808bits

VMware OpenSSL FIPS Object Module

FIPS 140-2 certificate #3875 · VMware, Inc. · data as of 2026-10-21

VMware OpenSSL FIPS Object Module, from VMware, Inc., holds FIPS 140-2 certificate #3875 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Moved to historical list due to sunsetting. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode. No assurance of the minimum strength of generated keys. The module generates cryptographic keys whose strengths are modified by available entropy. This validation entry is a non-security-relevant modification to Cert. #2839

Certificate

Certificate number3875
StandardFIPS 140-2
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorVMware, Inc. · website
Software versions2.0.9

Module description

Quoted from the NIST CMVP entry for this certificate.

The VMware OpenSSL FIPS Object Module provides cryptographic functions to various VMware applications.

Security level exceptions

  • Roles, Services, and Authentication: Level 2
  • Physical Security: N/A
  • Design Assurance: Level 3
  • Mitigation of Other Attacks: N/A

Approved algorithms (9)

AlgorithmCAVP certificates
AES4137, C1970
DRBG1254, C1970
DSA1123, C1970
ECDSA949, C1970
HMAC2710, C1970
KAS-SSCvendor affirmed
RSA2251, C1970
SHS3407, C1970
Triple-DES2261, C1970

Allowed algorithms

RSA (key wrapping; key establishment methodology provides between 112 and 256 bits of encryption strength)

Tested configurations

  • Amazon Linux 2 on ESXi 7.0 running on a Dell PowerEdge R740 with Intel Xeon Gold 6126 with PAA (gcc Compiler Version 5.3.0)
  • Amazon Linux 2 on ESXi 7.0 running on a Dell PowerEdge R740 with Intel Xeon Gold 6126 without PAA (gcc Compiler Version 5.3.0)
  • BLUX 4.4 on ESXi 6.5 on Intel Xeon with PAA (gcc Compiler version 5.3.0)
  • BLUX 4.4 on ESXi 6.5 on Intel Xeon without PAA (gcc Compiler version 5.3.0)
  • BLUX 4.9 on ESXi 6.5 on Intel Xeon with PAA (gcc Compiler version 5.3.0)
  • BLUX 4.9 on ESXi 6.5 on Intel Xeon without PAA (gcc Compiler version 5.3.0)
  • PhotonOS 1.0 on ESXi 6.0 on Intel Xeon with PAA (gcc Compiler Version 5.3.0)
  • PhotonOS 1.0 on ESXi 6.0 on Intel Xeon without PAA (gcc Compiler Version 5.3.0)
  • PhotonOS 1.0 on ESXi 6.5 on Intel Xeon with PAA (gcc Compiler Version 5.3.0)
  • PhotonOS 1.0 on ESXi 6.5 on Intel Xeon without PAA (gcc Compiler Version 5.3.0)
  • PhotonOS 1.0 on ESXi 6.7 on Intel Xeon with PAA (gcc Compiler Version 5.3.0)
  • PhotonOS 1.0 on ESXi 6.7 on Intel Xeon without PAA (gcc Compiler Version 5.3.0)
  • PhotonOS 2.0 on ESXi 6.0 on Intel Xeon with PAA (gcc Compiler Version 5.3.0)
  • PhotonOS 2.0 on ESXi 6.0 on Intel Xeon without PAA (gcc Compiler Version 5.3.0)
  • PhotonOS 2.0 on ESXi 6.5 on Intel Xeon with PAA (gcc Compiler Version 5.3.0)
  • PhotonOS 2.0 on ESXi 6.5 on Intel Xeon without PAA (gcc Compiler Version 5.3.0)
  • PhotonOS 2.0 on ESXi 6.7 on Intel Xeon with PAA (gcc Compiler Version 5.3.0)
  • PhotonOS 2.0 on ESXi 6.7 on Intel Xeon without PAA (gcc Compiler Version 5.3.0)
  • PhotonOS 3.0 on ESXi 7.0 running on a Dell PowerEdge R740 with Intel Xeon Gold 6126 with PAA (gcc Compiler Version 5.3.0)
  • PhotonOS 3.0 on ESXi 7.0 running on a Dell PowerEdge R740 with Intel Xeon Gold 6126 without PAA (gcc Compiler Version 5.3.0)
  • SLES 11 on ESXi 6.7 on Intel Xeon with PAA (gcc Compiler Version 5.3.0)
  • SLES 11 on ESXi 6.7 on Intel Xeon without PAA (gcc Compiler Version 5.3.0)
  • SLES 11 SP3 on ESXi 6.0 on Intel Xeon with PAA (gcc Compiler Version 5.3.0)
  • SLES 11 SP3 on ESXi 6.0 on Intel Xeon without PAA (gcc Compiler Version 5.3.0)
  • SLES 12 on ESXi 6.5 on Intel Xeon with PAA (gcc Compiler Version 5.3.0)
  • SLES 12 on ESXi 6.5 on Intel Xeon without PAA (gcc Compiler Version 5.3.0)
  • Ubuntu 14.04 on ESXi 6.0 on Intel Xeon with PAA (gcc Compiler version 4.6.3)
  • Ubuntu 14.04 on ESXi 6.0 on Intel Xeon without PAA (gcc Compiler version 4.6.3)
  • Ubuntu 14.04 on ESXi 6.5 on Intel Xeon with PAA (gcc Compiler version 4.6.3)
  • Ubuntu 14.04 on ESXi 6.5 on Intel Xeon without PAA (gcc Compiler version 4.6.3)
  • Ubuntu 16.04 on ESXi 6.0 on Intel Xeon with PAA (gcc Compiler version 4.6.3)
  • Ubuntu 16.04 on ESXi 6.0 on Intel Xeon without PAA (gcc Compiler version 4.6.3)
  • Ubuntu 16.04 on ESXi 6.5 on Intel Xeon with PAA (gcc Compiler version 4.6.3)
  • Ubuntu 16.04 on ESXi 6.5 on Intel Xeon without PAA (gcc Compiler version 4.6.3)
  • Ubuntu 16.04 on ESXi 6.7 on Intel Xeon with PAA (gcc Compiler Version 4.6.3)
  • Ubuntu 16.04 on ESXi 6.7 on Intel Xeon without PAA (gcc Compiler Version 4.6.3)
  • Ubuntu 16.04 on ESXi 7.0 running on a Dell PowerEdge R740 with Intel Xeon Gold 6126 with PAA (gcc Compiler Version 4.6.3)
  • Ubuntu 16.04 on ESXi 7.0 running on a Dell PowerEdge R740 with Intel Xeon Gold 6126 without PAA (gcc Compiler Version 4.6.3)
  • Ubuntu 18.04 on ESXi 7.0 running on a Dell PowerEdge R740 with Intel Xeon Gold 6126 with PAA (gcc Compiler Version 4.6.3)
  • Ubuntu 18.04 on ESXi 7.0 running on a Dell PowerEdge R740 with Intel Xeon Gold 6126 without PAA (gcc Compiler Version 4.6.3)
  • Ubuntu 20.04 on ESXi 7.0 running on a Dell PowerEdge R740 with Intel Xeon Gold 6126 with PAA (gcc Compiler Version 4.6.3)
  • Ubuntu 20.04 on ESXi 7.0 running on a Dell PowerEdge R740 with Intel Xeon Gold 6126 without PAA (gcc Compiler Version 4.6.3)
  • VMware NSX Controller OS 12.04 on ESXi 6.0 on Intel Xeon with PAA (gcc Compiler Version 4.6.3)
  • VMware NSX Controller OS 12.04 on ESXi 6.0 on Intel Xeon without PAA (gcc Compiler Version 4.6.3)
  • VMware NSX Edge OS 3.14 on ESXi 6.0 on Intel Xeon without PAA (gcc Compiler Version 4.6.3)
  • VMware NSX Edge OS 3.14 on ESXi6.0 on Intel Xeon with PAA (gcc Compiler Version 4.6.3)
  • VMware NSX Manager OS 3.17 on ESXi 6.0 on Intel Xeon with PAA (gcc Compiler Version 4.6.3)
  • VMware NSX Manager OS 3.17 on ESXi 6.0 on Intel Xeon without PAA (gcc Compiler Version 4.6.3)
  • Windows 10 on ESXi 6.0 on Intel Core I with PAA (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)
  • Windows 10 on ESXi 6.0 on Intel Core I without PAA (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)
  • Windows 10 on ESXi 6.5 on Intel Xeon with PAA (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)
  • Windows 10 on ESXi 6.5 on Intel Xeon without PAA (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)
  • Windows 10 on ESXi 7.0 running on a Dell PowerEdge R740 with Intel Xeon Gold 6126 with PAA (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)
  • Windows 10 on ESXi 7.0 running on a Dell PowerEdge R740 with Intel Xeon Gold 6126 without PAA (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1) (single-user mode)
  • Windows 10 on Intel Core I with PAA (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)
  • Windows 10 on Intel Core I without PAA (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)
  • Windows 2012 64 bit on ESXi 6.0 on Intel Xeon with PAA (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)
  • Windows 2012 64 bit on ESXi 6.0 on Intel Xeon without PAA (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)
  • Windows 2012 R2 on ESXi 6.0 on Intel Xeon with PAA (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)
  • Windows 2012 R2 on ESXi 6.0 on Intel Xeon without PAA (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)
  • Windows 2016 on ESXi 6.0 on Intel Xeon with PAA (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)
  • Windows 2016 on ESXi 6.0 on Intel Xeon without PAA (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)
  • Windows 7 SP1 on ESXi 6.0 on Intel Core I with PAA (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)
  • Windows 7 SP1 on ESXi 6.0 on Intel Core I without PAA (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)
  • Windows 8.1 on ESXi 6.0 on Intel Core I with PAA (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)
  • Windows 8.1 on ESXi 6.0 on Intel Core I without PAA (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)
  • Windows Server 2008 on ESXi 6.5 on Intel Xeon with PAA (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)
  • Windows Server 2008 on ESXi 6.5 on Intel Xeon without PAA (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)
  • Windows Server 2012 on ESXi 6.5 on Intel Xeon with PAA (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)
  • Windows Server 2012 on ESXi 6.5 on Intel Xeon without PAA (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)
  • Windows Server 2016 on ESXi 6.5 on Intel Xeon with PAA (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)
  • Windows Server 2016 on ESXi 6.5 on Intel Xeon without PAA (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)
  • Windows Server 2016 on ESXi 6.7 on Intel Xeon with PAA (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)
  • Windows Server 2016 on ESXi 6.7 on Intel Xeon without PAA (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)
  • Windows Server 2016 on ESXi 7.0 running on a Dell PowerEdge R740 with Intel Xeon Gold 6126 with PAA (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)
  • Windows Server 2016 on ESXi 7.0 running on a Dell PowerEdge R740 with Intel Xeon Gold 6126 without PAA (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)
  • Windows Server 2019 on ESXi 7.0 running on a Dell PowerEdge R740 with Intel Xeon Gold 6126 with PAA (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)
  • Windows Server 2019 on ESXi 7.0 running on a Dell PowerEdge R740 with Intel Xeon Gold 6126 without PAA (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)
  • Within ESXi 6.7 on Intel Xeon 6126 with PAA
  • Within ESXi 6.7 on Intel Xeon 6126 without PAA
  • Within ESXi 6.7 on Intel Xeon E5-2440 with PAA
  • Within ESXi 6.7 on Intel Xeon E5-2440 without PAA

Validation history

DateTypeLab
2021-03-29InitialAcumen Security

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2021-03-29

Source documents