808bits

Aruba IAP-315, IAP-345, IAP-377, IAP-503H, IAP-505H, IAP-504, IAP-505, IAP-514, IAP-515, IAP-534, IAP-535, IAP-555, IAP-635, and IAP-655 Wireless Access Points

FIPS 140-2 certificate #4543 · Aruba, a Hewlett Packard Enterprise company · data as of 2026-10-09

Aruba IAP-315, IAP-345, IAP-377, IAP-503H, IAP-505H, IAP-504, IAP-505, IAP-514, IAP-515, IAP-534, IAP-535, IAP-555, IAP-635, and IAP-655 Wireless Access Points, from Aruba, a Hewlett Packard Enterprise company, holds FIPS 140-2 certificate #4543 at overall level 2. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its algorithm certificates, its validation history, and the list moves this tracker has observed, which NIST does not date.

Historical. Moved to historical list due to sunsetting. Federal agencies may reference historical validations for existing systems only, not for new procurement. Observed moving to historical on 2026-09-22. It was one of the last FIPS 140-2 certificates, all moved at the 140-2 sunset on 2026-09-21.
Caveat: When operated in FIPS mode. When installed, initialized and configured as specified in Section 13 of the Security Policy. The tamper evident labels installed as indicated in the security policy. The module generates cryptographic keys whose strengths are modified by available entropy

Certificate

Certificate number4543
StandardFIPS 140-2
Statushistorical
Overall level2
Module typeHardware
EmbodimentMulti-Chip Stand Alone
VendorAruba, a Hewlett Packard Enterprise company · website
Hardware versionsIAP-315-US TAA (HPE SKU JW814A), IAP-345-USF1 (HPE SKU JZ034A), IAP-345-RWF1 (HPE SKU JZ032A), IAP-377-USF1 (HPE SKU JZ188A), IAP-377-RWF1 (HPE SKU JZ187A), IAP-503H-US TAA (HPE SKU R3V39A), IAP-505H-US TAA (HPE SKU R3V49A), IAP-504-US TAA (HPE SKU R2H34A), IAP-505-US TAA (HPE SKU R2H39A), IAP-514-US TAA (HPE SKU Q9H68A), IAP-515-US TAA (HPE SKU Q9H73A), IAP-534-US TAA (HPE SKU JZ342A), IAP-535-US TAA (HPE SKU JZ347A), IAP-555-US TAA (HPE SKU JZ367A), IAP-635-US TAA (HPE SKU R7J33A), IAP-635-RW TAA (HPE SKU R7J32A), IAP-655-US TAA (HPE SKU R7J44A), IAP-655-RW TAA (HPE SKU R7J43A)
Firmware versionsAruba Instant version 8.8 and version 8.10

Module description

Quoted from the NIST CMVP entry for this certificate.

Aruba's Wi-Fi Instant Access Points operate at gigabit speeds, offering extreme performance for mobile devices. In FIPS 140-2 mode, Aruba IAPs support the IEEE 802.11i/WPA2 client standard. Aruba APs also support wireless intrusion detection/prevention services and wireless mesh topologies. The built-in GUI provides access to live monitoring and traffic visibility, while network configuration provides full customization of SSIDs, roles, guest access, and more.

Approved algorithms (13)

AlgorithmCAVP certificates
AES4748, 5412, 5664, C1275, C1276, A2490, A2491
CVLA2490, A2491
DRBGA2491
DSAA2490, A2491
ECDSAA2490, A2491
ENT
HMACA2490, A2491
KAS
KAS-SSCA2490, A2491
KBKDFA2491
KDAA2491
RSAA2489, A2490, A2491
SHSA2489, A2490, A2491

Allowed algorithms

RSA (key wrapping; key establishment methodology provides 112 bits of encryption strength)

Tested configurations

  • N/A

Validation history

DateTypeLab
2023-06-29InitialLeidos Accredited Testing & Evaluation (AT&E) Lab
2023-09-14UpdateLeidos Accredited Testing & Evaluation (AT&E) Lab
2024-06-07UpdateLeidos Accredited Testing & Evaluation (AT&E) Lab

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical at the time of the earliest snapshot
  • 2026-09-22: observed moving from active to historical
  • Validation dates on record: 2023-06-29, 2023-09-14, 2024-06-07

Source documents