AT-SBx908 Gen2, AT-x950, AT-x550, AT-x530 Secure Management Module: FIPS 140-2 cert #3885

AT-SBx908 Gen2, AT-x950, AT-x550, AT-x530 Secure Management Module, from Allied Telesis, holds FIPS 140-2 certificate #3885 at overall level 2. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Certificate

Certificate number	3885
Standard	FIPS 140-2
Status	historical
Overall level	2
Module type	Hardware
Embodiment	Multi-Chip Stand Alone
Vendor	Allied Telesis · website
Hardware versions	AT-SBx908 Gen2, 990-007222-F00 with [1], [2], [3], [4] [Tamper Label Kit: 066-000080 x 10, 056-000658 x 1] [A], AT-SBx908 Gen2, 990-008144-F00 with [1], [2], [3], [4] [Tamper Label Kit: 066-000080 x 10, 056-000658 x 1] [E], AT-x950-28XTQm, 990-007221-F00 with [2], [5], [Tamper Label Kit: 066-000080 x 4, 056-000658 x 1] [B], AT-x950-28XTQm, 990-008145-F00 with [2], [5], [Tamper Label Kit: 066-000080 x 4, 056-000658 x 1] [F], AT-x950-28XSQ, 990-007712-F00 with [3], [5], [Tamper Label Kit: 066-000080 x 4, 056-000658 x 1] [B], AT-x950-28XSQ, 990-008147-F00 with [3], [5], [Tamper Label Kit: 066-000080 x 4, 056-000658 x 1] [F], AT-x550-18XTQ, 990-007217-F90, [Tamper Label Kit: 066-000080 x 1, 056-000658 x 1] [C], AT-x550-18XSQ, 990-007218-F90, [Tamper Label Kit: 066-000080 x 1, 056-000658 x 1] [C], AT-x550-18XSQ, 990-007724-F90, [Tamper Label Kit: 066-000080 x 1, 056-000658 x 1] [C], AT-x550-18XSPQm, 990-007219-F90, [Tamper Label Kit: 066-000080 x 1, 056-000658 x 1] [C], AT-x530-52GTXm, 990-007725-F90, [Tamper Label Kit: 066-000080 x 1, 056-000658 x 1] [D], AT-x530-52GPXm, 990-007726-F90, [Tamper Label Kit: 066-000080 x 1, 056-000658 x 1] [D], AT-x530-28GTXm, 990-007220-F90, [Tamper Label Kit: 066-000080 x 1, 056-000658 x 1] [D], AT-x530-28GPXm, 990-007727-F90, [Tamper Label Kit: 066-000080 x 1, 056-000658 x 1] [D], AT-x530L-52GTX, 990-007728-F90, [Tamper Label Kit: 066-000080 x 1, 056-000658 x 1] [D], AT-x530L-52GPX, 990-007729-F90, [Tamper Label Kit: 066-000080 x 1, 056-000658 x 1] [D], AT-x530L-28GTX, 990-007730-F90, [Tamper Label Kit: 066-000080 x 1, 056-000658 x 1] [D] and AT-x530L-28GPX, 990-007731-F90, [Tamper Label Kit: 066-000080 x 1, 056-000658 x 1] [D]; XEM2 Modules [1] 990-005492-00, 990-005490-00, 990-005493-00, 990-006024-00, 990-005491-00, XEM2 Module [2] 990-006242-00 and XEM2 Module [3] 990-006018-00; Power Supply Unit [4] 990-004783-10 and Power Supply Unit [5] 990-006195-10
Firmware versions	5.4.9.APCERT-2.3; Bootloader Versions bl-6.2.7-SBx908NG-39A8-D2D8.bin [A], bl-6.2.20-x950-1D0D-2BC3.bin [B], bl-6.2.21-x550-2FC1-A0F1.bin [C], bl-7.0.3-x530-noecc-B495-8AEE.kwb [D] , bl-6.2.30-SBx908NG-FD3D-FFB4 [E], bl-6.2.30-x950-B983-3904 [F]

Module description

Quoted from the NIST CMVP entry for this certificate.

The AlliedWare Plus OpenSSL FIPS Object Module is a software library which provides cryptographic support for securing the communication and management of the device. The products certified cover AT-x530, AT-x530L, AT-x550, ATx950 and SwitchBlade x908 Generation 2 models.

Security level exceptions

Mitigation of Other Attacks: N/A

Approved algorithms (10)

Algorithm	CAVP certificates
AES	C1547
CKG	vendor affirmed
CVL	C1547
DRBG	C1547
ECDSA	C1547
HMAC	C1547
KAS-SSC	vendor affirmed
KTS
RSA	C1547
SHS	C1547

Allowed algorithms

HMAC-MD5; NDRNG; SHS

Tested configurations

Validation history

Date	Type	Lab
2021-04-06	Initial	UL Verification Services, Inc.
2022-08-23	Update	UL Verification Services, Inc.
2023-04-24	Update	UL Verification Services, Inc.

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

2026-08-21: first observed by this tracker, status historical
Validation dates on record: 2021-04-06, 2022-08-23, 2023-04-24

AT-SBx908 Gen2, AT-x950, AT-x550, AT-x530 Secure Management Module