808bits

Cryptographic Module for BIG-IP

FIPS 140-3 certificate #4895 · F5, Inc. · data as of 2026-10-09

Cryptographic Module for BIG-IP, from F5, Inc., holds FIPS 140-3 certificate #4895 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Replaced by certificate #5487. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: Interim validation. When operated in approved mode. When installed, initialized and configured as specified in Section 11.1 of the Security Policy.

Certificate

Certificate number4895
StandardFIPS 140-3
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorF5, Inc.
Software versions1.0.2za-fips
Hardware versionsN/A
Firmware versionsN/A

Module description

Quoted from the NIST CMVP entry for this certificate.

Cryptographic library offering various cryptographic mechanisms to BIG-IP Virtual Edition.

Security level exceptions

  • Physical security: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A

Approved algorithms (25)

AlgorithmCAVP certificates
AES-CBCA3947, A3948
AES-CTRA3947
AES-ECBA3947, A3948
AES-GCMA3947, A3948
AES-GMACA3947, A3948
Counter DRBGA3947, A3948
ECDSA KeyGen (FIPS186-4)A3947
ECDSA KeyVer (FIPS186-4)A3947
ECDSA SigGen (FIPS186-4)A3947
ECDSA SigVer (FIPS186-4)A3947
HMAC-SHA-1A3947, A3948
HMAC-SHA2-256A3947
HMAC-SHA2-384A3947
KAS-ECC-SSC Sp800-56Ar3A3947
KAS-FFC-SSC Sp800-56Ar3A3947
KDF SSHA3947
KDF TLSA3947
RSA KeyGen (FIPS186-4)A3947
RSA SigGen (FIPS186-4)A3947
RSA SigVer (FIPS186-4)A3947
Safe Primes Key GenerationA3947
SHA-1A3947, A3948
SHA2-256A3947
SHA2-384A3947
TLS v1.2 KDF RFC7627A3947

Tested configurations

  • BIG-IP 17.1.0.1 on Hyper-V version 10.0.20348.1 on Windows Server 2022 Standard running on Dell PowerEdge R450 with an Intel® Xeon® Silver Ice Lake 4309Y with PAA
  • BIG-IP 17.1.0.1 on Hyper-V version 10.0.20348.1 on Windows Server 2022 Standard running on Dell PowerEdge R450 with an Intel® Xeon® Silver Ice Lake 4309Y without PAA
  • BIG-IP 17.1.0.1 on KVM on Ubuntu 22.04.1 LTS running on Dell PowerEdge R450 with an Intel® Xeon® Silver Ice Lake 4309Y with PAA
  • BIG-IP 17.1.0.1 on KVM on Ubuntu 22.04.1 LTS running on Dell PowerEdge R450 with an Intel® Xeon® Silver Ice Lake 4309Y without PAA.
  • BIG-IP 17.1.0.1 on VMware ESXi™ 8.0.0.10100 (Build: 20920323) running on Dell PowerEdge R650 with an Intel® Xeon® Gold Ice Lake 6330N with PAA
  • BIG-IP 17.1.0.1 on VMware ESXi™ 8.0.0.10100 (Build: 20920323) running on Dell PowerEdge R650 with an Intel® Xeon® Gold Ice Lake 6330N without PAA

Validation history

DateTypeLab
2024-11-21Initialatsec information security corporation

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2024-11-21

Source documents