IBM Cloud Object Storage System’s™ FIPS Cryptographic Module
Caveat: None
Certificate
| Certificate number | 4404 |
|---|---|
| Standard | FIPS 140-2 |
| Status | active |
| Sunset date | 2026-09-21 |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | IBM Corporation · website |
| Software versions | 2.0 |
Module description
Cryptographic module used for IBM’s Cloud Object Storage system components
Security level exceptions
- Physical Security: N/A
- Design Assurance: Level 3
- Mitigation of Other Attacks: N/A
Approved algorithms
| Algorithm | CAVP certificate |
|---|---|
| AES | A2467 |
| CVL | A2467 |
| DRBG | A2466, A2467 |
| DSA | A2467 |
| ECDSA | A2467 |
| ENT | |
| HMAC | A2467 |
| KAS-SSC | A2467 |
| PBKDF | A2467 |
| RSA | A2467 |
| SHA-3 | A2467 |
| SHS | A2466, A2467 |
Allowed algorithms
RSA (key wrapping; key establishment methodology provides between 112 and 256 bits of encryption strength)
Tested configurations
- ClevOS 3.16 FIPS running on IBM A10 Series with Intel Xeon 6230N with PAA
- ClevOS 3.16 FIPS running on IBM A10 Series with Intel Xeon 6230N without PAA
- ClevOS 3.16 FIPS running on PIO-628U-TR4T+-ST031 with Intel Xeon E5-2620 with PAA
- ClevOS 3.16 FIPS running on PIO-628U-TR4T+-ST031 with Intel Xeon E5-2620 without PAA (single-user mode)
- ClevOS 3.16 FIPS running on PIO-648R-E1CR36L+-ST031 with Intel Xeon E5-2620 with PAA
- ClevOS 3.16 FIPS running on PIO-648R-E1CR36L+-ST031 with Intel Xeon E5-2620 without PAA
Validation history
| Date | Type | Lab |
|---|---|---|
| 2023-01-04 | Initial | Gossamer Security Solutions |
| 2024-06-05 | Update | Gossamer Security Solutions |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status active
- Validation dates on record: 2023-01-04, 2024-06-05