808bits

Aruba 9004 Series Gateway with ArubaOS FIPS Firmware

FIPS 140-2 certificate #3931 · Aruba, a Hewlett Packard Enterprise company · data as of 2026-08-28
Historical. Moved to historical list due to sunsetting. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode with tamper evident labels installed as indicated in the Security Policy. When installed, initialized and configured as specified in Section 13 of the Security Policy

Certificate

Certificate number3931
StandardFIPS 140-2
Statushistorical
Overall level2
Module typeHardware
EmbodimentMulti-Chip Stand Alone
VendorAruba, a Hewlett Packard Enterprise company · website
Hardware versions[Aruba 9004-USF1 (HPE SKU R1B25A) and Aruba 9004-RWF1 (HPE SKU R1B26A)] with FIPS Kit 4011570-01 (HPE SKU JY894A)
Firmware versionsArubaOS 8.6.0.7-FIPS

Module description

Aruba's family of Gateways are network infrastructure devices providing secure, scalable solutions for branch and small campus networks. The Gateways provide network security policy enforcement firewall with Deep Packet Inspection, enterprise Wi-Fi, WLAN, LAN and VPN services including Aruba Dynamic Segmentation, flexible connectivity options, integrated device profiling, and role-based wireless intrusion detection and prevention (IDS/IPS). Gateways serve as central points of authentication, encryption, access control, and network coordination for all mobile network services.

Security level exceptions

  • Mitigation of Other Attacks: N/A

Approved algorithms

AlgorithmCAVP certificate
AESC1229, C1230
CVLC1229, C1230
DRBGC1229
ECDSAC1229, C1230
HMACC1229, C1230
KAS-SSCvendor affirmed
KBKDFC1229
KDAvendor affirmed
KTS
KTS
KTS
KTS
RSAC1229, C1230, C1231
SHSC1229, C1230, C1231

Allowed algorithms

MD5; NDRNG; RSA (key wrapping; key establishment methodology provides 112 bits of encryption strength)

Tested configurations

  • N/A

Validation history

DateTypeLab
2021-05-24InitialLeidos Accredited Testing & Evaluation (AT&E) Lab

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2021-05-24

Source documents