Harmony Endpoint FDE and MEPP CryptoCore
Caveat: When operated in FIPS mode. No assurance of the minimum strength of generated keys
Certificate
| Certificate number | 2788 |
|---|---|
| Standard | FIPS 140-2 |
| Status | active |
| Sunset date | 2026-09-21 |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | Check Point Software Technologies Ltd. · website |
| Software versions | 4.0 |
Module description
Check Point CryptoCore is a 140-2 Level 1 cryptographic module for Windows 10 and macOS Sierra. The module provides cryptographic services accessible in kernel mode and user mode on the respective platforms through implementation of platform specific binaries.
Security level exceptions
- Physical Security: N/A
- EMI/EMC: Level 3
- Mitigation of Other Attacks: N/A
Approved algorithms
| Algorithm | CAVP certificate |
|---|---|
| AES | 4112 |
| DRBG | 1238 |
| HMAC | 2687 |
| KTS | |
| RSA | 2225 |
| SHA-3 | 7 |
| SHS | 3385 |
| Triple-DES | 2247 |
| Triple-DES MAC | vendor affirmed |
Other algorithms
RSA (key wrapping; key establishment methodology provides between 112 and 150 bits of encryption strength)
Tested configurations
- macOS Sierra 10.12 (64-bit) running on an Apple MacBook Pro with an Intel Core i7-3540M with PAA (Kernel Space)
- macOS Sierra 10.12 (64-bit) running on an Apple MacBook Pro with an Intel Core i7-3540M with PAA (User Space)
- macOS Sierra 10.12 (64-bit) running on an Apple MacBook Pro with an Intel Core i7-3540M without PAA (Kernel Space) (single-user mode)
- macOS Sierra 10.12 (64-bit) running on an Apple MacBook Pro with an Intel Core i7-3540M without PAA (User Space)
- Microsoft Windows 10 Anniversary Update (64-bit) running on a Lenovo Thinkpad with an Intel Core i5-3210M with PAA (Kernel Space, VS2008)
- Microsoft Windows 10 Anniversary Update (64-bit) running on a Lenovo Thinkpad with an Intel Core i5-3210M with PAA (User Space, VS2008)
- Microsoft Windows 10 Anniversary Update (64-bit) running on a Lenovo Thinkpad with an Intel Core i5-3210M without PAA (Kernel Space, VS2008)
- Microsoft Windows 10 Anniversary Update (64-bit) running on a Lenovo Thinkpad with an Intel Core i5-3210M without PAA (User Space, VS2008)
- Microsoft Windows 10 Anniversary Update (64-bit) running on a Lenovo X1 Carbon with an Intel Core-i7-7500U with PAA (User Space, VS2017)
- Microsoft Windows 10 Anniversary Update (64-bit) running on a Lenovo X1 Carbon with an Intel Core-i7-7500U without PAA (User Space, VS2017)
Validation history
| Date | Type | Lab |
|---|---|---|
| 2016-11-07 | Initial | Leidos Accredited Testing & Evaluation (AT&E) Lab |
| 2019-07-16 | Update | Leidos Accredited Testing & Evaluation (AT&E) Lab |
| 2022-05-17 | Update | Leidos Accredited Testing & Evaluation (AT&E) Lab |
| 2022-07-22 | Update | Leidos Accredited Testing & Evaluation (AT&E) Lab |
| 2022-10-14 | Update | Leidos Accredited Testing & Evaluation (AT&E) Lab |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status active
- Validation dates on record: 2016-11-07, 2019-07-16, 2022-05-17, 2022-07-22, 2022-10-14