808bits

VMware’s Linux Cryptographic Module

FIPS 140-2 certificate #3825 · VMware, Inc. · data as of 2026-10-21

VMware’s Linux Cryptographic Module, from VMware, Inc., holds FIPS 140-2 certificate #3825 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Moved to historical list due to sunsetting. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode

Certificate

Certificate number3825
StandardFIPS 140-2
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorVMware, Inc. · website
Software versionsv3.0

Module description

Quoted from the NIST CMVP entry for this certificate.

VMware's Linux Cryptographic Module is a general purpose cryptographic implementation in the kernel of Photon OS that provides FIPS Approved functionalities to various applications.

Security level exceptions

  • Physical Security: N/A
  • Mitigation of Other Attacks: N/A

Approved algorithms (6)

AlgorithmCAVP certificates
AESC1592
CVLC1592
DRBGC1592
HMACC1592
RSAC1592
SHSC1592

Allowed algorithms

NDRNG

Tested configurations

  • Photon OS 3.0 on VMware ESXi 6.7 running on a Dell PowerEdge R740 with an Intel® Xeon® Gold 6126 with PAA
  • Photon OS 3.0 on VMware ESXi 6.7 running on a Dell PowerEdge R740 with an Intel® Xeon® Gold 6126 without PAA
  • Photon OS 3.0 on VMware ESXi 7.0 running on a Dell PowerEdge R740 with an Intel® Xeon® Gold 6126 with PAA
  • Photon OS 3.0 on VMware ESXi 7.0 running on a Dell PowerEdge R740 with an Intel® Xeon® Gold 6126 without PAA (single-user mode)

Validation history

DateTypeLab
2021-02-24InitialLightship Security, Inc.
2022-12-29UpdateLightship Security, Inc.

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2021-02-24, 2022-12-29

Source documents