808bits

Bootloader Module

FIPS 140-3 certificate #4921 · Hewlett Packard Enterprise · data as of 2026-08-28
Active. Sunset date 2026-12-17, 110 days away.
Caveat: Interim validation

Certificate

Certificate number4921
StandardFIPS 140-3
Statusactive
Sunset date2026-12-17
Overall level1
Module typeFirmware
EmbodimentMulti-Chip Stand Alone
VendorHewlett Packard Enterprise · website
Firmware versions1.0

Module description

The Aruba Bootloader Module is preloaded and shipped with Aruba devices: Mobility Controllers, Gateways, Appliances, or Access Points. The module checks the OS image integrity and authenticity. It then boots the ArubaOS operating system, for either hardware-based equipment or virtual appliances.

Security level exceptions

  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A

Approved algorithms

AlgorithmCAVP certificate
RSA SigVer (FIPS186-4)A2688
SHA2-256A2688

Tested configurations

  • Linux Kernel 2.6.35 running on Mobility Controllers 7220 with a Broadcom XLP (MIPS64)
  • Linux Kernel 3.18 running on Aruba Mobility Conductor Hardware Appliances MCR-HW-5K with an Intel Xeon E5 (Broadwell) with PAA
  • Linux Kernel 4.1.45 running on an AP-51x with a Broadcom BCM (64-bit ARMv8)
  • Linux Kernel 4.14 running on 9004 Gateways with an Intel Atom C3508 (Denverton)
  • Linux Kernel 4.4.60 running on an AP-63x with a Qualcomm IPQ (64-bit ARM Cortex A53)
  • Linux Kernel 4.4.60 running on an AP-655 with a Qualcomm IPQ (64-bit ARM Cortex A53)
  • Linux Kernel 4.4.60 running on AP-53x, AP-555, and AP-58x with a Qualcomm IPQ (64-bit ARM Cortex A53)
  • VMWare ESXi 6.5 running on Aruba Mobility Controller Virtual Appliances MC-VA-50 on HPE ProLiant ML110 Gen10 with an Intel Xeon (Cascade Lake) with PAA
  • VMWare ESXi 6.5 running on Aruba Mobility Controller Virtual Appliances MC-VA-50 on HPE ProLiant ML110 Gen10 with an Intel Xeon (Cascade Lake) without PAA

Validation history

DateTypeLab
2024-12-18InitialLightship Security, Inc.
2026-04-03UpdateLightship Security, Inc.

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status active
  • Validation dates on record: 2024-12-18

Source documents