808bits

IBM® NVMe FlashCore™ Module

FIPS 140-2 certificate #3385 · IBM® Corporation · data as of 2026-10-21

IBM® NVMe FlashCore™ Module, from IBM® Corporation, holds FIPS 140-2 certificate #3385 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Moved to historical list due to sunsetting. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode. When installed, initialized and configured as specified in Section 7 of the Security Policy

Certificate

Certificate number3385
StandardFIPS 140-2
Statushistorical
Overall level1
Module typeHardware
EmbodimentMulti-Chip Embedded
VendorIBM® Corporation · website
Hardware versions01EK231, 01EK232, 01EK233
Firmware versions1.3.0.91

Module description

Quoted from the NIST CMVP entry for this certificate.

The IBM® NVMe FlashCore™ Module is a NVMe-connected self-encrypting non-volatile storage module.

Security level exceptions

  • Roles, Services, and Authentication: Level 2
  • Physical Security: Level 2
  • Design Assurance: Level 2
  • Mitigation of Other Attacks: N/A

Approved algorithms (8)

AlgorithmCAVP certificates
AES5897, 5898
CKGvendor affirmed
DRBG2454
HMAC3872
KBKDF244
RSAvendor affirmed
SHA-362
SHS4648

Allowed algorithms

NDRNG

Tested configurations

  • N/A

Validation history

DateTypeLab
2019-02-28InitialLeidos Accredited Testing & Evaluation (AT&E) Lab
2019-03-14UpdateLeidos Accredited Testing & Evaluation (AT&E) Lab

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2019-02-28, 2019-03-14

Source documents