808bits

Firepower Management Center Virtual VMware Cryptographic Module

FIPS 140-3 certificate #4710 · Cisco Systems, Inc. · data as of 2026-08-28
Historical. Replaced by certificate #5386. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: Interim Validation. When installed, initialized and configured as specified in section "Secure Operation" of the Security Policy and operated in approved mode. No assurance of the minimum strength of generated SSPs (e.g., keys)

Certificate

Certificate number4710
StandardFIPS 140-3
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorCisco Systems, Inc. · website
Software versions7.0.5

Module description

Cisco FMCv Module provides complete and unified management over firewalls, application control, intrusion prevention, URL filtering, and advanced malware protection. Delivering in-depth analysis, streamlined security management across the network and cloud, and accelerated incident investigation and response, working across Cisco and third-party technologies.

Security level exceptions

  • Physical security: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A

Approved algorithms

AlgorithmCAVP certificate
AES-CBCA2952
AES-CBCA3376
AES-GCMA2952
AES-GCMA3376
Counter DRBGA2952
Counter DRBGA3376
ECDSA KeyGen (FIPS186-4)A2952
ECDSA KeyGen (FIPS186-4)A3376
ECDSA KeyVer (FIPS186-4)A2952
ECDSA KeyVer (FIPS186-4)A3376
ECDSA SigGen (FIPS186-4)A2952
ECDSA SigGen (FIPS186-4)A3376
ECDSA SigVer (FIPS186-4)A2952
ECDSA SigVer (FIPS186-4)A3376
HMAC-SHA-1A2952
HMAC-SHA-1A3376
HMAC-SHA2-256A2952
HMAC-SHA2-256A3376
HMAC-SHA2-384A2952
HMAC-SHA2-384A3376
HMAC-SHA2-512A2952
HMAC-SHA2-512A3376
KDF SSHA2952
KDF SSHA3376
RSA KeyGen (FIPS186-4)A2952
RSA KeyGen (FIPS186-4)A3376
RSA SigGen (FIPS186-4)A2952
RSA SigGen (FIPS186-4)A3376
RSA SigVer (FIPS186-4)A2952
RSA SigVer (FIPS186-4)A3376
Safe Primes Key GenerationA2952
Safe Primes Key GenerationA3376
SHA-1A2952
SHA-1A3376
SHA2-256A2952
SHA2-256A3376
SHA2-384A2952
SHA2-384A3376
SHA2-512A2952
SHA2-512A3376
TLS v1.2 KDF RFC7627A2952
TLS v1.2 KDF RFC7627A3376

Tested configurations

  • Linux 4 (FX-OS) on VMware ESXi 6.7 running on UCS C220 M5 SFF Server with Intel Xeon Gold 6128 (Skylake) with PAA
  • Linux 4 (FX-OS) on VMware ESXi 6.7 running on UCS C220 M5 SFF Server with Intel Xeon Gold 6128 (Skylake) without PAA
  • Linux 4 (FX-OS) on VMware ESXi 7.0 running on UCS C220 M5 SFF Server with Intel Xeon Gold 6128 (Skylake) with PAA
  • Linux 4 (FX-OS) on VMware ESXi 7.0 running on UCS C220 M5 SFF Server with Intel Xeon Gold 6128 (Skylake) without PAA

Validation history

DateTypeLab
2024-06-17InitialGossamer Security Solutions

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2024-06-17

Source documents