808bits

Citrix ADC VPX

FIPS 140-2 certificate #4098 · Citrix Systems, Inc. · data as of 2026-08-28
Active. Sunset date 2026-09-21, 23 days away. This is the FIPS 140-2 sunset: after it, agencies may keep the module only in existing systems.
Caveat: When operated in FIPS mode. The module generates cryptographic keys whose strengths are modified by available entropy

Certificate

Certificate number4098
StandardFIPS 140-2
Statusactive
Sunset date2026-09-21
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorCitrix Systems, Inc. · website
Software versions12.1.55.180

Module description

Citrix ADC VPX is a virtual application delivery controller that provides the best possible experience to users with flexible deployment options, intelligent global load balancing, centralized management from a single pane, and integrated application and API security.

Security level exceptions

  • Physical Security: N/A

Approved algorithms

AlgorithmCAVP certificate
AESC1917, C1918
CKGvendor affirmed
CVLC853, C854, C855, C1917, C1918, C1919
DRBGC1917, C1918
ECDSAC1917, C1918
HMACC1917, C1918
KAS-SSCvendor affirmed
PBKDFvendor affirmed
RSAA606, C1917, C1918
SHSC1917, C1918
Triple-DESC1918

Allowed algorithms

MD5; NDRNG; RSA (key wrapping; key establishment methodology provides 112 or 128 bits of encryption strength)

Tested configurations

  • FreeBSD 8.4 on VMware ESXi v6.5 U2 running on a Dell PowerEdge R630 with an Intel® Xeon® E5-2680 v4 with PAA
  • FreeBSD 8.4 on VMware ESXi v6.5 U2 running on a Dell PowerEdge R630 with an Intel® Xeon® E5-2680 v4 without PAA (single-user mode)

Validation history

DateTypeLab
2021-12-12InitialLightship Security, Inc.

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status active
  • Validation dates on record: 2021-12-12

Source documents