808bits

VMware's VPN Crypto Module

FIPS 140-2 certificate #3686 · VMware, Inc. · data as of 2026-10-21

VMware's VPN Crypto Module, from VMware, Inc., holds FIPS 140-2 certificate #3686 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Moved to historical list due to dependency on certificate #2839. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode with module VMware OpenSSL FIPS Object Module validated to FIPS 140-2 under Cert. #2839 operating in FIPS mode. No assurance of the minimum strength of generated keys. This validation entry is a non-security-relevant modification to Cert. #3542

Certificate

Certificate number3686
StandardFIPS 140-2
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorVMware, Inc. · website
Software versions1.0

Module description

Quoted from the NIST CMVP entry for this certificate.

VMware's VPN Crypto Module is a software cryptographic module whose purpose is to provide FIPS 140-2 validated cryptographic functions to various VMware applications utilizing VPN capabilities.

Security level exceptions

  • Physical Security: N/A
  • Mitigation of Other Attacks: N/A

Approved algorithms (5)

AlgorithmCAVP certificates
AES4137, C465
DRBG1254
HMAC2710, C465
SHS3407, C465
Triple-DESC465

Tested configurations

  • Ubuntu 16.04 on ESXi 6.7 running on a Dell PowerEdge R740 with Intel Xeon Gold 6126 with PAA
  • Ubuntu 16.04 on ESXi 6.7 running on a Dell PowerEdge R740 with Intel Xeon Gold 6126 without PAA
  • Ubuntu 16.04 on ESXi 7.0 running on a Dell PowerEdge R740 with Intel Xeon Gold 6126 with PAA
  • Ubuntu 16.04 on ESXi 7.0 running on a Dell PowerEdge R740 with Intel Xeon Gold 6126 without PAA
  • Ubuntu 18.04 on ESXi 7.0 running on a Dell PowerEdge R740 with Intel Xeon Gold 6126 with PAA
  • Ubuntu 18.04 on ESXi 7.0 running on a Dell PowerEdge R740 with Intel Xeon Gold 6126 without PAA (single-user mode)

Validation history

DateTypeLab
2020-07-20InitialAcumen Security

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2020-07-20

Source documents