808bits

NetApp CryptoMod

FIPS 140-3 certificate #4731 · NetApp, Inc. · data as of 2026-10-21

NetApp CryptoMod, from NetApp, Inc., holds FIPS 140-3 certificate #4731 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Replaced by certificate #5271. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: Interim validation. When installed, initialized and configured as specified in section 11 of the Security Policy

Certificate

Certificate number4731
StandardFIPS 140-3
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorNetApp, Inc. · website
Software versions3.0

Module description

Quoted from the NIST CMVP entry for this certificate.

NetApp CryptoMod is a software cryptographic module whose purpose is to provide encryption/decryption services for NetApp’s ONTAP Operating System (OS) kernel. The CryptoMod module makes use of the AES-NI instruction set in Intel processors. Since CryptoMod can support non-PAA implementations as well as PAA implementations of the pertinent cryptographic algorithms, CryptoMod is designated as a software-only cryptographic module.

Security level exceptions

  • Physical security: N/A
  • Mitigation of other attacks: N/A

Approved algorithms (18)

AlgorithmCAVP certificates
AES-CBCA2640
AES-CCMA2640
AES-CMACA2640
AES-ECBA2640
AES-GCMA2640
AES-GMACA2640
AES-KWPA2640
AES-XTS Testing Revision 2.0A2640
Counter DRBGA2640
HMAC-SHA-1A2640
HMAC-SHA2-256A2640
HMAC-SHA2-512A2640
KDF SP800-108A2640
PBKDFA2640
SHA-1A2640
SHA2-256A2640
SHA2-512A2640
SHA3-256A2640

Tested configurations

  • ONTAP 9.11.1 running on AFF A250 system with an Intel Xeon D-2164IT with PAA
  • ONTAP 9.11.1 running on AFF A250 system with an Intel Xeon D-2164IT without PAA
  • ONTAP 9.11.1 running on AFF A400 system with an Intel Xeon Silver 4210 with PAA
  • ONTAP 9.11.1 running on AFF A400 system with an Intel Xeon Silver 4210 without PAA
  • ONTAP 9.11.1 running on AFF A900 system with an Intel Xeon Platinum 8352Y with PAA
  • ONTAP 9.11.1 running on AFF A900 system with an Intel Xeon Platinum 8352Y without PAA

Validation history

DateTypeLab
2024-07-19InitialLightship Security, Inc.
2026-03-06UpdateLightship Security, Inc.

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2024-07-19

Source documents