Bootloader Module
Caveat: Interim validation
Certificate
| Certificate number | 4921 |
|---|---|
| Standard | FIPS 140-3 |
| Status | active |
| Sunset date | 2026-12-17 |
| Overall level | 1 |
| Module type | Firmware |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | Hewlett Packard Enterprise · website |
| Firmware versions | 1.0 |
Module description
The Aruba Bootloader Module is preloaded and shipped with Aruba devices: Mobility Controllers, Gateways, Appliances, or Access Points. The module checks the OS image integrity and authenticity. It then boots the ArubaOS operating system, for either hardware-based equipment or virtual appliances.
Security level exceptions
- Non-invasive security: N/A
- Mitigation of other attacks: N/A
Approved algorithms
Tested configurations
- Linux Kernel 2.6.35 running on Mobility Controllers 7220 with a Broadcom XLP (MIPS64)
- Linux Kernel 3.18 running on Aruba Mobility Conductor Hardware Appliances MCR-HW-5K with an Intel Xeon E5 (Broadwell) with PAA
- Linux Kernel 4.1.45 running on an AP-51x with a Broadcom BCM (64-bit ARMv8)
- Linux Kernel 4.14 running on 9004 Gateways with an Intel Atom C3508 (Denverton)
- Linux Kernel 4.4.60 running on an AP-63x with a Qualcomm IPQ (64-bit ARM Cortex A53)
- Linux Kernel 4.4.60 running on an AP-655 with a Qualcomm IPQ (64-bit ARM Cortex A53)
- Linux Kernel 4.4.60 running on AP-53x, AP-555, and AP-58x with a Qualcomm IPQ (64-bit ARM Cortex A53)
- VMWare ESXi 6.5 running on Aruba Mobility Controller Virtual Appliances MC-VA-50 on HPE ProLiant ML110 Gen10 with an Intel Xeon (Cascade Lake) with PAA
- VMWare ESXi 6.5 running on Aruba Mobility Controller Virtual Appliances MC-VA-50 on HPE ProLiant ML110 Gen10 with an Intel Xeon (Cascade Lake) without PAA
Validation history
| Date | Type | Lab |
|---|---|---|
| 2024-12-18 | Initial | Lightship Security, Inc. |
| 2026-04-03 | Update | Lightship Security, Inc. |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status active
- Validation dates on record: 2024-12-18