808bits

Aruba IAP-214, IAP-215, IAP-224, IAP-225, IAP-274, IAP-275, IAP-277, RAP-108 and RAP-109 Wireless Access Points with Aruba Instant Firmware

FIPS 140-2 certificate #3069 · Aruba, a Hewlett Packard Enterprise company · data as of 2026-10-21

Aruba IAP-214, IAP-215, IAP-224, IAP-225, IAP-274, IAP-275, IAP-277, RAP-108 and RAP-109 Wireless Access Points with Aruba Instant Firmware, from Aruba, a Hewlett Packard Enterprise company, holds FIPS 140-2 certificate #3069 at overall level 2. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. SP 800-56Arev3 transition. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated only on the specific platforms specified on the certificate in FIPS mode with tamper evident labels installed as indicated in the Security Policy. The protocols TLS, SNMP and IKEv2 shall not be used when operated in FIPS mode

Certificate

Certificate number3069
StandardFIPS 140-2
Statushistorical
Overall level2
Module typeFirmware
EmbodimentMulti-Chip Stand Alone
VendorAruba, a Hewlett Packard Enterprise company · website
Firmware versionsArubaInstant 6.5.1.0-4.3.1

Module description

Quoted from the NIST CMVP entry for this certificate.

Aruba's 802.11ac Wi-Fi access points operate at gigabit speeds, offering extreme performance for mobile devices. In FIPS 140-2 mode, Aruba APs in conjunction with a Mobility Controller support the IEEE 802.11i/WPA2 client standard along with optional Suite B cryptography. Aruba APs also support wireless intrusion detection/prevention services and wireless mesh topologies.

Approved algorithms (8)

AlgorithmCAVP certificates
AES1648, 1649, 2450, 3944
CVL1210
DRBG1149
HMAC2569
KBKDF134, 135
KTS
RSA2015, 2417, 2419
SHS3254, 3654, 3657

Allowed algorithms

Diffie-Hellman (key agreement; key establishment methodology provides 112 bits of encryption strength); NDRNG; RSA (key wrapping; key establishment methodology provides 112 bits of encryption strength)

Tested configurations

  • IAP-214 (Hardware Versions: IAP-214-USF1 [HPE SKU JW225A], IAP-214-RWF1 [HPE SKU JW224A]), IAP-215 (Hardware Versions: IAP-215-USF1 [HPE SKU JW231A], IAP-215-RWF1 [HPE SKU JW230A]), IAP-224 (Hardware Versions: IAP-224-USF1 [HPE SKU JW237A], IAP-224-RWF1 [HPE SKU JW235A]), IAP-225 (Hardware Versions: IAP-225-USF1 [HPE SKU JW243A], IAP-225-RWF1 [HPE SKU JW241A]), IAP-274 (Hardware Versions: IAP-274-USF1 [HPE SKU JW252A], IAP-274-RWF1 [HPE SKU JW251A]), IAP-275 (Hardware Versions: IAP-275-USF1 [HPE SKU JW257A], IAP-275-RWF1 [HPE SKU JW256A]), IAP-277 (Hardware Versions: IAP-277-USF1 [HPE SKU JW263A], IAP-277-RWF1 [HPE SKU JW262A]), RAP-108 (Hardware Versions: RAP-108-USF1 [HPE SKU JW269A], RAP-108-F1 [HPE SKU JW268A]), RAP-109 (Hardware Versions: RAP-109-USF1 [HPE SKU JW275A], RAP-109-F1 [HPE SKU JW274A])

Validation history

DateTypeLab
2017-11-27InitialLeidos Accredited Testing & Evaluation (AT&E) Lab

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2017-11-27

Source documents