808bits

Aruba Mobility Controller Virtual Appliances with ArubaOS FIPS Firmware

FIPS 140-2 certificate #4630 · Aruba, a Hewlett Packard Enterprise company · data as of 2026-08-28
Historical. Moved to historical list due to sunsetting. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode. When installed, initialized and configured as specified in Section 8 of the Security Policy

Certificate

Certificate number4630
StandardFIPS 140-2
Statushistorical
Overall level1
Module typeFirmware
EmbodimentMulti-Chip Stand Alone
VendorAruba, a Hewlett Packard Enterprise company · website
Firmware versionsArubaOS 8.10.0.2-FIPS

Module description

Aruba's family of Mobility Controllers are network infrastructure devices providing secure, scalable solutions for enterprise Wi-Fi, network security policy enforcement, VPN services, and wireless intrusion detection and prevention. Mobility controllers serve as central points of authentication, encryption, access control, and network coordination for all mobile network services.

Security level exceptions

  • Roles, Services, and Authentication: Level 2
  • Mitigation of Other Attacks: N/A

Approved algorithms

AlgorithmCAVP certificate
AESA2689, A2690
CVLA2689, A2690
DRBGA2690
DSAA2689, A2690
ECDSAA2689, A2690
HMACA2689, A2690
KAS
KAS
KAS
KAS-SSCA2689, A2690
KBKDFA2690
KDAA2690
KTS
KTS
KTS
KTS
RSAA2688, A2689, A2690
SHSA2688, A2689, A2690

Allowed algorithms

MD5; NDRNG; RSA (key wrapping; key establishment methodology provides 112 bits of encryption strength)

Tested configurations

  • ArubaOS 8.10.0.2-FIPS on ESXi 6.5 running on an HPE ProLiant ML110 Gen10 with an Intel Xeon Silver with PAA
  • ArubaOS 8.10.0.2-FIPS on ESXi 6.5 running on an HPE ProLiant ML110 Gen10 with an Intel Xeon Silver without PAA

Validation history

DateTypeLab
2023-10-05InitialLeidos Accredited Testing & Evaluation (AT&E) Lab

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2023-10-05

Source documents