808bits

VMware's Linux Cryptographic Module

FIPS 140-2 certificate #3356 · VMware, Inc. · data as of 2026-08-28
Historical. Moved to historical list due to dependency on certificate #2839. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode with module VMware OpenSSL FIPS Object Module validated to FIPS 140-2 under Cert. #2839 operating in FIPS mode

Certificate

Certificate number3356
StandardFIPS 140-2
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorVMware, Inc. · website
Software versions2.0

Module description

Powering IPsec encryption and integrity in NSX Edge and NSX Controller is the VMware's Linux Cryptographic Module. The Tunnel mode of the Encapsulating Security Payload (ESP) protocol performed by an IPsec Service kernel stack, such as NETKEY, utilizes the VMware's Linux Cryptographic Module to encrypt, decrypt, and perform integrity checks on data entering and exiting the NSX Edge virtual appliance.

Security level exceptions

  • Physical Security: N/A
  • Mitigation of Other Attacks: N/A

Approved algorithms

AlgorithmCAVP certificate
AES4133
HMAC2705, 2710
SHS3402

Tested configurations

  • NSX Controller 6.3.0 OS (AKA NSX Controller 12.04 OS) on ESXi 6.0 running on a Dell PowerEdge T620 with Intel Xeon E5-2440 with PAA
  • NSX Controller 6.3.0 OS (AKA NSX Controller 12.04 OS) on ESXi 6.0 running on a Dell PowerEdge T620 with Intel Xeon E5-2440 without PAA
  • NSX Edge 6.3.0 OS (AKA NSX Edge 3.14 OS) on ESXi 6.0 running on a Dell PowerEdge T620 with Intel Xeon E5-2440 with PAA
  • NSX Edge 6.3.0 OS (AKA NSX Edge 3.14 OS) on ESXi 6.0 running on a Dell PowerEdge T620 with Intel Xeon E5-2440 without PAA
  • NSX OS 4.4 (AKA BLUX 4.4) on ESXi 6.0 running on a Dell PowerEdge T620 with Intel Xeon E5-2440 with PAA
  • NSX OS 4.4 (AKA BLUX 4.4) on ESXi 6.0 running on a Dell PowerEdge T620 with Intel Xeon E5-2440 without PAA
  • PhotonOS 1.0 on ESXi 6.0 running on a Dell PowerEdge T620 with Intel Xeon E5-2440 with PAA
  • PhotonOS 1.0 on ESXi 6.0 running on a Dell PowerEdge T620 with Intel Xeon E5-2440 without PAA
  • PhotonOS 2.0 on ESXi 6.0 running on a Dell PowerEdge T620 with Intel Xeon E5-2440 with PAA
  • PhotonOS 2.0 on ESXi 6.0 running on a Dell PowerEdge T620 with Intel Xeon E5-2440 without PAA (single-user mode)

Validation history

DateTypeLab
2019-02-02InitialCGI Information Systems & Management Consultants Inc

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2019-02-02

Source documents