Cryptographic Module for Intel® vPro™ Platforms' Security Engine Chipset
Cryptographic Module for Intel® vPro™ Platforms' Security Engine Chipset, from Intel Corporation, holds FIPS 140-2 certificate #2720 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: When operated in FIPS mode
Certificate
| Certificate number | 2720 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 1 |
| Module type | Firmware-Hybrid |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | Intel Corporation · website |
| Hardware versions | 3.0 |
| Firmware versions | 1.0 |
Module description
Quoted from the NIST CMVP entry for this certificate.
The Cryptographic Module for Intel® vPro™ Platforms' Security Engine Chipset is a hybrid cryptographic module present on recent Intel® vPro™ platforms. The Security Engine Chipset consists of both hardware and firmware that are utilized by the Management Engine (ME) of vProTM platforms. The hardware and firmware combine to perform cryptographic functions within the Intel® vPro™ ME for applications executing in the ME.
Approved algorithms (10)
| Algorithm | CAVP certificates |
|---|---|
| AES | 3923 |
| CVL | 779, 798, 799 |
| DRBG | 1156 |
| ECDSA | 871, 872 |
| HMAC | 2547, 2548 |
| KAS | vendor affirmed |
| PBKDF | vendor affirmed |
| RSA | 2003, 2022 |
| SHS | 3232, 3233 |
| Triple-DES | 2152 |
Other algorithms
RSA (key wrapping; key establishment methodology provides between 112 and 150 bits of encryption strength; non-compliant less than 112 bits of encryption strength); DES; HMAC-MD5; MD5; RC4
Tested configurations
- Intel Sunrise Point PCH chipset with ME device firmware version 11.6.0.1102 CORPORATE SKU
Validation history
| Date | Type | Lab |
|---|---|---|
| 2016-08-26 | Initial | atsec information security corporation |
| 2019-07-18 | Update |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2016-08-26, 2019-07-18