808bits

Enterprise Secure Key Manager

FIPS 140-2 certificate #3486 · Utimaco Inc. · data as of 2026-08-28
Historical. SP 800-56Arev3 transition. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode

Certificate

Certificate number3486
StandardFIPS 140-2
Statushistorical
Overall level2
Module typeHardware
EmbodimentMulti-Chip Stand Alone
VendorUtimaco Inc. · website
Hardware versionsHW-ESKM-V1 , Version 5.1 or 5.3
Firmware versions7.3.1 or 7.3.0

Module description

Utimaco Enterprise Secure Key Manager (ESKM) provides key generation, retrieval, and management for encryption devices and solutions. ESKM is a hardened security appliance with secure access control, administration, and logging. ESKM supports high availability with automatic multi-site clustering, replication, and failover.

Security level exceptions

  • Roles, Services, and Authentication: Level 3
  • Mitigation of Other Attacks: N/A

Approved algorithms

AlgorithmCAVP certificate
AES5951
CKGvendor affirmed
CVL2186, 2187, 2188, 2189, 2190, C235
DRBG2501, 2502
DSAC235
ECDSA1597
HMAC3923
KTS
KTS
KTS
KTS
RSAC235
SHS4703
Triple-DES2899

Allowed algorithms

Diffie-Hellman (CVL Certs. #C235 and #2190; key agreement; key establishment methodology provides between 112 and 200 bits of encryption strength); EC Diffie-Hellman (CVL Certs. #2186 and #2187; key agreement; key establishment methodology provides 128 or 192 bits of encryption strength); EC Diffie-Hellman (CVL Certs. #2186 and #2190; key agreement; key establishment methodology provides 128 or 192 bits of encryption strength); NDRNG; RSA (CVL Cert. #2188, key wrapping; key establishment methodology provides between 112 and 152 bits of encryption strength)

Tested configurations

  • N/A

Validation history

DateTypeLab
2019-07-10InitialLeidos Accredited Testing & Evaluation (AT&E) Lab
2020-04-22UpdateLeidos Accredited Testing & Evaluation (AT&E) Lab

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2019-07-10, 2020-04-22

Source documents