DL4FE: FIPS 140-2 cert #3972

DL4FE, from DataLocker Inc., holds FIPS 140-2 certificate #3972 at overall level 3. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Certificate

Certificate number	3972
Standard	FIPS 140-2
Status	historical
Overall level	3
Module type	Hardware
Embodiment	Multi-Chip Stand Alone
Vendor	DataLocker Inc. · website
Hardware versions	DL4-500GB-FE, DL4-1TB-FE, DL4-2TB-FE, DL4-SSD-500GB-FE, DL4-SSD-1TB-FE, DL4-SSD-2TB-FE, DL4-SSD-4TB-FE, DL4-SSD-7.6TB-FE, DL4-SSD-16TB-FE
Firmware versions	Firmware Versions 1.49 and 2.11 with Bootloader Version 1.12

Module description

Quoted from the NIST CMVP entry for this certificate.

The DL4FE is an encrypted portable storage device, featuring three crypto processors, which provide layers of cryptographic protection. It requires no additional software or drivers to be installed on the host PC. It is intended for use by US Federal agencies or other markets that require FIPS 140-2 validated encrypted storage.

Security level exceptions

Mitigation of Other Attacks: N/A

Approved algorithms (9)

Algorithm	CAVP certificates
AES	3971, 5695
CKG	vendor affirmed
DRBG	1187
ECDSA	890
HMAC	2589
KAS-SSC	vendor affirmed
KDA	vendor affirmed
PBKDF	vendor affirmed
SHS	3275, 3299, 4565

Allowed algorithms

NDRNG

Tested configurations

Validation history

Date	Type	Lab
2021-07-07	Initial	Penumbra Security, Inc.
2022-02-25	Update	Penumbra Security, Inc.

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

2026-08-21: first observed by this tracker, status historical
Validation dates on record: 2021-07-07, 2022-02-25

DL4FE