808bits

ProtectServer PCIe HSM 3

FIPS 140-2 certificate #4110 · Thales · data as of 2026-08-28
Active. Sunset date 2026-09-21, 23 days away. This is the FIPS 140-2 sunset: after it, agencies may keep the module only in existing systems.
Caveat: When operated in FIPS mode. When utilizing a Trusted Path as specified in the security policy

Certificate

Certificate number4110
StandardFIPS 140-2
Statusactive
Sunset date2026-09-21
Overall level3
Module typeHardware
EmbodimentMulti-Chip Embedded
VendorThales · website
Hardware versions808-000048-002, 808-000048-003, 808-000073-001, 808-000073-002
Firmware versions7.00.01, 7.01.01, 7.01.02, 7.02.02 or 7.02.04 with bootloader versions 1.2.0 or 1.2.1

Module description

The ProtectServer PCIe HSM 3 is a multi-chip embedded hardware cryptographic module in the form of a PCI-Express card that provides a wide range of cryptographic functions using firmware and dedicated hardware processors

Approved algorithms

AlgorithmCAVP certificate
AESC2089
CKGvendor affirmed
CVLA678
DRBGC2089
DSAC2089
ECDSAC1945, C2089
HMACA678, C2089
KAS
KAS-SSCA678
KDAA678
KTS
KTS
KTS-RSA
RSAA678, C2089
SHA-3C2089
SHSC1945, C2089
Triple-DESC2089

Allowed algorithms

AES (Cert. #C2089, key unwrapping; key establishment methodology provides between 128 and 256 bits of encryption strength); NDRNG; RSA (key wrapping; key establishment methodology provides between 112 and 150 bits of encryption strength); Triple-DES (Cert. #C2089, key unwrapping; key establishment methodology provides 112 bits of encryption strength)

Tested configurations

  • N/A

Validation history

DateTypeLab
2021-12-20InitialLeidos Accredited Testing & Evaluation (AT&E) Lab
2022-04-20UpdateLeidos Accredited Testing & Evaluation (AT&E) Lab
2022-05-03UpdateLeidos Accredited Testing & Evaluation (AT&E) Lab
2022-10-06UpdateLeidos Accredited Testing & Evaluation (AT&E) Lab
2023-04-21UpdateLeidos Accredited Testing & Evaluation (AT&E) Lab
2023-10-24UpdateLeidos Accredited Testing & Evaluation (AT&E) Lab
2024-05-03UpdateLeidos Accredited Testing & Evaluation (AT&E) Lab

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status active
  • Validation dates on record: 2021-12-20, 2022-04-20, 2022-05-03, 2022-10-06, 2023-04-21, 2023-10-24, 2024-05-03

Source documents