808bits

ClioConnect Cryptographic Module

FIPS 140-2 certificate #4659 · Altus, Inc. · data as of 2026-08-28
Active. Sunset date 2026-09-21, 23 days away. This is the FIPS 140-2 sunset: after it, agencies may keep the module only in existing systems.
Caveat: When operated in FIPS mode. No assurance of the minimum strength of generated keys

Certificate

Certificate number4659
StandardFIPS 140-2
Statusactive
Sunset date2026-09-21
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorAltus, Inc. · website
Software versions2.2.1

Module description

ClioConnect Cryptographic Module is a standards-based cryptographic engine for communication between servers and IoT medical carts. The module delivers core cryptographic functions to IoT-enabled medical carts and features robust algorithm support. ClioConnect Cryptographic Module offloads functions for secure key management, data integrity, data at rest encryption, and secure communications to a trusted implementation. The module ensures secured data transfer using an encrypted protocol between carts, workstations, and web servers.

Security level exceptions

  • Physical Security: N/A
  • Mitigation of Other Attacks: N/A

Approved algorithms

AlgorithmCAVP certificate
AESA2305
CKGvendor affirmed
DRBGA2305
DSAA2305
ECDSAA2305
HMACA2305
RSAA2305
SHSA2305
Triple-DESA2305

Tested configurations

  • CentOS 7.9 running on a HPE ProLiant DL360 G7 with an Intel Xeon X5670 with PAA
  • CentOS 7.9 running on a HPE ProLiant DL360 G7 with an Intel Xeon X5670 without PAA
  • Free BSD 13.1 running on an XRI-400 with an Intel Atom E3940 with PAA
  • Free BSD 13.1 running on an XRI-400 with an Intel Atom E3940 without PAA
  • macOS 12 (Monterey) running on an Apple Mac Mini 9,1 with an Apple M1
  • Windows Server 2012 R2 running on a Dell PowerEdge R420 with an Intel Xeon E5-2430 with PAA
  • Windows Server 2012 R2 running on a Dell PowerEdge R420 with an Intel Xeon E5-2430 without PAA (single-user mode)

Validation history

DateTypeLab
2023-11-27InitialLeidos Accredited Testing & Evaluation (AT&E) Lab

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status active
  • Validation dates on record: 2023-11-27

Source documents