808bits

NetApp CryptoMod

FIPS 140-3 certificate #4731 · NetApp, Inc. · data as of 2026-08-28
Historical. Replaced by certificate #5271. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: Interim validation. When installed, initialized and configured as specified in section 11 of the Security Policy

Certificate

Certificate number4731
StandardFIPS 140-3
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorNetApp, Inc. · website
Software versions3.0

Module description

NetApp CryptoMod is a software cryptographic module whose purpose is to provide encryption/decryption services for NetApp’s ONTAP Operating System (OS) kernel. The CryptoMod module makes use of the AES-NI instruction set in Intel processors. Since CryptoMod can support non-PAA implementations as well as PAA implementations of the pertinent cryptographic algorithms, CryptoMod is designated as a software-only cryptographic module.

Security level exceptions

  • Physical security: N/A
  • Mitigation of other attacks: N/A

Approved algorithms

AlgorithmCAVP certificate
AES-CBCA2640
AES-CCMA2640
AES-CMACA2640
AES-ECBA2640
AES-GCMA2640
AES-GMACA2640
AES-KWPA2640
AES-XTS Testing Revision 2.0A2640
Counter DRBGA2640
HMAC-SHA-1A2640
HMAC-SHA2-256A2640
HMAC-SHA2-512A2640
KDF SP800-108A2640
PBKDFA2640
SHA-1A2640
SHA2-256A2640
SHA2-512A2640
SHA3-256A2640

Tested configurations

  • ONTAP 9.11.1 running on AFF A250 system with an Intel Xeon D-2164IT with PAA
  • ONTAP 9.11.1 running on AFF A250 system with an Intel Xeon D-2164IT without PAA
  • ONTAP 9.11.1 running on AFF A400 system with an Intel Xeon Silver 4210 with PAA
  • ONTAP 9.11.1 running on AFF A400 system with an Intel Xeon Silver 4210 without PAA
  • ONTAP 9.11.1 running on AFF A900 system with an Intel Xeon Platinum 8352Y with PAA
  • ONTAP 9.11.1 running on AFF A900 system with an Intel Xeon Platinum 8352Y without PAA

Validation history

DateTypeLab
2024-07-19InitialLightship Security, Inc.
2026-03-06UpdateLightship Security, Inc.

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2024-07-19

Source documents