Envieta QFlex Hardware Security Module: FIPS 140-2 cert #3963

Envieta QFlex Hardware Security Module, from Envieta Systems LLC, holds FIPS 140-2 certificate #3963 at overall level 3. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Certificate

Certificate number	3963
Standard	FIPS 140-2
Status	historical
Overall level	3
Module type	Hardware
Embodiment	Multi-Chip Embedded
Vendor	Envieta Systems LLC · website
Hardware versions	385HSM-FIPS Rev A and 385HSM-FIPS Rev B
Firmware versions	1.3.0

Module description

Quoted from the NIST CMVP entry for this certificate.

The Envieta QFlex HSM is designed, engineered, and manufactured in the United States, offering top of the market performance for a fraction of the cost. QFlex’s integrated FPGA fabric provides organizations the capability to run accelerated proprietary algorithms inside the security perimeter of the HSM. This unique solution provides the lowest cost per operation on the market today, making QFlex the clear choice to satisfy enterprise capacity requirements.

Security level exceptions

Mitigation of Other Attacks: N/A

Approved algorithms (14)

Algorithm	CAVP certificates
AES	2958, C893
CKG	vendor affirmed
DRBG	559
DSA	C893
ECDSA	C893
HMAC	1877, C892
KAS-SSC
KBKDF	C893
KDA	vendor affirmed
KTS
KTS-RSA
PBKDF	vendor affirmed
RSA	A1471, C892, C893
SHS	2490, C892

Allowed algorithms

NDRNG

Tested configurations

Validation history

Date	Type	Lab
2021-06-30	Initial	Acumen Security

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

2026-08-21: first observed by this tracker, status historical
Validation dates on record: 2021-06-30

Envieta QFlex Hardware Security Module