808bits

Cisco Catalyst 9800 (40/80/L) Wireless Controllers running IOS-XE 16.12

FIPS 140-2 certificate #4606 · Cisco Systems, Inc. · data as of 2026-09-13

Cisco Catalyst 9800 (40/80/L) Wireless Controllers running IOS-XE 16.12, from Cisco Systems, Inc., holds FIPS 140-2 certificate #4606 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Moved to historical list due to sunsetting. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When installed, initialized and configured as specified in Section 11 of the Security Policy and operated in FIPS mode. This module contains the embedded module ACT2Lite validated to FIPS 140-2 under Cert. #3637 operating in FIPS mode.

Certificate

Certificate number4606
StandardFIPS 140-2
Statushistorical
Overall level1
Module typeHardware
EmbodimentMulti-Chip Stand Alone
VendorCisco Systems, Inc. · website
Hardware versions9800-40, 9800-80 and 9800-L
Firmware versionsIOS-XE 16.12

Module description

Quoted from the NIST CMVP entry for this certificate.

The Cisco Series Wireless Controllers, are a highly scalable and flexible platform that enables system-wide services for mission-critical wireless networking in medium-sized to large enterprises and campus environments.

Security level exceptions

  • Roles, Services, and Authentication: Level 3
  • Mitigation of Other Attacks: N/A

Approved algorithms (11)

AlgorithmCAVP certificates
AESA1462, A2452, 2346
CKGvendor affirmed
CVLA1462, A2452
DRBGA1462, A2452
ECDSAA1462, A2452
HMACA1462, A2452
KAS
KAS-SSCA1462, A2452
KTS
RSAA1462, A2452
SHSA1462, A2452, 2023

Allowed algorithms

NDRNG; RSA (key wrapping; key establishment methodology provides 112 bits of encryption strength)

Tested configurations

  • N/A

Validation history

DateTypeLab
2023-09-26InitialAcumen Security

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2023-09-26

Source documents