Trellix Core Cryptographic Module (user)
Trellix Core Cryptographic Module (user), from Trellix, holds FIPS 140-2 certificate #4221 at overall level 1. The validation is active, with a sunset date of 2026-09-21. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: When operated in FIPS mode. No assurance of the minimum strength of generated keys.
Certificate
| Certificate number | 4221 |
|---|---|
| Standard | FIPS 140-2 |
| Status | active |
| Sunset date | 2026-09-21 |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | Trellix · website |
| Software versions | 2.2.0.17.0 |
Module description
Quoted from the NIST CMVP entry for this certificate.
The Trellix Core Cryptographic Module provides cryptographic functionality for Trellix's Endpoint Encryption product range.
Security level exceptions
- Physical Security: N/A
- Design Assurance: Level 3
- Mitigation of Other Attacks: N/A
Approved algorithms (6)
| Algorithm | CAVP certificates |
|---|---|
| AES | A1555, A1556 |
| CKG | vendor affirmed |
| DRBG | A1556 |
| HMAC | A1555, A1556 |
| RSA | A1556 |
| SHS | A1555, A1556 |
Allowed algorithms
RSA (key wrapping; key establishment methodology provides 112 bits of encryption strength)
Tested configurations
- BIOS Preboot running on Dell Inspiron 5558 with Intel i5-5250U with PAA
- BIOS Preboot running on Dell Inspiron 5558 with Intel i5-5250U without PAA
- UEFI 64-bit Preboot running on Microsoft Surface 3 with Intel i5-520M with PAA
- UEFI 64-bit Preboot running on Microsoft Surface 3 with Intel i5-520M without PAA
- Windows 10 64-bit running on Microsoft Surface 3 with an Intel i5-520M with PAA
- Windows 10 64-bit running on Microsoft Surface 3 with an Intel i5-520M without PAA
- Windows 7 32-bit running on Dell Latitude E7270 with Intel i5-6300U with PAA
- Windows 7 32-bit running on Dell Latitude E7270 with Intel i5-6300U without PAA (single-user mode)
Validation history
| Date | Type | Lab |
|---|---|---|
| 2022-05-09 | Initial | Acumen Security |
| 2024-03-13 | Update | Acumen Security |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status active
- Validation dates on record: 2022-05-09, 2024-03-13