808bits

Lenovo OpenSSL Library for ThinkSystem

FIPS 140-2 certificate #3157 · Lenovo Group Limited · data as of 2026-10-09

Lenovo OpenSSL Library for ThinkSystem, from Lenovo Group Limited, holds FIPS 140-2 certificate #3157 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. SP 800-56Arev3 transition. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode. The module generates cryptographic keys whose strengths are modified by available entropy

Certificate

Certificate number3157
StandardFIPS 140-2
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorLenovo Group Limited · website
Software versions1.0

Module description

Quoted from the NIST CMVP entry for this certificate.

The Lenovo OpenSSL Library for ThinkSystem module is a software library that provides FIPS 140-2 validated Transport Layer Security (TLS) functionality, and general purpose cryptographic algorithms within ThinkSystem hardware management systems.

Security level exceptions

  • Physical Security: N/A

Approved algorithms (9)

AlgorithmCAVP certificates
AES4762, 4763, 4764
CVL1408, 1409
DRBG1639, 1640, 1641
DSA1282
ECDSA1194
HMAC3173, 3174, 3175
RSA2606
SHS3905, 3906, 3907
Triple-DES2532

Allowed algorithms

Diffie-Hellman (CVL Cert. #1408, key agreement; key establishment methodology provides between 112 and 256 bits of encryption strength); EC Diffie-Hellman (CVL Cert. #1408, key agreement; key establishment methodology provides between 112 and 256 bits of encryption strength); MD5; NDRNG; RSA (key agreement; key establishment methodology provides between 112 and 256 bits of encryption strength)

Tested configurations

  • Linux version 2.6.32 on VMware ESXi 6.0.0, running on Flex System x240 M5 Compute Node Type 9532 and Intel Xeon CPU E5-2683 v3 with PAA
  • Linux version 2.6.32 on VMware ESXi 6.0.0, running on Flex System x240 M5 Compute Node Type 9532 and Intel Xeon CPU E5-2683 v3 without PAA (single user mode)

Validation history

DateTypeLab
2018-03-22Initialatsec information security corporation

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2018-03-22

Source documents