nShield Solo XC F3 & nShield Solo XC F3 for nShield Connect XC and for nShield HSMi
nShield Solo XC F3 & nShield Solo XC F3 for nShield Connect XC and for nShield HSMi, from Entrust, holds FIPS 140-2 certificate #4334 at overall level 2. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its algorithm certificates, its validation history, and the list moves this tracker has observed, which NIST does not date.
Certificate
| Certificate number | 4334 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 2 |
| Module type | Hardware |
| Embodiment | Multi-Chip Embedded |
| Vendor | Entrust · website |
| Hardware versions | nC4035E-000 and nC4335N-000, Build Standard A |
| Firmware versions | 12.72.1, 12.72.3 and v12.72.4 |
Module description
Quoted from the NIST CMVP entry for this certificate.
The nShield XC F3 PCIe card, sold as nShield XC F3 PCIe server-embedded hardware security modules (HSMs) and also used in the nShield Connect XC and nShield HSMi network appliance HSMs, are multi-tasking HSMs optimized for symmetric and asymmetric operations on protected keys. The nShield modules are FIPS 140-2 Level 2 embedded devices for applications including but not limited to PKI, SSL/TLS, Secure Manufacturing, Data Protection, Key Management and Provisioning.
Security level exceptions
- Roles, Services, and Authentication: Level 3
- Physical Security: Level 3
- EMI/EMC: Level 3
- Design Assurance: Level 3
- Mitigation of Other Attacks: N/A
Approved algorithms (14)
| Algorithm | CAVP certificates |
|---|---|
| AES | A1931 |
| CKG | vendor affirmed |
| DRBG | A1931 |
| DSA | A1931 |
| ECDSA | 805, A1931 |
| ENT | |
| HMAC | A1931 |
| KAS | A1931 |
| KBKDF | A1931 |
| KTS | |
| KTS-RSA | |
| RSA | A1931 |
| SHS | 3130, A1931 |
| Triple-DES | A1931 |
Allowed algorithms
EC Diffie-Hellman (shared secret computation provides between 112 and 256 bits of encryption strength); EC MQV (shared secret computation provides between 112 and 256 bits of encryption strength)
Tested configurations
- N/A
Validation history
| Date | Type | Lab |
|---|---|---|
| 2022-10-16 | Initial | Lightship Security, Inc. |
| 2024-06-18 | Update | Lightship Security, Inc. |
| 2025-06-27 | Update | Lightship Security, Inc. |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical at the time of the earliest snapshot
- 2026-09-22: observed moving from active to historical
- Validation dates on record: 2022-10-16, 2024-06-18, 2025-06-27