ACT2Lite Module: FIPS 140-2 cert #2125

ACT2Lite Module, from Cisco Systems, Inc., holds FIPS 140-2 certificate #2125 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Certificate

Certificate number	2125
Standard	FIPS 140-2
Status	historical
Overall level	1
Module type	Hardware
Embodiment	Single-chip
Vendor	Cisco Systems, Inc. · website
Hardware versions	15-14497-02(NX315) or 15-14497-02(AT90S072) or 15-14497-02(NDS_ACT2_V1)
Firmware versions	1.5

Module description

Quoted from the NIST CMVP entry for this certificate.

ACT2-Lite (Anti-Counterfeit Technology 2 Lite) is the ACT family (ACT 1T, Quack 1 and 2) next generation. It is an ancillary security device containing product identity information and assertion functionality to support product identity for various usages including anti-counterfeit functionality as well as other security functionality to be used across many different hardware platforms.

Security level exceptions

EMI/EMC: Level 3
Mitigation of Other Attacks: N/A

Approved algorithms (6)

Algorithm	CAVP certificates
AES	2556, 2742, 3002
DRBG	384, 461, 572
ECDSA	439, 480, 550
HMAC	1576, 1719, 1899
RSA	1309, 1438, 1570
SHS	2156, 2314, 2513

Other algorithms

NDRNG

Validation history

Date	Type	Lab
2014-04-09	Initial	Leidos Accredited Testing & Evaluation (AT&E) Lab
2015-09-18	Update	Leidos Accredited Testing & Evaluation (AT&E) Lab
2015-09-30	Update	Leidos Accredited Testing & Evaluation (AT&E) Lab

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

2026-08-21: first observed by this tracker, status historical
Validation dates on record: 2014-04-09, 2015-09-18, 2015-09-30

ACT2Lite Module