808bits

Lenel OnGuard Access Control Cryptographic Module

FIPS 140-2 certificate #2958 · UTC Fire & Security Americas Corporation, Inc. · data as of 2026-10-21

Lenel OnGuard Access Control Cryptographic Module, from UTC Fire & Security Americas Corporation, Inc., holds FIPS 140-2 certificate #2958 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Moved to historical list in accordance with SP800-131A Revision 1 Transition (AES/TDES key wrapping). Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode with [(Windows 10 Cryptographic Primitives Library (BCRYPT) validated to FIPS 140-2 under Cert. #2606 operating in FIPS mode), (Windows Server 2012 R2 and Windows 8.1 Cryptographic Primitives Library (BCRYPT) validated to FIPS 140-2 under Cert. #2357 operating in FIPS mode), or (Windows 8 and Windows Server 2012 Cryptographic Primitives Library (BCRYPT) validated to FIPS 140-2 under Cert. #1892 operating in FIPS mode)]

Certificate

Certificate number2958
StandardFIPS 140-2
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorUTC Fire & Security Americas Corporation, Inc. · website
Software versions7.3.345.54

Module description

Quoted from the NIST CMVP entry for this certificate.

The Lenel OnGuard Access Control Cryptographic Module's primary purpose is to provide secure communications with external access control devices. The module is part of the Lenel's advanced access control and alarm monitoring system which is built on an open architecture platform and offers unlimited scalability, database segmentation, fault tolerance, and biometrics and smart card support. The Lenel advanced access control and alarm monitoring system is fully customizable, and can be seamlessly integrated into the OnGuard total security solution.

Security level exceptions

  • Physical Security: N/A
  • Design Assurance: Level 3
  • Mitigation of Other Attacks: N/A

Approved algorithms (4)

AlgorithmCAVP certificates
AES2197, 2832, 3497, 4149
DRBG258, 489, 868
RSA1134, 1493, 1783
SHS1903, 2373, 2886

Allowed algorithms

AES (Cert. #4149, key wrapping; key establishment methodology provides 128 bits of encryption strength)

Tested configurations

  • Intel i7-6700 w/ Microsoft Windows 10 64-bit on Vmware ESXi 6.0 (single-user mode)
  • Intel i7-6700 w/ Microsoft Windows 8 64-bit on Vmware ESXi 6.0
  • Intel i7-6700 w/ Microsoft Windows 8.1 64-bit on Vmware ESXi 6.0
  • Intel i7-6700 w/ Microsoft Windows Server 2012 64-bit on Vmware ESXi 6.0
  • Intel i7-6700 w/ Microsoft Windows Server 2012 R2 64-bit on Vmware ESXi 6.0

Validation history

DateTypeLab
2017-07-13InitialUL Verification Services, Inc.

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2017-07-13

Source documents