808bits

Citrix FIPS Cryptographic Module

FIPS 140-2 certificate #4628 · Citrix Systems, Inc. · data as of 2026-08-28
Historical. Moved to historical list due to sunsetting. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS Mode. No assurance of the minimum strength of generated keys

Certificate

Certificate number4628
StandardFIPS 140-2
Statushistorical
Overall level1
Module typeSoftware-Hybrid
EmbodimentMulti-Chip Stand Alone
VendorCitrix Systems, Inc. · website
Software versions1.0, 1.0.1 and 1.0.2
Hardware versionsARM v8-A, ARM v7-A, Intel Core i7 4th Generation, Intel Core i7 6th Generation, Intel Core i7 8th Generation, Intel Xeon 56xx series, Intel Xeon E5-24xx v2 series, Intel Xeon E5- 26xx v2 series, Intel Xeon E5-26xx v3 series and Intel Xeon E5-26xx v4 series

Module description

The Citrix FIPS Cryptographic Module is a software toolkit which provides various cryptographic functions to support the Citrix product portfolio.

Security level exceptions

  • Mitigation of Other Attacks: N/A

Approved algorithms

AlgorithmCAVP certificate
AES4397
CKGvendor affirmed
CVL1101, 1102, 1103, 1105
DRBG1417
DSA1174
ECDSA1056
HMAC2923
KTS
PBKDFvendor affirmed
RSA2379
SHS3626
Triple-DES2371

Allowed algorithms

MD5

Tested configurations

  • Android 4.4 running on a Google Nexus 5 (LG D820) with ARM v7-A with PAA
  • Android 5 running on a Google Nexus 6 (Motorola Nexus 6 XT11003) with ARM v7-A with PAA
  • Android 6 running on a Google Nexus 6 (Motorola Nexus 6 XT11003) with ARM v7-A with PAA
  • Android 6 running on a Samsung Galaxy S6 (SM-G920T) with ARM v8-A with PAA
  • Android 7 running on a Google Nexus 5X (LG H790) with ARM v8-A with PAA
  • Android 7 running on a Google Nexus 6 (Motorola Nexus 6 XT11003) with ARM v7-A with PAA
  • Android 8 64bit running on a Google Pixel 2 with ARM v8-A with PAA
  • Android 9 running on a Google Pixel 2 with ARM v8-A with PAA
  • FreeBSD 8.4 32bit running on a Citrix NetScaler MPX-14000-FIPS with Intel Xeon E5-26xx v2 series with PAA
  • FreeBSD 8.4 64bit running on a Citrix NetScaler MPX-14000-FIPS with Intel Xeon E5-26xx v2 series with PAA
  • iOS 10 64bit running on an Apple 12.9-inch iPad Pro (A1584) with ARM v8-A with PAA
  • iOS 11 running on an iPhone X with ARM v8-A with PAA
  • Linux 3.10 64bit running on a CyberPowerPC GLC2460 with Intel Core i7 [8th Generation] with PAA
  • Linux 3.13 64bit running on a Lenovo 20EV002JUS Intel Core i7 [6th Generation] with PAA
  • Linux 3.16 on ESXi 5 64bit running on a HP ProLiant DL2000 with Intel Xeon 56xx series with PAA
  • Linux 3.16 on Hyper-V on Windows Server 2012 R2 64bit running on a HP ProLiant DL2000 with Intel Xeon 56xx series with PAA
  • Linux 3.16 on XenServer 6 64bit running on a Dell PowerEdge C6100 with Intel Xeon 56xx series with PAA
  • Linux 4.15 64bit running on a CyberPowerPC GLC2460 with Intel Core i7 [8th Generation] with PAA
  • Linux 4.15 64bit running on a HPE ProLiant BL460c Gen9 with Intel Xeon E5-26XX v3 with PAA
  • Linux 4.15 64bit running on a HPE Proliant BL460c Gen9 with Intel Xeon E5-26XX v4 series with PAA
  • Linux 4.x on ESXi 5 64bit running on a HPE ProLiant BL460c Gen9 with Intel Xeon E5-26XX v4 series with PAA
  • Linux 4.x on Hyper-V on Windows Server 2012 R2 64bit running on a HPE ProLiant BL460c Gen9 with Intel Xeon E5-26XX v4 series with PAA
  • Linux 4.x on XenServer 7 64bit running on a Dell PowerEdge R320 with Intel Xeon E5-24XX v2 series with PAA
  • Linux 4.x on XenServer 7 64bit running on a HPE ProLiant BL460c Gen9 with Intel Xeon E5-26XX v4 series with PAA
  • Mac OS X 10.12 64bit running on an Apple Macbook Pro (A1398) with Intel Core i7 [4th Generation] with PAA
  • Mac OS X 10.13 64bit running on an Apple Mac Mini with Intel Corei7 [4th Generation] with PAA
  • NoTouch Desktop running on an N-computing RX-HDX for Citrix with ARM v8-A with PAA
  • ViewSonic Thin OS running on a ViewSonic VS16585 with ARM v8-A with PAA
  • Windows 10 32bit running on a Lenovo 20CD00B2US with Intel Core i7 [4th Generation] with PAA
  • Windows 10 64bit running on a CyberPowerPC GLC2460 with Intel Core i7 [8th Generation] with PAA
  • Windows 10 64bit running on a Lenovo 20EV002JUS with Intel Core i7 [6th Generation] with PAA
  • Windows 8.1 64bit running on a CyberPowerPC GLC2460 with Intel Corei7 [8th Generation] with PAA
  • Windows Server 2016 on HyperV on Windows Server 2016 64bit running on a HPE ProLiant BL460c Gen9 with Intel Xeon E5-26XX v3 series with PAA
  • Windows Server 2016 on HyperV on Windows Server 2016 64bit running on HPE Proliant BL460c Gen9 with Intel Xeon E5-26XX v4 series with PAA (single-user mode)

Validation history

DateTypeLab
2023-10-05InitialUL Verification Services, Inc.

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2023-10-05

Source documents