808bits

Palo Alto Networks Core Crypto Module

FIPS 140-3 certificate #4741 · Palo Alto Networks, Inc. · data as of 2026-10-21

Palo Alto Networks Core Crypto Module, from Palo Alto Networks, Inc., holds FIPS 140-3 certificate #4741 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Replaced by certificate #5401. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: Interim validation. When installed, initialized and configured as specified in Section 11 of the Security Policy. The module generates SSPs (e.g., keys) whose strengths are modified by available entropy

Certificate

Certificate number4741
StandardFIPS 140-3
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorPalo Alto Networks, Inc. · website
Software versions1.0 [1] and 1.1 [2]

Module description

Quoted from the NIST CMVP entry for this certificate.

The Palo Alto Networks Core Crypto Module is a software cryptographic module that can run on various environments.

Security level exceptions

  • Physical security: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A

Approved algorithms (26)

AlgorithmCAVP certificates
AES-CBCA4206, A4207
AES-GCMA4206, A4207
Conditioning Component AES-CBC-MAC SP800-90BA1791, A2138, A2153, A2165, A2518, A2541
Counter DRBGA4206, A4207
ECDSA KeyGen (FIPS186-4)A4206, A4207
ECDSA KeyVer (FIPS186-4)A4206, A4207
ECDSA SigGen (FIPS186-4)A4206, A4207
ECDSA SigVer (FIPS186-4)A4206, A4207
HMAC-SHA-1A4206, A4207
HMAC-SHA2-224A4206, A4207
HMAC-SHA2-256A4206, A4207
HMAC-SHA2-384A4206, A4207
HMAC-SHA2-512A4206, A4207
KAS-ECC-SSC Sp800-56Ar3A4206, A4207
KAS-FFC-SSC Sp800-56Ar3A4206, A4207
RSA KeyGen (FIPS186-4)A4206
RSA SigGen (FIPS186-4)A4206, A4207
RSA SigVer (FIPS186-4)A4206, A4207
Safe Primes Key GenerationA4206, A4207
Safe Primes Key VerificationA4206, A4207
SHA-1A4206, A4207
SHA2-224A4206, A4207
SHA2-256A4206, A4207
SHA2-384A4206, A4207
SHA2-512A4206, A4207
TLS v1.2 KDF RFC7627A4206, A4207

Tested configurations

  • Panorama 10.2 running on a M-200 with an Intel Xeon E5-2620 V4 [1]
  • Panorama 10.2 running on a M-300 with an Intel Xeon 4310 [1]
  • Panorama 10.2 running on a M-600 with an Intel Xeon E5-2680 V4 [1]
  • Panorama 10.2 running on a M-700 with an Intel Xeon 4316 [1]
  • Panorama 10.2 with KVM on Ubuntu 20.04 running on a Dell PowerEdge R740 with an Intel Gold 6248 [1]
  • Panorama 10.2 with Microsoft Hyper-V Server 2019 running on a Dell PowerEdge R740 with an Intel Gold 6248 [1]
  • Panorama 10.2 with VMware ESXi v7.0 running on a Dell PowerEdge R740 with an Intel Gold 6248 [1]
  • Panorama 11.0 running on a M-200 with an Intel Xeon E5-2620 V4 [1]
  • Panorama 11.0 running on a M-300 with an Intel Xeon 4310 [1]
  • Panorama 11.0 running on a M-600 with an Intel Xeon E5-2680 V4 [1]
  • Panorama 11.0 running on a M-700 with an Intel Xeon 4316 [1]
  • Panorama 11.0 with KVM on Ubuntu 20.04 running on a Dell PowerEdge R740 with an Intel Gold 6248 [1]
  • Panorama 11.0 with Microsoft Hyper-V Server 2019 running on a Dell PowerEdge R740 with an Intel Gold 6248 [1]
  • Panorama 11.0 with VMware ESXi v7.0 running on a Dell PowerEdge R740 with an Intel Gold 6248 [1]
  • Panorama 11.1 running on a M-200 with an Intel Xeon E5-2620 V4 [1]
  • Panorama 11.1 running on a M-300 with an Intel Xeon 4310 [1]
  • Panorama 11.1 running on a M-600 with an Intel Xeon E5-2680 V4 [1]
  • Panorama 11.1 running on a M-700 with an Intel Xeon 4316 [1]
  • Panorama 11.1 with KVM on Ubuntu 20.04 running on a Dell PowerEdge R740 with an Intel Gold 6248 [1]
  • Panorama 11.1 with Microsoft Hyper-V Server 2019 running on a Dell PowerEdge R740 with an Intel Gold 6248 [1]
  • Panorama 11.1 with VMware ESXi v7.0 running on a Dell PowerEdge R740 with an Intel Gold 6248 [1]
  • Panorama 11.2 running on a M-200 with an Intel Xeon E5-2620 V4 [1]
  • Panorama 11.2 running on a M-300 with an Intel Xeon 4310 [1]
  • Panorama 11.2 running on a M-600 with an Intel Xeon E5-2680 V4 [1]
  • Panorama 11.2 running on a M-700 with an Intel Xeon 4316 [1]
  • Panorama 11.2 with KVM on Ubuntu 20.04 running on a Dell PowerEdge R740 with an Intel Gold 6248 [1]
  • Panorama 11.2 with Microsoft Hyper-V Server 2019 running on a Dell PowerEdge R740 with an Intel Gold 6248 [1]
  • Panorama 11.2 with VMware ESXi v7.0 running on a Dell PowerEdge R740 with an Intel Gold 6248 [1]
  • PAN-OS 10.2 running on a PA-220 with an Marvell CN7130 [1]
  • PAN-OS 10.2 running on a PA-220R with an Marvell CN7130 [1]
  • PAN-OS 10.2 running on a PA-3220 with an Intel Pentium D1517 / CN7350 [1]
  • PAN-OS 10.2 running on a PA-3250 with an Intel Pentium D1517 / CN7350 [1]
  • PAN-OS 10.2 running on a PA-3260 with an Intel Pentium D1517 / CN7360 [1]
  • PAN-OS 10.2 running on a PA-3410 with an Intel Atom P5332 [1]
  • PAN-OS 10.2 running on a PA-3420 with an Intel Atom P5342 [1]
  • PAN-OS 10.2 running on a PA-3430 with an Intel Atom P5352 [1]
  • PAN-OS 10.2 running on a PA-3440 with an Intel Atom P5362 [1]
  • PAN-OS 10.2 running on a PA-410 with an Intel Denverton C3436L [1]
  • PAN-OS 10.2 running on a PA-440 with an Intel Denverton C3558R [1]
  • PAN-OS 10.2 running on a PA-450 with an Intel Denverton C3758R [1]
  • PAN-OS 10.2 running on a PA-460 with an Intel Denverton C3758R [1]
  • PAN-OS 10.2 running on a PA-5220 with an Intel Xeon D-1548 / CN7885 [1]
  • PAN-OS 10.2 running on a PA-5250 with an Intel Xeon D-1567 / CN7890 [1]
  • PAN-OS 10.2 running on a PA-5260 with an Intel Xeon D-1567 / CN7890 [1]
  • PAN-OS 10.2 running on a PA-5280 with an Intel Xeon D-1567 / CN7890 [1]
  • PAN-OS 10.2 running on a PA-5410 with an AMD EPYC 7352 [2]
  • PAN-OS 10.2 running on a PA-5420 with an AMD EPYC 7452 [2]
  • PAN-OS 10.2 running on a PA-5430 with an AMD EPYC 7642 [2]
  • PAN-OS 10.2 running on a PA-5450 with an Intel Xeon D-2187NT [1]
  • PAN-OS 10.2 running on a PA-7050 with an Intel Xeon D-1567 / CN7890 [1]
  • PAN-OS 10.2 running on a PA-7080 with an Intel Xeon D-1567 / CN7890 [1]
  • PAN-OS 10.2 running on a PA-820 with an Marvell CN7240 [1]
  • PAN-OS 10.2 running on a PA-850 with an Marvell CN7240 [1]
  • PAN-OS 10.2 with KVM on Ubuntu 20.04 running on a Dell PowerEdge R740 with an Intel Gold 6248 [1]
  • PAN-OS 10.2 with Microsoft Hyper-V Server 2019 running on a Dell PowerEdge R740 with an Intel Gold 6248 [1]
  • PAN-OS 10.2 with VMware ESXi v7.0 running on a Dell PowerEdge R740 with an Intel Gold 6248 [1]
  • PAN-OS 11.0 running on a PA-1410 with an Intel Atom C5325 [1]
  • PAN-OS 11.0 running on a PA-1420 with an Intel Atom C5325C1 [1]
  • PAN-OS 11.0 running on a PA-3220 with an Intel Pentium D1517 / CN7350 [1]
  • PAN-OS 11.0 running on a PA-3250 with an Intel Pentium D1517 / CN7350 [1]
  • PAN-OS 11.0 running on a PA-3260 with an Intel Pentium D1517 / CN7360 [1]
  • PAN-OS 11.0 running on a PA-3410 with an Intel Atom P5332 [1]
  • PAN-OS 11.0 running on a PA-3420 with an Intel Atom P5342 [1]
  • PAN-OS 11.0 running on a PA-3430 with an Intel Atom P5352 [1]
  • PAN-OS 11.0 running on a PA-3440 with an Intel Atom P5362 [1]
  • PAN-OS 11.0 running on a PA-410 with an Intel Denverton C3436L [1]
  • PAN-OS 11.0 running on a PA-415 with an Intel Denverton C3436L [1]
  • PAN-OS 11.0 running on a PA-440 with an Intel Denverton C3558R [1]
  • PAN-OS 11.0 running on a PA-445 with an Intel Denverton C3558R [1]
  • PAN-OS 11.0 running on a PA-450 with an Intel Denverton C3758R [1]
  • PAN-OS 11.0 running on a PA-460 with an Intel Denverton C3758R [1]
  • PAN-OS 11.0 running on a PA-5220 with an Intel Xeon D-1548 / CN7885 [1]
  • PAN-OS 11.0 running on a PA-5250 with an Intel Xeon D-1567 / CN7890 [1]
  • PAN-OS 11.0 running on a PA-5260 with an Intel Xeon D-1567 / CN7890 [1]
  • PAN-OS 11.0 running on a PA-5280 with an Intel Xeon D-1567 / CN7890 [1]
  • PAN-OS 11.0 running on a PA-5410 with an AMD EPYC 7352 [2]
  • PAN-OS 11.0 running on a PA-5420 with an AMD EPYC 7452 [2]
  • PAN-OS 11.0 running on a PA-5430 with an AMD EPYC 7642 [2]
  • PAN-OS 11.0 running on a PA-5440 with an AMD EPYC 7742 [2]
  • PAN-OS 11.0 running on a PA-5450 with an Intel Xeon D-2187NT [1]
  • PAN-OS 11.0 running on a PA-7050 with an Intel Xeon D-1567 / CN7890 [1]
  • PAN-OS 11.0 running on a PA-7080 with an Intel Xeon D-1567 / CN7890 [1]
  • PAN-OS 11.0 running on a PA-820 with an Marvell CN7240 [1]
  • PAN-OS 11.0 running on a PA-850 with an Marvell CN7240 [1]
  • PAN-OS 11.0 with KVM on Ubuntu 20.04 running on a Dell PowerEdge R740 with an Intel Gold 6248 [1]
  • PAN-OS 11.0 with Microsoft Hyper-V Server 2019 running on a Dell PowerEdge R740 with an Intel Gold 6248 [1]
  • PAN-OS 11.0 with VMware ESXi v7.0 running on a Dell PowerEdge R740 with an Intel Gold 6248 [1]
  • PAN-OS 11.1 running on a PA-1410 with an Intel Atom C5325 [1]
  • PAN-OS 11.1 running on a PA-3250 with an Intel Pentium D1517 / CN7350 [1]
  • PAN-OS 11.1 running on a PA-3410 with an Intel Atom P5332 [1]
  • PAN-OS 11.1 running on a PA-460 with an Intel Denverton C3758R [1]
  • PAN-OS 11.1 running on a PA-5250 with an Intel Xeon D-1567 / CN7890 [1]
  • PAN-OS 11.1 running on a PA-5410 with an AMD EPYC 7352 [2]
  • PAN-OS 11.1 running on a PA-5440 with an AMD EPYC 7742 [2]
  • PAN-OS 11.1 running on a PA-5450 with an Intel Xeon D-2187NT [1]
  • PAN-OS 11.1 running on a PA-7080 with an Intel Xeon D-1567 / CN7890 [1]
  • PAN-OS 11.1 running on a PA-7500 with an Intel Atom P5752 / Intel Xeon D-2798NX / Intel Denverton C3758R [1]
  • PAN-OS 11.1 running on a PA-850 with a Marvell CN7240 [1]
  • PAN-OS 11.1 with KVM on Ubuntu 20.04 running on a Dell PowerEdge R740 with an Intel Gold 6248 [1]
  • PAN-OS 11.1 with Microsoft Hyper-V Server 2019 running on a Dell PowerEdge R740 with an Intel Gold 6248 [1]
  • PAN-OS 11.1 with VMware ESXi v7.0 running on a Dell PowerEdge R740 with an Intel Gold 6248 [1]
  • PAN-OS 11.2 running on a PA-1410 with an Intel Atom C5325 [1]
  • PAN-OS 11.2 running on a PA-3410 with an Intel Atom P5332 [1]
  • PAN-OS 11.2 running on a PA-460 with an Intel Denverton C3758R [1]
  • PAN-OS 11.2 running on a PA-5250 with an Intel Xeon D-1567 / CN7890 [1]
  • PAN-OS 11.2 running on a PA-5410 with an AMD EPYC 7352 [2]
  • PAN-OS 11.2 running on a PA-5440 with an AMD EPYC 7742 [2]
  • PAN-OS 11.2 running on a PA-5450 with an Intel Xeon D-2187NT [1]
  • PAN-OS 11.2 running on a PA-7080 with an Intel Xeon D-1567 / CN7890 [1]
  • PAN-OS 11.2 with KVM on Ubuntu 20.04 running on a Dell PowerEdge R740 with an Intel Gold 6248 [1]
  • PAN-OS 11.2 with Microsoft Hyper-V Server 2019 running on a Dell PowerEdge R740 with an Intel Gold 6248 [1]
  • PAN-OS 11.2 with VMware ESXi v7.0 running on a Dell PowerEdge R740 with an Intel Gold 6248 [1]
  • WildFire 10.2 running on a WF-500 with an Intel Xeon E5-2620 [1]
  • WildFire 10.2 running on a WF-500-B with an Intel Xeon 4316 [1]
  • WildFire 11.0 running on a WF-500 with an Intel Xeon E5-2620 [1]
  • WildFire 11.0 running on a WF-500-B with an Intel Xeon 4316 [1]
  • WildFire 11.1 running on a WF-500 with an Intel Xeon E5-2620 [1]
  • WildFire 11.1 running on a WF-500-B with an Intel Xeon 4316 [1]
  • WildFire 11.2 running on a WF-500 with an Intel Xeon E5-2620 [1]
  • WildFire 11.2 running on a WF-500-B with an Intel Xeon 4316 [1]

Validation history

DateTypeLab
2024-07-26InitialLeidos Accredited Testing & Evaluation (AT&E) Lab
2025-09-15UpdateLeidos Accredited Testing & Evaluation (AT&E) Lab
2026-01-07UpdateLeidos Accredited Testing & Evaluation (AT&E) Lab

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2024-07-26

Source documents