808bits

Cisco Catalyst 9800-CL Wireless Controller

FIPS 140-2 certificate #3874 · Cisco Systems, Inc. · data as of 2026-10-21

Cisco Catalyst 9800-CL Wireless Controller, from Cisco Systems, Inc., holds FIPS 140-2 certificate #3874 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. SP 800-56Arev3 transition. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When installed, initialized and configured as specified in Section 11 of the Security Policy and operated in FIPS mode.

Certificate

Certificate number3874
StandardFIPS 140-2
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorCisco Systems, Inc. · website
Software versionsIOS-XE 16.12

Module description

Quoted from the NIST CMVP entry for this certificate.

The Cisco Series Wireless Controllers, are a highly scalable and flexible platform that enables system-wide services for mission-critical wireless networking in medium-sized to large enterprises and campus environments.

Security level exceptions

  • Roles, Services, and Authentication: Level 3
  • Physical Security: N/A
  • Mitigation of Other Attacks: N/A

Approved algorithms (10)

AlgorithmCAVP certificates
AES5474, C1280, C1452
CKGvendor affirmed
CVL1926, C1280, C1452
DRBG2153, C1280
ECDSA1465, C1280
HMAC3629, C1280, C1452
KTS
RSA2940, C1280
SHS4392, C1280, C1452
Triple-DES2754, C1280

Allowed algorithms

Diffie-Hellman (CVL Cert. #1280, key agreement; key establishment methodology provides 112 bits of encryption strength); Diffie-Hellman (CVL Cert. #1926 with CVL Cert. #C1452, key agreement; key establishment methodology provides 112 bits of encryption strength); EC Diffie-Hellman (CVL Cert. #C1280, key agreement; key establishment methodology provides 128 or 192 bits of encryption strength); EC Diffie-Hellman (CVL Cert. #1926 with CVL Cert. #C1452, key agreement; key establishment methodology provides 128 or 192 bits of encryption strength); NDRNG; RSA (key wrapping; key establishment methodology provides 112 bits of encryption strength)

Tested configurations

  • IOS-XE 16.12 on VMware ESXi v6 running on a UCS C220 M5 with Intel Xeon Platinum 8160M (single-user mode)

Validation history

DateTypeLab
2021-03-29InitialAcumen Security

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2021-03-29

Source documents