808bits

Brocade ICX 6430 and ICX 6450 Series Stackable Switch with FastIron 7.4.00a Firmware

FIPS 140-2 certificate #2050 · Brocade Communications Systems, Inc. · data as of 2026-10-21

Brocade ICX 6430 and ICX 6450 Series Stackable Switch with FastIron 7.4.00a Firmware, from Brocade Communications Systems, Inc., holds FIPS 140-2 certificate #2050 at overall level 2. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Moved to historical list due to sunsetting. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode and with the tamper evident seals installed as indicated in the Security Policy

Certificate

Certificate number2050
StandardFIPS 140-2
Statushistorical
Overall level2
Module typeHardware
EmbodimentMulti-chip standalone
VendorBrocade Communications Systems, Inc. · website
Hardware versionsICX-6430-24 P/N 80-1006002-02, ICX-6430-24P P/N 80-1006000-02, ICX-6430-48 P/N 80-1006003-02, ICX-6430-48P P/N 80-1006001-02, ICX-6450-24 P/N 80-1005997-02, ICX-6450-24P P/N 80-1005996-02, ICX-6450-48 P/N 80-1005999-03 and ICX-6450-48P P/N 80-1005998-02 with FIPS Kit (P/N Brocade XBR-000195)
Firmware versionsFastIron v7.4.00a

Module description

Quoted from the NIST CMVP entry for this certificate.

The Brocade ICX 6430 and 6450 Switches provide enterprise-class stackable LAN switching solutions to meet the growing demands of campus networks. Brocade ICX 6430 and 6450 are available in 24- and 48- port 10/100/1000/ Mbps models and 1 Gigabit Ethernet (GbE) or 10 GbE dual-purpose uplink/stacking ports, with or without IEEE 802.3af Power over Ethernet (PoE) and 802.3at Power over Ethernet Plus (PoE+ - to support enterprise edge networking, wireless mobility, and IP communications.

Security level exceptions

  • Design Assurance: Level 3

Approved algorithms (8)

AlgorithmCAVP certificates
AES2243
DRBG268
DSA696
ECDSA352
HMAC1373
RSA1149
SHS1933
Triple-DES1403

Other algorithms

RSA (key wrapping: key establishment methodology provides 80 bits of encryption strength; non-compliant); Diffie-Hellman (key agreement; key establishment methodology provides 80 bits of encryption strength; non-compliant); MD5; HMAC-MD5; SNMPv3 KDF; SSHv2 KDF; TLSv1.0 KDF; Proprietary two way encryption; DES

Validation history

DateTypeLab
2013-12-03InitialAEGISOLVE, Inc.
2014-02-20UpdateAEGISOLVE, Inc.

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2013-12-03, 2014-02-20

Source documents