithms

RSA (key wrapping; key establishment methodology provides between 112 and 150 bits of encryption strength; non-compliant less than 112 bits of encryption strength); RC4; RC4-40; DES; DES-40; MD5

Validation history

DateTypeLab
2013-01-15InitialCYGNACOM SOLUTIONS INC
2014-04-08UpdateCYGNACOM SOLUTIONS INC
2014-10-31UpdateCYGNACOM SOLUTIONS INC
2015-07-06UpdateCYGNACOM SOLUTIONS INC

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2013-01-15, 2014-04-08, 2014-10-31, 2015-07-06

Source documents