808bits

VMware's Linux Cryptographic Module

FIPS 140-2 certificate #3356 · VMware, Inc. · data as of 2026-10-21

VMware's Linux Cryptographic Module, from VMware, Inc., holds FIPS 140-2 certificate #3356 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Moved to historical list due to dependency on certificate #2839. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode with module VMware OpenSSL FIPS Object Module validated to FIPS 140-2 under Cert. #2839 operating in FIPS mode

Certificate

Certificate number3356
StandardFIPS 140-2
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorVMware, Inc. · website
Software versions2.0

Module description

Quoted from the NIST CMVP entry for this certificate.

Powering IPsec encryption and integrity in NSX Edge and NSX Controller is the VMware's Linux Cryptographic Module. The Tunnel mode of the Encapsulating Security Payload (ESP) protocol performed by an IPsec Service kernel stack, such as NETKEY, utilizes the VMware's Linux Cryptographic Module to encrypt, decrypt, and perform integrity checks on data entering and exiting the NSX Edge virtual appliance.

Security level exceptions

  • Physical Security: N/A
  • Mitigation of Other Attacks: N/A

Approved algorithms (3)

AlgorithmCAVP certificates
AES4133
HMAC2705, 2710
SHS3402

Tested configurations

  • NSX Controller 6.3.0 OS (AKA NSX Controller 12.04 OS) on ESXi 6.0 running on a Dell PowerEdge T620 with Intel Xeon E5-2440 with PAA
  • NSX Controller 6.3.0 OS (AKA NSX Controller 12.04 OS) on ESXi 6.0 running on a Dell PowerEdge T620 with Intel Xeon E5-2440 without PAA
  • NSX Edge 6.3.0 OS (AKA NSX Edge 3.14 OS) on ESXi 6.0 running on a Dell PowerEdge T620 with Intel Xeon E5-2440 with PAA
  • NSX Edge 6.3.0 OS (AKA NSX Edge 3.14 OS) on ESXi 6.0 running on a Dell PowerEdge T620 with Intel Xeon E5-2440 without PAA
  • NSX OS 4.4 (AKA BLUX 4.4) on ESXi 6.0 running on a Dell PowerEdge T620 with Intel Xeon E5-2440 with PAA
  • NSX OS 4.4 (AKA BLUX 4.4) on ESXi 6.0 running on a Dell PowerEdge T620 with Intel Xeon E5-2440 without PAA
  • PhotonOS 1.0 on ESXi 6.0 running on a Dell PowerEdge T620 with Intel Xeon E5-2440 with PAA
  • PhotonOS 1.0 on ESXi 6.0 running on a Dell PowerEdge T620 with Intel Xeon E5-2440 without PAA
  • PhotonOS 2.0 on ESXi 6.0 running on a Dell PowerEdge T620 with Intel Xeon E5-2440 with PAA
  • PhotonOS 2.0 on ESXi 6.0 running on a Dell PowerEdge T620 with Intel Xeon E5-2440 without PAA (single-user mode)

Validation history

DateTypeLab
2019-02-02InitialCGI Information Systems & Management Consultants Inc

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2019-02-02

Source documents