Lenel OnGuard Access Control Cryptographic Module
Lenel OnGuard Access Control Cryptographic Module, from UTC Fire & Security Americas Corporation, Inc., holds FIPS 140-2 certificate #3566 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: When operated in FIPS mode with Cryptographic Primitives Library (bcryptprimitives.dll and ncryptsslp.dll) in Microsoft Windows 10, Windows 10 Pro, Windows 10 Enterprise, Windows 10 Enterprise LTSB, Windows 10 Mobile, Windows 10 for Surface Hub validated to FIPS 140-2 under Cert. #2606 operating in FIPS mode or Cryptographic Primitives Library (bcryptprimitives.dll and ncryptsslp.dll) in Microsoft Windows 10, Windows 10 Pro, Windows 10 Enterprise, Windows 10 Enterprise LTSB, Windows 10 Mobile, Windows Server 2016 Standard, Windows Server 2016 Datacenter, Windows Storage Server 2016 validated to FIPS 140-2 under Cert. #2937 operating in FIPS mode
Certificate
| Certificate number | 3566 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | UTC Fire & Security Americas Corporation, Inc. · website |
| Software versions | 7.4.457.69 with Critical On-Demand Hot Fix for DE40714 or 7.5.375.1 |
Module description
Quoted from the NIST CMVP entry for this certificate.
Lenel open platform security system integrates seamlessly with video, intrusion, access and fire products and offers remote access and management functionality, and is constantly evolving to meet changing mandates and guidelines. FICAM Architecture options include onboard authentication, ideal for new installations, or an add-on authentication module, perfect for retrofits and architectures where onboard authentication is not available. The OnGuard FICAM security management solution consists of Lenel OnGuard software, Lenel access and door controllers, and HID pivCLASS® software and readers.
Security level exceptions
- Physical Security: N/A
- Design Assurance: Level 3
- Mitigation of Other Attacks: N/A
Approved algorithms (8)
| Algorithm | CAVP certificates |
|---|---|
| AES | 3497, 4064, C500 |
| CKG | vendor affirmed |
| CVL | 575, 886 |
| DRBG | 868, 1217 |
| HMAC | 2233, 2651 |
| KTS | |
| RSA | 1783, 2193 |
| SHS | 2886, 3347 |
Allowed algorithms
NDRNG; RSA (key wrapping; key establishment methodology provides between 112 and 150 bits of encryption strength)
Tested configurations
- Microsoft Windows 10 64-bit running on Precision Workstation T3500 with an Intel Xeon W3670
- Microsoft Windows Server 2016 64-bit running on Precision Workstation T3500 with an Intel Xeon W3530 (single-user mode)
Validation history
| Date | Type | Lab |
|---|---|---|
| 2019-11-18 | Initial | UL Verification Services, Inc. |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2019-11-18