IBM 4769-001 Enterprise PKCS#11 HSM Cryptographic Coprocessor Security Module
Caveat: When operated in FIPS mode
Certificate
| Certificate number | 4553 |
|---|---|
| Standard | FIPS 140-2 |
| Status | active |
| Sunset date | 2026-09-21 |
| Overall level | 4 |
| Module type | Hardware |
| Embodiment | Multi-Chip Embedded |
| Vendor | IBM · website |
| Hardware versions | PN 02WN654-N37880 POST0 v9662 MB0 v6096 (Standard Power) [1][2][3][4]; PN 02WN652-N37880 POST0 v9662 MB0 v6096 (Low Power) [1][2][3][4]; PN 03FM956-H07053 POST0 v8657 MB0 v6381 (Standard Power) [1][2][3][5]; PN 03FM953-H07053 POST0 v8657 MB0 v6381 (Low Power) [1][2][3][5]; PN 03JJ168-N38177 POST0 v8657 MB0 v6381 (Standard Power) [1][2][3]; PN 03JJ165-N38177 POST0 v8657 MB0 v6381 (Low Power) [1][2][3] |
| Firmware versions | 7.0.46z P1591 M1591 P5625 F0701 and 7.0.74z P3795 M6356 P0630 F0701 for segment 1 [1], 1ED5 682D for segment 2 [2], 7C37 01B6 [3] and BE10 6802 [4] and 36F9 31FD [5] for segment 3 |
Module description
The IBM 4769-001 Enterprise PKCS#11 Hardware Security Module is in the form or a PCIe card that executes IBM Enterprise PKCS#11 firmware within a secured tamper responding hardware boundary.
Security level exceptions
- Mitigation of Other Attacks: N/A
Approved algorithms
| Algorithm | CAVP certificate |
|---|---|
| AES | A2470 |
| CKG | vendor affirmed |
| CVL | A2470 |
| DRBG | A2413, A2470, A2472, C1249, C1250 |
| DSA | A2472 |
| ECDSA | A2413, A2470, C1249, C1250 |
| ENT | |
| HMAC | A2470, C1187, C1188 |
| KAS-SSC | A2470, A2472 |
| KBKDF | A2470 |
| KDA | A2470 |
| KTS | |
| KTS | |
| RSA | A2470 |
| SHA-3 | A2470 |
| SHS | A2470, A2472, C1187, C1188, C1247, C1248 |
| Triple-DES | A2470 |
Tested configurations
- N/A
Validation history
| Date | Type | Lab |
|---|---|---|
| 2023-07-27 | Initial | atsec information security corporation |
| 2025-01-13 | Update | atsec information security corporation |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status active
- Validation dates on record: 2023-07-27, 2025-01-13