Aruba Crypto Module
Caveat: Interim validation. When operated in Approved mode with module Aruba OpenSSL Module validated to FIPS 140-3 under Cert. #4929 operating in Approved mode.
Certificate
| Certificate number | 4940 |
|---|---|
| Standard | FIPS 140-3 |
| Status | active |
| Sunset date | 2027-01-08 |
| Overall level | 1 |
| Module type | Firmware |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | Hewlett Packard Enterprise · website |
| Firmware versions | 1.0 |
Module description
The Aruba Crypto Module is an Hewlett Packard Enterprise cryptographic module that provides cryptographic services for the ArubaOS operating system running on the Hewlett Packard Enterprise hardware-based equipment or Hewlett Packard Enterprise virtual appliances.
Security level exceptions
- Non-invasive security: N/A
- Mitigation of other attacks: N/A
Approved algorithms
| Algorithm | CAVP certificate |
|---|---|
| AES-CBC | A2689 |
| AES-CTR | A2689 |
| AES-GCM | A2689 |
| DSA KeyGen (FIPS186-4) | A2689 |
| DSA PQGGen (FIPS186-4) | A2689 |
| ECDSA KeyGen (FIPS186-4) | A2689 |
| ECDSA KeyVer (FIPS186-4) | A2689 |
| ECDSA SigGen (FIPS186-4) | A2689 |
| ECDSA SigVer (FIPS186-4) | A2689 |
| HMAC-SHA-1 | A2689 |
| HMAC-SHA2-256 | A2689 |
| HMAC-SHA2-384 | A2689 |
| HMAC-SHA2-512 | A2689 |
| KAS-ECC-SSC Sp800-56Ar3 | A2689 |
| KAS-FFC-SSC Sp800-56Ar3 | A2689 |
| KDF IKEv2 | A2689 |
| RSA KeyGen (FIPS186-4) | A2689 |
| RSA SigGen (FIPS186-4) | A2689 |
| RSA Signature Primitive | A2689 |
| RSA SigVer (FIPS186-2) | A2689 |
| RSA SigVer (FIPS186-4) | A2689 |
| SHA-1 | A2689 |
| SHA2-256 | A2689 |
| SHA2-384 | A2689 |
| SHA2-512 | A2689 |
Tested configurations
- ArubaOS 8.10 on VMWare ESXi 7.0 running on MC-VA-50 Mobility Controller Virtual Appliance on HPE ProLiant ML110 Gen10 with Intel Xeon Silver 4210 (Cascade Lake) with PAA
- ArubaOS 8.10 on VMWare ESXi 7.0 running on MC-VA-50 Mobility Controller Virtual Appliance on HPE ProLiant ML110 Gen10 with Intel Xeon Silver 4210 (Cascade Lake) without PAA"
- ArubaOS 8.10 running on 7220 Mobility Controller with Broadcom XLP432 (MIPS64) without PAA
- ArubaOS 8.10 running on 9012 Gateway with Intel Atom C3508 (Denverton) without PAA
- ArubaOS 8.10 running on AP-515 Wireless Access Point with Broadcom BCM (64-bit ARMv8) without PAA
- ArubaOS 8.10 running on AP-535 Wireless Access Point with Qualcomm IPQ (64-bit ARM Cortex A53) without PAA
- ArubaOS 8.10 running on AP-635 Wireless Access Point with Qualcomm IPQ (64-bit ARM Cortex A53) without PAA
- ArubaOS 8.10 running on AP-655 Wireless Access Point with Qualcomm IPQ (64-bit ARM Cortex A53) without PAA
- ArubaOS 8.10 running on MCR-HW-5K Mobility Conductor Hardware Appliance with Intel Xeon E5-2620v4 (Broadwell) with PAA
Validation history
| Date | Type | Lab |
|---|---|---|
| 2025-01-09 | Initial | Lightship Security, Inc. |
| 2026-04-03 | Update | Lightship Security, Inc. |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status active
- Validation dates on record: 2025-01-09