808bits

Aruba 7200 Series Controllers with ArubaOS FIPS Firmware

FIPS 140-2 certificate #2136 · Aruba a Hewlett Packard Enterprise Company · data as of 2026-08-28
Historical. 186-2 transition. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode with tamper evident labels installed as indicated in the Security Policy

Certificate

Certificate number2136
StandardFIPS 140-2
Statushistorical
Overall level2
Module typeHardware
EmbodimentMulti-chip standalone
VendorAruba a Hewlett Packard Enterprise Company · website
Hardware versionsAruba 7210-F1, Aruba 7210-USF1, Aruba 7220-F1, Aruba 7220-USF1, Aruba 7240-F1, Aruba 7240XM-RWF1, Aruba 7240-USF1, Aruba 7240XM-USF1 with FIPS kit 4011570-01
Firmware versionsArubaOS 6.4.4-FIPS and ArubaOS 6.5.0-FIPS

Module description

Aruba's family of Mobility Controllers are network infrastructure devices providing secure, scalable solutions for enterprise Wi-Fi, network security policy enforcement, VPN services, and wireless intrusion detection and prevention. Mobility controllers serve as central points of authentication, encryption, access control, and network coordination for all mobile network services.

Security level exceptions

  • Mitigation of Other Attacks: N/A

Approved algorithms

AlgorithmCAVP certificate
AES2479, 2677, 2680
CVL150, 152
DRBG433
ECDSA466, 469
HMAC1522, 1663, 1666
KBKDF16
RSA1268, 1376, 1379, 1380
SHS2098, 2246, 2249, 2250
Triple-DES1518, 1605, 1607

Other algorithms

DES; Diffie-Hellman (key establishment methodology provides 112 bits of encryption strength; non-compliant less than 112 bits of encryption strength); EC Diffie-Hellman (key establishment methodology provides 128 or 192 bits of encryption strength); HMAC-MD5; MD5; NDRNG; RC4; RSA (key wrapping; key establishment methodology provides 112 bits of encryption strength; non-compliant less than 112 bits of encryption strength)

Validation history

DateTypeLab
2014-06-09InitialLeidos Accredited Testing & Evaluation (AT&E) Lab
2015-03-20UpdateLeidos Accredited Testing & Evaluation (AT&E) Lab
2016-01-13UpdateLeidos Accredited Testing & Evaluation (AT&E) Lab
2016-07-06UpdateLeidos Accredited Testing & Evaluation (AT&E) Lab

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2014-06-09, 2015-03-20, 2016-01-13, 2016-07-06

Source documents