i.MX 8X SECO HSMv2
Caveat: When operated in FIPS mode and utilizing a Trusted Path as specified in the Security Policy
Certificate
| Certificate number | 4152 |
|---|---|
| Standard | FIPS 140-2 |
| Status | active |
| Sunset date | 2026-09-21 |
| Overall level | 3 |
| Module type | Hardware |
| Embodiment | Single Chip |
| Vendor | NXP Semiconductors · website |
| Hardware versions | P/N: rpp_cm0p_sec_subsys (version tag DA_SSL_iMX8QX_SCU_SUBSYS_LN28FDSOI_1.72) |
| Firmware versions | ROM mem_i.MX8QX_s28roml_w20480x032m32B2_1Tlms_m0_1.3; SECO FW 4.8.0 |
Module description
The i.MX 8X HSMv2 extends the rich capabilities of the i.MX 8X family of products with advanced security and cryptographic capabilities. These HSM extensions implemented in the i.MX 8X integrated cryptographic module offer OEMs the capability to configure the part in the desired FIPS mode to support challenging IoT use cases and more. The i.MX 8X cryptographic module is an integral part of the NXP i.MX 8X application processors and can be used together with other features offered by these SOCs to reduce both the OEM design bill of materials as well as time to market.
Approved algorithms
| Algorithm | CAVP certificate |
|---|---|
| AES | C1951, C1954, C1956, C1958 |
| CKG | vendor affirmed |
| CVL | A1251, C1957 |
| ECDSA | C1957 |
| ENT | |
| HMAC | A892 |
| KAS | |
| KAS-SSC | A904 |
| KBKDF | C1959 |
| KDA | A905 |
| KTS | |
| RSA | C1953 |
| SHS | C1952, C1955 |
Tested configurations
- [Version number: SOC_iMX8_QuadX_CMOS28FDSOI_1.88
- MiMX8DX6FVLFZAC, MiMX8DX5FVLFZAC, MiMX8DX4FVLFZAC, MiMX8DX3FVLFZAC, MiMX8DX2FVLFZAC, MiMX8DX1FVLFZAC, MiMX8DX6GVLFZAC, MiMX8DX5GVLFZAC
- MiMX8UX6FVLFZAC, MiMX8UX5FVLFZAC, MiMX8UX2FVLFZAC, MiMX8UX1FVLFZAC, MiMX8UX6GVLFZAC, MiMX8UX5GVLFZAC]
- P/Ns: MiMX8QX6FVLFZAC, MiMX8QX5FVLFZAC, MiMX8QX2FVLFZAC, MiMX8QX1FVLFZAC, MiMX8QX6GVLFZAC, MiMX8QX5GVLFZAC, PIMX8QX6AVLFZAC, PIMX8QX6FVLFZAC
Validation history
| Date | Type | Lab |
|---|---|---|
| 2022-02-14 | Initial | UL Verification Services, Inc. |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status active
- Validation dates on record: 2022-02-14