808bits

RapidIdentity FIPS Cryptographic Module

FIPS 140-2 certificate #3655 · Identity Automation · data as of 2026-10-09

RapidIdentity FIPS Cryptographic Module, from Identity Automation, holds FIPS 140-2 certificate #3655 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Moved to historical list due to sunsetting. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When installed, initialized and configured as specified in the Security Policy Section 8 and operated in FIPS mode. The module generates cryptographic keys whose strengths are modified by available entropy. No assurance of the minimum strength of generated keys. This validation entry is a non-security relevant modification to Cert. #2792.

Certificate

Certificate number3655
StandardFIPS 140-2
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorIdentity Automation · website
Software versions1.0

Module description

Quoted from the NIST CMVP entry for this certificate.

The RapidIdentity FIPS Cryptographic Module for Windows is a cryptographic engine for Windows Server. The module delivers core cryptographic functions to Identity Automation’s RapidIdentity MFA server, providing a multitude of authentication methods. The RapidIdentity FIPS Cryptographic Module leverages industry leading, FIPS approved cryptographic algorithms provided by the Bouncy Castle FIPS .NET and Java APIs.

Security level exceptions

  • Physical Security: N/A

Approved algorithms (13)

AlgorithmCAVP certificates
ECDSA (Certs. #C1580 and #C1581
AESC1580, C1581
CVLC1580, C1581
DRBGC1580, C1581
DSAC1580, C1581
HMACC1580, C1581
KASvendor affirmed
KTSvendor affirmed
PBKDFvendor affirmed
RSAC1580, C1581
SHA-3C1580, C1581
SHSC1580, C1581
Triple-DESC1580, C1581

Allowed algorithms

EC Diffie-Hellman (CVL Certs. #C1580 and #C1581, key agreement; key establishment methodology provides between 112 and 256 bits of encryption strength); RSA (key wrapping; key establishment methodology provides between 112 and 256 bits of encryption strength);

Tested configurations

  • Android 10 on .NET framework 4.5.2 running on a Google Pixel 3 with Qualcomm Snapdragon 845 Chipset
  • iOS 13 on Xamarin.iOS 13 running on an iPhone 11 with the Apple A13 Bionic processor
  • Windows Server 2016 Standard on Vmware ESXi 6.5 on .NET framework 4.5.2 running on a Dell PowerEdge T630 with Intel Xeon E5-2630 (single user mode)

Validation history

DateTypeLab
2020-05-20InitialAcumen Security
2020-07-13UpdateAcumen Security

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2020-05-20, 2020-07-13

Source documents