808bits

Thales Advanced Security Platform (TASP)

FIPS 140-2 certificate #3610 · Thales Group · data as of 2026-09-03

Thales Advanced Security Platform (TASP), from Thales Group, holds FIPS 140-2 certificate #3610 at overall level 3. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Moved to historical list due to sunsetting. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: None

Certificate

Certificate number3610
StandardFIPS 140-2
Statushistorical
Overall level3
Module typeHardware
EmbodimentMulti-Chip Embedded
VendorThales Group · website
Hardware versionsTASP 1.0, P/N: FIPS Rev: 1.1, TASP 1.0, P/N: FIPS Rev: 1.2 and TASP 1.0, P/N: FIPS Rev: 3.0
Firmware versionsBootstrap Version 1.1.22, 1.1.29 and 1.1.40

Module description

Quoted from the NIST CMVP entry for this certificate.

The Thales Advanced Security Platform is a Thales Group (Thales) multi-chip embedded FIPS 140-2 Validated cryptographic module inside the payShield 10000 family of hardware security modules used in the Banking and Finance sector to secure card-based payment transactions. TASP provides functionality for secure loading and/or upgrading of applications used in a range of Thales products. The module ensures tamper resistance and that only applications that have been cryptographically signed by Thales can be loaded into the module.

Approved algorithms (2)

AlgorithmCAVP certificates
ECDSA1156
SHS3829

Tested configurations

  • N/A

Validation history

DateTypeLab
2020-01-24InitialUL Verification Services, Inc.
2020-01-29UpdateUL Verification Services, Inc.
2021-01-28UpdateUL Verification Services, Inc.
2021-02-24UpdateUL Verification Services, Inc.
2021-10-01UpdateUL Verification Services, Inc.
2022-10-06UpdateUL Verification Services, Inc.

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2020-01-24, 2020-01-29, 2021-01-28, 2021-02-24, 2021-10-01, 2022-10-06

Source documents