Juniper Networks MX80, MX104, MX240, MX480, MX960 3D Universal Edge Routers with RE-S-X6-64G/RE-S-X6-128G Routing Engine and MIC-MACSEC-20GE MACSec Card
Caveat: When operated in FIPS mode, installed, initialized and configured as specified in Section 1.2 and 6 of the Security Policy
Certificate
| Certificate number | 3621 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 1 |
| Module type | Hardware |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | Juniper Networks, Inc. · website |
| Hardware versions | MX80, MX104, MX240, MX480, MX960 with components identified in Security Policy Table 1 |
| Firmware versions | Junos OS 18.3R1-S1 |
Module description
Juniper Networks MX Series is a robust portfolio of SDN enabled routing and switching platforms that provide industry leading system capacity, density, security and performance. MX80 and MX104 are fixed configuration platforms that support modular interfaces. MIC-MACSEC-20GE provides GCM-AES-256 MACSEC encryption.
Security level exceptions
- Roles, Services, and Authentication: Level 3
- Design Assurance: Level 3
- Mitigation of Other Attacks: N/A
Approved algorithms
| Algorithm | CAVP certificate |
|---|---|
| AES | C488, C502, 3504, 3505 |
| CVL | C488 |
| DRBG | C484, C486, C488 |
| ECDSA | C488 |
| HMAC | C484, C485, C486, C488 |
| KAS-SSC | vendor affirmed |
| KBKDF | C502 |
| KTS | |
| KTS | |
| KTS | |
| RSA | C488 |
| SHS | C484, C485, C486, C488 |
| Triple-DES | C488 |
Allowed algorithms
NDRNG
Validation history
| Date | Type | Lab |
|---|---|---|
| 2020-02-24 | Initial | Acumen Security |
| 2020-03-23 | Update | Acumen Security |
| 2021-03-12 | Update | Acumen Security |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2020-02-24, 2020-03-23, 2021-03-12