Encryption Card 9TCE-PCN-10GU+AES10G-F
Encryption Card 9TCE-PCN-10GU+AES10G-F, from ADVA Optical Networking SE, holds FIPS 140-2 certificate #4499 at overall level 2. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its algorithm certificates, its validation history, and the list moves this tracker has observed, which NIST does not date.
Caveat: The tamper evident seals installed as indicated in the security policy; This module contains the embedded module StarSign Crypto-USB Token S powered by Sm@rtCafé Expert 7.0 Secure Element validated to FIPS 140-2 under Cert. #2628 operating in FIPS mode.
Certificate
| Certificate number | 4499 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 2 |
| Module type | Hardware |
| Embodiment | Multi-Chip Embedded |
| Vendor | ADVA Optical Networking SE · website |
| Hardware versions | HW B-1.01; shelves: SH9HU (Version HW 2.01, Part Number 1078700121 F7/SH9HU), SH7HU (Version HW 2.05, Part Number 0078700101 F7/SH7HU), SH7HU-R (Version HW 2.05, Part Number 0078700111 F7/SH7HU-R), SH1HU-R/PF (Version HW 1.01, Part Number 1078700060-01 F7/SH1HU-R/PF), SH1HU-HP/2DC (Version HW 2.11, Part Number 1078700144 F7/SH1HU-HP/2DC), SH1HU-HP/E-TEMP/2DC (Version HW 1.01, Part Number 1078700145-01 F7/SH1HU-HP/E-TEMP/2DC); labels and label kits: SEAL/FIPS-GENERAL (Part Number 1013700030-01), SEAL/FIPS-WIRE (Part Number 1013700032-01), SEAL/FIPS-GENERAL/5 (Part Number BC00000738) |
| Firmware versions | 172.25.7, 191.4.8 |
Module description
Quoted from the NIST CMVP entry for this certificate.
The ADVA 9TCE-PCN-16GU+AES100G-F encryption module is used for encryption and decryption of data transmitted over Optical Transportation Network (OTN) links. It is used in ADVA's FSP 3000 Optical Network Encryption solutions.
Security level exceptions
- Design Assurance: Level 3
Approved algorithms (7)
| Algorithm | CAVP certificates |
|---|---|
| AES | A886, A887, C666, C667 |
| CKG | vendor affirmed |
| DRBG | 455, A886, C666 |
| HMAC | A886, C666 |
| KAS | vendor affirmed |
| RSA | A886, C666 |
| SHS | A886, C666 |
Allowed algorithms
NDRNG
Tested configurations
- N/A
Validation history
| Date | Type | Lab |
|---|---|---|
| 2023-05-02 | Initial | TUVIT Evaluation Body for IT Security |
| 2023-07-31 | Update | TUVIT Evaluation Body for IT Security |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical at the time of the earliest snapshot
- 2026-09-22: observed moving from active to historical
- Validation dates on record: 2023-05-02, 2023-07-31