808bits

ProtectServer PCIe HSM 3

FIPS 140-2 certificate #4110 · Thales · data as of 2026-10-09

ProtectServer PCIe HSM 3, from Thales, holds FIPS 140-2 certificate #4110 at overall level 3. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its algorithm certificates, its validation history, and the list moves this tracker has observed, which NIST does not date.

Historical. Moved to historical list due to sunsetting. Federal agencies may reference historical validations for existing systems only, not for new procurement. Observed moving to historical on 2026-09-22. It was one of the last FIPS 140-2 certificates, all moved at the 140-2 sunset on 2026-09-21.
Caveat: When operated in FIPS mode. When utilizing a Trusted Path as specified in the security policy

Certificate

Certificate number4110
StandardFIPS 140-2
Statushistorical
Overall level3
Module typeHardware
EmbodimentMulti-Chip Embedded
VendorThales · website
Hardware versions808-000048-002, 808-000048-003, 808-000073-001, 808-000073-002
Firmware versions7.00.01, 7.01.01, 7.01.02, 7.02.02 or 7.02.04 with bootloader versions 1.2.0 or 1.2.1

Module description

Quoted from the NIST CMVP entry for this certificate.

The ProtectServer PCIe HSM 3 is a multi-chip embedded hardware cryptographic module in the form of a PCI-Express card that provides a wide range of cryptographic functions using firmware and dedicated hardware processors

Approved algorithms (16)

AlgorithmCAVP certificates
AESC2089
CKGvendor affirmed
CVLA678
DRBGC2089
DSAC2089
ECDSAC1945, C2089
HMACA678, C2089
KAS
KAS-SSCA678
KDAA678
KTS
KTS-RSA
RSAA678, C2089
SHA-3C2089
SHSC1945, C2089
Triple-DESC2089

Allowed algorithms

AES (Cert. #C2089, key unwrapping; key establishment methodology provides between 128 and 256 bits of encryption strength); NDRNG; RSA (key wrapping; key establishment methodology provides between 112 and 150 bits of encryption strength); Triple-DES (Cert. #C2089, key unwrapping; key establishment methodology provides 112 bits of encryption strength)

Tested configurations

  • N/A

Validation history

DateTypeLab
2021-12-20InitialLeidos Accredited Testing & Evaluation (AT&E) Lab
2022-04-20UpdateLeidos Accredited Testing & Evaluation (AT&E) Lab
2022-05-03UpdateLeidos Accredited Testing & Evaluation (AT&E) Lab
2022-10-06UpdateLeidos Accredited Testing & Evaluation (AT&E) Lab
2023-04-21UpdateLeidos Accredited Testing & Evaluation (AT&E) Lab
2023-10-24UpdateLeidos Accredited Testing & Evaluation (AT&E) Lab
2024-05-03UpdateLeidos Accredited Testing & Evaluation (AT&E) Lab

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical at the time of the earliest snapshot
  • 2026-09-22: observed moving from active to historical
  • Validation dates on record: 2021-12-20, 2022-04-20, 2022-05-03, 2022-10-06, 2023-04-21, 2023-10-24, 2024-05-03

Source documents