Aruba AP-318, AP-344, AP-345, AP-374, AP-375, AP-377 and AP-387 Outdoor Access Points with ArubaOS FIPS Firmware
Aruba AP-318, AP-344, AP-345, AP-374, AP-375, AP-377 and AP-387 Outdoor Access Points with ArubaOS FIPS Firmware, from Aruba, a Hewlett Packard Enterprise company, holds FIPS 140-2 certificate #4067 at overall level 2. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its algorithm certificates, its validation history, and the list moves this tracker has observed, which NIST does not date.
Caveat: When operated in FIPS mode. When installed, initialized and configured as specified in Section 13 of the Security Policy. The tamper evident labels installed as indicated in the security policy
Certificate
| Certificate number | 4067 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 2 |
| Module type | Hardware |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | Aruba, a Hewlett Packard Enterprise company · website |
| Hardware versions | [AP-318-USF1 (HPE SKU JZ158A), AP-318-RWF1 (HPE SKU JZ157A), AP-344-USF1 (HPE SKU JZ024A), AP-344-RWF1 (HPE SKU JZ022A), AP-345-USF1 (HPE SKU JZ034A), AP-345-RWF1 (HPE SKU JZ032A), AP-374-USF1 (HPE SKU JZ168A), AP-374-RWF1 (HPE SKU JZ167A), AP-375-USF1 (HPE SKU JZ178A), AP-375-RWF1 (HPE SKU JZ177A), AP-377-USF1 (HPE SKU JZ188A), AP-377-RWF1 (HPE SKU JZ187A), AP-387-USF1 (HPE SKU R0K14A), AP-387-RWF1 (HPE SKU R0K13A)] with FIPS Kit 4011570-01 (HPE SKU JY894A) |
| Firmware versions | ArubaOS 8.6.0.7-FIPS |
Module description
Quoted from the NIST CMVP entry for this certificate.
Aruba's 802.11 Wi-Fi access points operate at gigabit speeds, offering extreme performance for mobile devices. In FIPS 140-2 mode, Aruba APs in conjunction with a Mobility Controller support the WPA2/WPA3 client standard along with optional Suite B cryptography. Aruba APs also support wireless intrusion detection/prevention services and wireless mesh topologies.
Security level exceptions
- Mitigation of Other Attacks: N/A
Approved algorithms (11)
| Algorithm | CAVP certificates |
|---|---|
| AES | 4748, 5412, C1253, C1254 |
| CVL | C1253, C1254 |
| DRBG | C1253 |
| ECDSA | C1253, C1254 |
| HMAC | C1253, C1254 |
| KAS-SSC | vendor affirmed |
| KBKDF | A768, A769, C1253 |
| KDA | vendor affirmed |
| KTS | |
| RSA | C1253, C1254, C1255 |
| SHS | C1253, C1254, C1255 |
Allowed algorithms
NDRNG
Tested configurations
- N/A
Validation history
| Date | Type | Lab |
|---|---|---|
| 2021-11-04 | Initial | Leidos Accredited Testing & Evaluation (AT&E) Lab |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical at the time of the earliest snapshot
- 2026-09-22: observed moving from active to historical
- Validation dates on record: 2021-11-04