IBM® z/VM® Version 6 Release 4 System SSL Cryptographic Module: FIPS 140-2 cert #3374

IBM® z/VM® Version 6 Release 4 System SSL Cryptographic Module, from IBM Corporation, holds FIPS 140-2 certificate #3374 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Certificate

Certificate number	3374
Standard	FIPS 140-2
Status	historical
Overall level	1
Module type	Software-Hybrid
Embodiment	Multi-Chip Stand Alone
Vendor	IBM Corporation · website
Software versions	5735FAL00: z/VM Version 6 Release 4 with 1701RSU and APAR PI99134
Hardware versions	z13 CP Assist for Cryptographic Functions DES/TDES Enablement Feature 3863

Module description

Quoted from the NIST CMVP entry for this certificate.

z/VM System SSL provides cryptographic functions which allows z/VM to protect data using the SSL/TLS protocols. z/VM System SSL also enables administrators to create and manage X.509 V3 certificates and keys within key database files.

Security level exceptions

Mitigation of Other Attacks: N/A

Approved algorithms (8)

Algorithm	CAVP certificates
AES	4579, 5553
CVL	1989, 1990
DRBG	2208
DSA	1427
HMAC	3701
RSA	2983
SHS	3661, 4456
Triple-DES	2432, 2794

Allowed algorithms

HMAC-MD5; MD5; RSA (key wrapping; key establishment methodology provides between 112 and 150 bits of encryption strength)

Tested configurations

IBM z/VM Version 6 Release 4 running on an IBM z13 with CP Assist for Cryptographic Functions (single-user mode)

Validation history

Date	Type	Lab
2019-02-19	Initial	atsec information security corporation

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

2026-08-21: first observed by this tracker, status historical
Validation dates on record: 2019-02-19

IBM® z/VM® Version 6 Release 4 System SSL Cryptographic Module