808bits

Axway Security Kernel

FIPS 140-2 certificate #2225 · Axway Inc. · data as of 2026-10-09

Axway Security Kernel, from Axway Inc., holds FIPS 140-2 certificate #2225 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. 186-2 transition. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode. The module generates cryptographic keys whose strengths are modified by available entropy. No assurance of the minimum strength of generated keys

Certificate

Certificate number2225
StandardFIPS 140-2
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-chip standalone
VendorAxway Inc. · website
Software versions3.0 and 3.0.1

Module description

Quoted from the NIST CMVP entry for this certificate.

The Axway Security Kernel is a software module that provides all security functionalities for several Axway products including the Axway Validation Authority Suite which is a collection of products that provide flexible and robust OCSP/SCVP certificate validation solution for standard and custom desktop and server applications. The suite supports established security standards and technologies and can be used together or integrated with existing solutions.

Security level exceptions

  • Physical Security: N/A
  • Mitigation of Other Attacks: N/A

Approved algorithms (8)

AlgorithmCAVP certificates
AES2446, 3215
CVL76, 439
DSA760, 918
ECDSA402, 594
HMAC1510, 2028
RSA1257, 1638
SHS2080, 2663
Triple-DES1511, 1830

Other algorithms

Diffie-Hellman (key agreement; key establishment methodology provides 112 bits of encryption strength; non-compliant less than 112 bits of encryption strength); EC Diffie-Hellman (key agreement; key establishment methodology provides between 112 and 256 bits of encryption strength; non-compliant less than 112 bits of encryption strength); RSA (key wrapping; key establishment methodology provides 112 bits of encryption strength; non-compliant less than 112 bits of encryption strength); MD5; Blowfish; Camellia; Cast; DES; des_old; DTLS1; ec; krb5_asn; KSSL; MD4; MD5; MDC2; RC2; RC4; RIPEMD; Seed; Whirlpool; PRNG

Tested configurations

  • Microsoft Windows 2012 64-bit running on Dell PowerEdge R620 Server
  • RHEL 6.3 64-bit running on Dell PowerEdge R620 Server
  • Solaris 10 64-bit running on Sun Blade T6300 Server (single-user mode)

Validation history

DateTypeLab
2014-08-14InitialUL Verification Services, Inc.
2014-09-12UpdateUL Verification Services, Inc.
2015-04-10UpdateUL Verification Services, Inc.
2016-06-27UpdateUL Verification Services, Inc.

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2014-08-14, 2014-09-12, 2015-04-10, 2016-06-27

Source documents