808bits

ID-One PIV 2.4 on Cosmo V8.2 NPIVP & CIV Configurations

FIPS 140-2 certificate #3863 · IDEMIA · data as of 2026-10-09

ID-One PIV 2.4 on Cosmo V8.2 NPIVP & CIV Configurations, from IDEMIA, holds FIPS 140-2 certificate #3863 at overall level 2. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Moved to historical list due to sunsetting. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode and initialized to Overall Level 2 per Security Policy. The module generates cryptographic keys whose strengths are modified by available entropy

Certificate

Certificate number3863
StandardFIPS 140-2
Statushistorical
Overall level2
Module typeHardware
EmbodimentSingle Chip
VendorIDEMIA · website
Hardware versionsP/N ‘30’
Firmware versions['6F01' with ID-One PIV Applet 2.4.2 NPIVP configuration] and ['6F01' with ID-One PIV Applet 2.4.2 CIV configuration]

Module description

Quoted from the NIST CMVP entry for this certificate.

ID-One PIV 2.4 on Cosmo V8.2, is a dual interface smartcard chip (ISO 7816 & ISO 14443) that contains a Personal Identity Verification (PIV) application with On-Card-Fingerprints-Comparison that can be configured to strictly comply with NIST FIPS 201-2 Standard for US Government Federal Employees and Contractors (NPIVP configuration), or support enhanced functionalities (ANSI 504), and additional access conditions (SO_PIN), as well as stronger cryptography (ECC P521) while maintaining backward compatibility with NPIVP, to address Civilian markets worldwide (CIV configuration).

Security level exceptions

  • Roles, Services, and Authentication: Level 3
  • Physical Security: Level 4
  • EMI/EMC: Level 3
  • Design Assurance: Level 3

Approved algorithms (11)

AlgorithmCAVP certificates
AESC982, C989
CVLC984, C986, C991
DRBGC987
ECDSAC990
KAS-SSCvendor affirmed
KBKDFC995
KDAvendor affirmed
KTS
RSAC994
SHSC978, C980
Triple-DESC981

Allowed algorithms

NDRNG

Tested configurations

  • N/A

Validation history

DateTypeLab
2021-03-24InitialUL Verification Services, Inc.

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2021-03-24

Source documents