808bits

Bomgar FIPS Remote Support Appliance

FIPS 140-2 certificate #3390 · Bomgar Corporation · data as of 2026-09-13

Bomgar FIPS Remote Support Appliance, from Bomgar Corporation, holds FIPS 140-2 certificate #3390 at overall level 2. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. SP 800-56Arev3 transition. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode and with the tamper evident labels and front bezel applied as indicated in the Security Policy

Certificate

Certificate number3390
StandardFIPS 140-2
Statushistorical
Overall level2
Module typeHardware
EmbodimentMulti-Chip Stand Alone
VendorBomgar Corporation · website
Hardware versionsR630; Tamper-Evident Label Kit: BMG-720-1214-00; Front Bezel: 720-1199-01
Firmware versions4.4.2FIPS with 16.2.1FIPS

Module description

Quoted from the NIST CMVP entry for this certificate.

Bomgar Remote Support Appliances provide technicians secure remote control of devices over the internet/LAN/WAN. Bomgar allows collaborative remote support to various operating systems, including desktops, servers, mobile and network devices. In addition, Bomgar provides extensive auditing and recording of support sessions.

Security level exceptions

  • Mitigation of Other Attacks: N/A

Approved algorithms (8)

AlgorithmCAVP certificates
AES4767
CVL1411, 1546
DRBG1648
ECDSA1196
HMAC3180
KTS
RSA2608
SHS3912

Allowed algorithms

EC Diffie-Hellman (CVL Cert. #1411, key agreement; key establishment methodology provides 128 or 192 bits of encryption strength); NDRNG; RSA (key wrapping; key establishment methodology provides between 112 and 150 bits of encryption strength)

Tested configurations

  • N/A

Validation history

DateTypeLab
2019-03-05InitialCYGNACOM SOLUTIONS INC

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2019-03-05

Source documents