2621XM and 2651XM Modular Access Routers with AIM-VPN/EP: FIPS 140-2 cert #438

2621XM and 2651XM Modular Access Routers with AIM-VPN/EP, from Cisco Systems, Inc., holds FIPS 140-2 certificate #438 at overall level 2. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Certificate

Certificate number	438
Standard	FIPS 140-2
Status	historical
Overall level	2
Module type	Hardware
Embodiment	Multi-chip standalone
Vendor	Cisco Systems, Inc. · website
Hardware versions	2621XM and 2651XM with AIM-VPN/EP Version 1.0 and Board Version B0
Firmware versions	IOS 12.3(3d)

Module description

Quoted from the NIST CMVP entry for this certificate.

The Cisco Modular Access Routers are routers that provides data protection on a network providing packet encryption. The modules perform all of the functions typical of a router. In addition to the normal routing functions, the modules also provide packet encryption. The modules are capable of encrypting traffic between one or more modules: providing a secure connection at the packet level.

Approved algorithms (6)

Algorithm	CAVP certificates
AES	46
HMAC-SHA-1	vendor affirmed
RSA	vendor affirmed
SHA-1	26, 38
Triple-DES	32, 156
Triple-DES MAC	vendor affirmed

Other algorithms

DES (Certs. #100 and #202); DES MAC (Cert. #202, vendor affirmed); MD4; MD5; HMAC-MD5; Diffie-Hellman (key agreement)

Validation history

Date	Type	Lab
2004-06-16	Initial	SAIC-VA
2005-05-24	Update
2010-05-28	Update
2012-02-23	Update

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

2026-08-21: first observed by this tracker, status historical
Validation dates on record: 2004-06-16, 2005-05-24, 2010-05-28, 2012-02-23

2621XM and 2651XM Modular Access Routers with AIM-VPN/EP