NetApp Cryptographic Security Module
Caveat: When operated in FIPS mode. No assurance of the minimum strength of generated keys.
Certificate
| Certificate number | 4838 |
|---|---|
| Standard | FIPS 140-2 |
| Status | active |
| Sunset date | 2026-09-21 |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | NetApp, Inc. · website |
| Software versions | 3.0.8 |
Module description
The NetApp Cryptographic Security Module is a software library that provides cryptographic services to a vast array of NetApp's storage and networking products.
Security level exceptions
- Physical Security: N/A
- Design Assurance: Level 3
Approved algorithms
| Algorithm | CAVP certificate |
|---|---|
| AES | A4858 |
| CKG | vendor affirmed |
| CVL | A4858 |
| DRBG | A4858 |
| DSA | A4858 |
| ECDSA | A4858 |
| HMAC | A4858 |
| KAS-RSA-SSC | A4858 |
| KAS-SSC | A4858 |
| KBKDF | A4858 |
| KDA | A4858 |
| KMAC | A4858 |
| KTS | |
| KTS | |
| KTS | |
| KTS | |
| KTS-RSA | |
| PBKDF | A4858 |
| RSA | A4858 |
| SHA-3 | A4858 |
| SHS | A4858 |
| Triple-DES | A4858 |
Tested configurations
- (Single User Mode)
- ONTAP 9.14.1 running on a NetApp AFF A150 Intel Xeon D-1557 without PAA
- ONTAP 9.14.1 running on a NetApp AFF A150 with an Intel Xeon D-1557 with PAA (AES-NI)
- ONTAP 9.14.1 running on a NetApp AFF A320 Intel Xeon Silver 4114 with PAA (AES-NI)
- ONTAP 9.14.1 running on a NetApp AFF A320 Intel Xeon Silver 4114 without PAA
- ONTAP 9.14.1 running on a NetApp AFF A400 Intel Xeon Silver 4210 with PAA (AES-NI)
- ONTAP 9.14.1 running on a NetApp AFF A400 Intel Xeon Silver 4210 without PAA
- ONTAP 9.14.1 running on a NetApp AFF C250 Intel Xeon D-2164IT with PAA (AES-NI)
- ONTAP 9.14.1 running on a NetApp AFF C250 Intel Xeon D-2164IT without PAA
- ONTAP 9.14.1 running on a NetApp FAS2820 Intel Xeon D-1735TR with PAA (AES-NI)
- ONTAP 9.14.1 running on a NetApp FAS2820 Intel Xeon D-1735TR without PAA
- ONTAP 9.14.1 running on a NetApp FAS9500 Intel Xeon Platinum 8352Y with PAA (AES-NI)
- ONTAP 9.14.1 running on a NetApp FAS9500 Intel Xeon Platinum 8352Y without PAA
- StorageGRID 11.8 running on a NetApp SG110 Intel Xeon Silver 4310 with PAA (AES-NI)
- StorageGRID 11.8 running on a NetApp SG110 Intel Xeon Silver 4310 without PAA
- StorageGRID 11.8 running on a NetApp SG5812 Intel Xeon D-1735TR with PAA (AES-NI)
- StorageGRID 11.8 running on a NetApp SG5812 Intel Xeon D-1735TR without PAA
- StorageGRID 11.8 running on a NetApp SG6160 Intel Xeon Gold 5318Y with PAA (AES-NI)
- StorageGRID 11.8 running on a NetApp SG6160 Intel Xeon Gold 5318Y without PAA
Validation history
| Date | Type | Lab |
|---|---|---|
| 2024-10-16 | Initial | Acumen Security |
| 2024-11-14 | Update | Lightship Security, Inc. |
| 2026-01-20 | Update | Lightship Security, Inc. |
| 2026-04-22 | Update | Lightship Security, Inc. |
| 2026-05-19 | Update | Lightship Security, Inc. |
| 2026-07-28 | Update | Lightship Security, Inc. |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status active
- Validation dates on record: 2024-10-16, 2024-11-14, 2026-01-20, 2026-04-22, 2026-05-19, 2026-07-28