808bits

NetApp CryptoMod

FIPS 140-2 certificate #3387 · NetApp, Inc. · data as of 2026-08-28
Historical. Moved to historical list due to sunsetting. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode

Certificate

Certificate number3387
StandardFIPS 140-2
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorNetApp, Inc. · website
Software versions2.1

Module description

NetApp CryptoMod will be integrated into NetApp ONTAP releases for the purpose of supporting FIPS 140-2 compliant data-at-rest encryption and key management.

Security level exceptions

  • Physical Security: N/A
  • Mitigation of Other Attacks: N/A

Approved algorithms

AlgorithmCAVP certificate
AES5917
CKGvendor affirmed
DRBG2477
HMAC3897
KTS
PBKDFvendor affirmed
SHS4673

Allowed algorithms

NDRNG

Tested configurations

  • ONTAP 9.4 running on AFF A800 system with Intel Xeon Platinum 8160 with PAA
  • ONTAP 9.4 running on AFF A800 system with Intel Xeon Platinum 8160 without PAA
  • ONTAP 9.4 running on FAS2750 system with Intel Xeon D-1557 with PAA
  • ONTAP 9.4 running on FAS2750 system with Intel Xeon D-1557 without PAA (single-user mode)

Validation history

DateTypeLab
2019-03-01InitialAcumen Security
2019-09-13UpdateAcumen Security
2020-06-08UpdateAcumen Security

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2019-03-01, 2019-09-13, 2020-06-08

Source documents