808bits

i.MX 8X SECO HSM

FIPS 140-2 certificate #3990 · NXP Semiconductors · data as of 2026-09-03

i.MX 8X SECO HSM, from NXP Semiconductors, holds FIPS 140-2 certificate #3990 at overall level 3. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Moved to historical list due to sunsetting. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode and utilizing a Trusted Path as specified in the Security Policy

Certificate

Certificate number3990
StandardFIPS 140-2
Statushistorical
Overall level3
Module typeHardware
EmbodimentSingle Chip
VendorNXP Semiconductors · website
Hardware versionsP/N: rpp_cm0p_sec_subsys; version tag DA_SSL_iMX8QX_SCU_SUBSYS_LN28FDSOI_1.72.
Firmware versionsROM mem_i.MX8QX_s28roml_w20480x032m32B2_1Tlms_m0_1.3; SECO FW 3.7.1

Module description

Quoted from the NIST CMVP entry for this certificate.

The i.MX 8X HSM extends the rich capabilities of the i.MX 8X family of products with advanced security and cryptographic capabilities. These HSM extensions implemented in the i.MX 8X integrated cryptographic module offer OEMs the capability to configure the part in the desired FIPS mode to support V2X or IoT use cases and more. The i.MX 8X cryptographic module is an integral part of the NXP i.MX 8X application processors and can be used together with other features offered by these SOCs to reduce both the OEM design bill of materials as well as time to market in security critical applications.

Approved algorithms (10)

AlgorithmCAVP certificates
AESC1951, C1954, C1956, C1958
CKGvendor affirmed
CVLC1957
DRBGC1955
ECDSAC1957
ENT
KBKDFC1959
KTS
RSAC1953
SHSC1952, C1955

Allowed algorithms

ECDSA (Cert. #C1957; when used with non-approved BrainpoolP256R1 and BrainpoolP384R1elliptic curves)

Tested configurations

  • [Version number: SOC_iMX8_QuadX_CMOS28FDSOI_1.88
  • MiMX8DX6FVLFZAC, MiMX8DX5FVLFZAC, MiMX8DX4FVLFZAC, MiMX8DX3FVLFZAC, MiMX8DX2FVLFZAC, MiMX8DX1FVLFZAC, MiMX8DX6GVLFZAC, MiMX8DX5GVLFZAC
  • MiMX8UX6FVLFZAC, MiMX8UX5FVLFZAC, MiMX8UX2FVLFZAC, MiMX8UX1FVLFZAC, MiMX8UX6GVLFZAC, MiMX8UX5GVLFZAC]
  • P/Ns: MiMX8QX6FVLFZAC, MiMX8QX5FVLFZAC, MiMX8QX2FVLFZAC, MiMX8QX1FVLFZAC, MiMX8QX6GVLFZAC, MiMX8QX5GVLFZAC, PIMX8QX6AVLFZAC, PIMX8QX6FVLFZAC

Validation history

DateTypeLab
2021-07-20InitialUL Verification Services, Inc.
2022-01-14UpdateUL Verification Services, Inc.

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2021-07-20, 2022-01-14

Source documents