808bits

IBM Cloud Object Storage System’s™ FIPS Cryptographic Module

FIPS 140-2 certificate #4404 · IBM Corporation · data as of 2026-08-28
Active. Sunset date 2026-09-21, 23 days away. This is the FIPS 140-2 sunset: after it, agencies may keep the module only in existing systems.
Caveat: None

Certificate

Certificate number4404
StandardFIPS 140-2
Statusactive
Sunset date2026-09-21
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorIBM Corporation · website
Software versions2.0

Module description

Cryptographic module used for IBM’s Cloud Object Storage system components

Security level exceptions

  • Physical Security: N/A
  • Design Assurance: Level 3
  • Mitigation of Other Attacks: N/A

Approved algorithms

AlgorithmCAVP certificate
AESA2467
CVLA2467
DRBGA2466, A2467
DSAA2467
ECDSAA2467
ENT
HMACA2467
KAS-SSCA2467
PBKDFA2467
RSAA2467
SHA-3A2467
SHSA2466, A2467

Allowed algorithms

RSA (key wrapping; key establishment methodology provides between 112 and 256 bits of encryption strength)

Tested configurations

  • ClevOS 3.16 FIPS running on IBM A10 Series with Intel Xeon 6230N with PAA
  • ClevOS 3.16 FIPS running on IBM A10 Series with Intel Xeon 6230N without PAA
  • ClevOS 3.16 FIPS running on PIO-628U-TR4T+-ST031 with Intel Xeon E5-2620 with PAA
  • ClevOS 3.16 FIPS running on PIO-628U-TR4T+-ST031 with Intel Xeon E5-2620 without PAA (single-user mode)
  • ClevOS 3.16 FIPS running on PIO-648R-E1CR36L+-ST031 with Intel Xeon E5-2620 with PAA
  • ClevOS 3.16 FIPS running on PIO-648R-E1CR36L+-ST031 with Intel Xeon E5-2620 without PAA

Validation history

DateTypeLab
2023-01-04InitialGossamer Security Solutions
2024-06-05UpdateGossamer Security Solutions

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status active
  • Validation dates on record: 2023-01-04, 2024-06-05

Source documents