808bits

Aegis Fortress L3 Cryptographic Module

FIPS 140-2 certificate #3996 · Apricorn · data as of 2026-10-09

Aegis Fortress L3 Cryptographic Module, from Apricorn, holds FIPS 140-2 certificate #3996 at overall level 3. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. SP 800-56Arev3 transition - replaced by certificate #4529. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When configured as specified in Section 11.1 of the Security Policy

Certificate

Certificate number3996
StandardFIPS 140-2
Statushistorical
Overall level3
Module typeHardware
EmbodimentMulti-Chip Stand Alone
VendorApricorn · website
Hardware versionsP/Ns AFL3-500, AFL3-1TB, AFL3-2TB, AFL3-3TB, AFL3-4TB, AFL3-5TB, AFL3-S500, AFL3-S1TB, AFL3-S2TB, AFL3-S4TB, AFL3-S8TB, AFL3-S16TB and AFL3-S20TB; Hardware Version: Rev B1
Firmware versions3.2

Module description

Quoted from the NIST CMVP entry for this certificate.

The Aegis Fortress L3 is a FIPS 140-2 Level 3 validated hardware encrypted USB 3.1 external storage drive. Its software free design allows interface to any host that supports USB and mass storage. Authentication is performed via the embedded keypad and all CSPs (PINs, encryption keys, etc) never leave the device boundary for improved security. The device supports 1 administrator and 1 user and offers a variety of features including forced enrollment, programmable brute force, recovery PINs, 7-16 digit PINs, auto lock, read only modes, and is compatible with Apricorn’s Aegis Configurator.

Security level exceptions

  • Mitigation of Other Attacks: N/A

Approved algorithms (6)

AlgorithmCAVP certificates
AESC555, C1597
CKGvendor affirmed
DRBGC656
ECDSAC570
KASC570
SHSC568

Allowed algorithms

NDRNG

Tested configurations

  • N/A

Validation history

DateTypeLab
2021-07-29InitialUL Verification Services, Inc.

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2021-07-29

Source documents