808bits

Aruba AP-204, AP-205 and AP-205H Wireless Access Points

FIPS 140-2 certificate #3476 · Aruba, a Hewlett Packard Enterprise company · data as of 2026-10-21

Aruba AP-204, AP-205 and AP-205H Wireless Access Points, from Aruba, a Hewlett Packard Enterprise company, holds FIPS 140-2 certificate #3476 at overall level 2. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. SP 800-56Arev3 transition. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode. When installed, initialized and configured as specified in Section 13 of the Security Policy. The tamper evident labels installed as indicated in the security policy

Certificate

Certificate number3476
StandardFIPS 140-2
Statushistorical
Overall level2
Module typeHardware
EmbodimentMulti-Chip Stand Alone
VendorAruba, a Hewlett Packard Enterprise company · website
Hardware versions[AP-204-USF1 (HPE SKU JW163A), AP-205-USF1 (HPE SKU JW165A) and AP-205H-USF1 (HPE SKU JW167A)] with FIPS Kit 4011570-01 (HPE SKU JY894A)
Firmware versionsArubaOS 8.2.2.5-FIPS; ArubaOS 8.5.0.3-FIPS and ArubaOS 8.6.0.7-FIPS

Module description

Quoted from the NIST CMVP entry for this certificate.

Aruba's 802.11ac Wi-Fi access points operate at gigabit speeds, offering extreme performance for mobile devices. In FIPS 140-2 mode, the AP 204, 205 and 205H support encrypted management and WPA2 tunneled pass through to Aruba Mobility Controllers. Aruba APs also support wireless intrusion detection/prevention services and wireless mesh topologies.

Security level exceptions

  • Mitigation of Other Attacks: N/A

Approved algorithms (8)

AlgorithmCAVP certificates
AES3176, 3177
CVL2153, C2090
DRBG660
ECDSA581, 1209
HMAC2005, C2090
KTS
RSA1614, 2419
SHS2630, 3657, C2090

Allowed algorithms

Diffie-Hellman (CVL Certs. #2153 and #C2090, key agreement; key establishment methodology provides 112 bits of encryption strength); EC Diffie-Hellman (key agreement; key establishment methodology provides 128 or 192 bits of encryption strength); NDRNG

Tested configurations

  • N/A

Validation history

DateTypeLab
2019-06-24InitialLeidos Accredited Testing & Evaluation (AT&E) Lab
2020-03-11UpdateLeidos Accredited Testing & Evaluation (AT&E) Lab
2021-04-19UpdateLeidos Accredited Testing & Evaluation (AT&E) Lab

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2019-06-24, 2020-03-11, 2021-04-19

Source documents