808bits

ID-One PIV 2.4 on Cosmo V8.2 SPE Configurations

FIPS 140-2 certificate #3864 · IDEMIA · data as of 2026-10-09

ID-One PIV 2.4 on Cosmo V8.2 SPE Configurations, from IDEMIA, holds FIPS 140-2 certificate #3864 at overall level 3. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Moved to historical list due to sunsetting. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: The module generates cryptographic keys whose strengths are modified by available entropy

Certificate

Certificate number3864
StandardFIPS 140-2
Statushistorical
Overall level3
Module typeHardware
EmbodimentSingle Chip
VendorIDEMIA · website
Hardware versionsP/N ‘30'
Firmware versions['6F01' with ID-One PIV Applet 2.4.2 SPE configuration] and ['6F01' with ID-One PIV Applet 2.4.2 SPE-EP configuration]

Module description

Quoted from the NIST CMVP entry for this certificate.

ID-One PIV 2.4 on Cosmo V8.2 – SPE configurations, is a dual interface smartcard chip (ISO 7816 & ISO 14443) that contains a Personal Identity Verification (PIV) application with On-Card-Fingerprints-Comparison that has been enhanced from FIPS 201-2 PIV Standard from NIST to offer higher security and stronger cryptography for an overall level 3 validation and address the needs of Governments and Entreprises around the world.

Security level exceptions

  • Physical Security: Level 4

Approved algorithms (10)

AlgorithmCAVP certificates
AESC982, C989
CVLC984, C986, C991
DRBGC987
ECDSAC990
KAS-SSCvendor affirmed
KBKDFC995
KDAvendor affirmed
KTS
RSAC994
SHSC978, C980

Allowed algorithms

NDRNG

Tested configurations

  • N/A

Validation history

DateTypeLab
2021-03-24InitialUL Verification Services, Inc.

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2021-03-24

Source documents