Juniper Networks MX10003 3D Universal Edge Router with JNP-MIC1-MACSEC MACSec MIC and EX9253 Ethernet Switch with EX9253-6Q12C-M MACSec Line Card
Juniper Networks MX10003 3D Universal Edge Router with JNP-MIC1-MACSEC MACSec MIC and EX9253 Ethernet Switch with EX9253-6Q12C-M MACSec Line Card, from Juniper Networks, Inc., holds FIPS 140-2 certificate #3844 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: When operated in FIPS mode, installed, initialized and configured as specified in Section 1.2 and 6 of the Security Policy
Certificate
| Certificate number | 3844 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 1 |
| Module type | Hardware |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | Juniper Networks, Inc. · website |
| Hardware versions | MX10003 and EX9253 with components identified in Security Policy Table 1 |
| Firmware versions | Junos OS 19.3R1 |
Module description
Quoted from the NIST CMVP entry for this certificate.
Juniper MX and EX9200 Series are comprehensive, Scalable and secure switching and routing solutions specifically designed to meet the needs of campus, enterprises and service providers. They deliver high performance, reliability and scale to enable a cost-effective solution.
Security level exceptions
- Roles, Services, and Authentication: Level 3
- Design Assurance: Level 3
- Mitigation of Other Attacks: N/A
Approved algorithms (11)
| Algorithm | CAVP certificates |
|---|---|
| AES | C1469, C1471, 4545 |
| CVL | C1469 |
| DRBG | C1467, C1469, C1470 |
| ECDSA | C1469 |
| HMAC | C1467, C1468, C1469, C1470 |
| KAS-SSC | vendor affirmed |
| KBKDF | C1471 |
| KTS | |
| RSA | C1469 |
| SHS | C1467, C1468, C1469, C1470 |
| Triple-DES | C1469 |
Allowed algorithms
NDRNG
Tested configurations
- N/A
Validation history
| Date | Type | Lab |
|---|---|---|
| 2021-03-12 | Initial | Acumen Security |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2021-03-12