Aruba Crypto Module
Aruba Crypto Module, from Hewlett Packard Enterprise, holds FIPS 140-3 certificate #4940 at overall level 1. The validation is active, with a sunset date of 2027-01-08. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: Interim validation. When operated in Approved mode with module Aruba OpenSSL Module validated to FIPS 140-3 under Cert. #4929 operating in Approved mode.
Certificate
| Certificate number | 4940 |
|---|---|
| Standard | FIPS 140-3 |
| Status | active |
| Sunset date | 2027-01-08 |
| Overall level | 1 |
| Module type | Firmware |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | Hewlett Packard Enterprise · website |
| Firmware versions | 1.0 |
Module description
Quoted from the NIST CMVP entry for this certificate.
The Aruba Crypto Module is an Hewlett Packard Enterprise cryptographic module that provides cryptographic services for the ArubaOS operating system running on the Hewlett Packard Enterprise hardware-based equipment or Hewlett Packard Enterprise virtual appliances.
Security level exceptions
- Non-invasive security: N/A
- Mitigation of other attacks: N/A
Approved algorithms (25)
| Algorithm | CAVP certificates |
|---|---|
| AES-CBC | A2689 |
| AES-CTR | A2689 |
| AES-GCM | A2689 |
| DSA KeyGen (FIPS186-4) | A2689 |
| DSA PQGGen (FIPS186-4) | A2689 |
| ECDSA KeyGen (FIPS186-4) | A2689 |
| ECDSA KeyVer (FIPS186-4) | A2689 |
| ECDSA SigGen (FIPS186-4) | A2689 |
| ECDSA SigVer (FIPS186-4) | A2689 |
| HMAC-SHA-1 | A2689 |
| HMAC-SHA2-256 | A2689 |
| HMAC-SHA2-384 | A2689 |
| HMAC-SHA2-512 | A2689 |
| KAS-ECC-SSC Sp800-56Ar3 | A2689 |
| KAS-FFC-SSC Sp800-56Ar3 | A2689 |
| KDF IKEv2 | A2689 |
| RSA KeyGen (FIPS186-4) | A2689 |
| RSA SigGen (FIPS186-4) | A2689 |
| RSA Signature Primitive | A2689 |
| RSA SigVer (FIPS186-2) | A2689 |
| RSA SigVer (FIPS186-4) | A2689 |
| SHA-1 | A2689 |
| SHA2-256 | A2689 |
| SHA2-384 | A2689 |
| SHA2-512 | A2689 |
Tested configurations
- ArubaOS 8.10 on VMWare ESXi 7.0 running on MC-VA-50 Mobility Controller Virtual Appliance on HPE ProLiant ML110 Gen10 with Intel Xeon Silver 4210 (Cascade Lake) with PAA
- ArubaOS 8.10 on VMWare ESXi 7.0 running on MC-VA-50 Mobility Controller Virtual Appliance on HPE ProLiant ML110 Gen10 with Intel Xeon Silver 4210 (Cascade Lake) without PAA"
- ArubaOS 8.10 running on 7220 Mobility Controller with Broadcom XLP432 (MIPS64) without PAA
- ArubaOS 8.10 running on 9012 Gateway with Intel Atom C3508 (Denverton) without PAA
- ArubaOS 8.10 running on AP-515 Wireless Access Point with Broadcom BCM (64-bit ARMv8) without PAA
- ArubaOS 8.10 running on AP-535 Wireless Access Point with Qualcomm IPQ (64-bit ARM Cortex A53) without PAA
- ArubaOS 8.10 running on AP-635 Wireless Access Point with Qualcomm IPQ (64-bit ARM Cortex A53) without PAA
- ArubaOS 8.10 running on AP-655 Wireless Access Point with Qualcomm IPQ (64-bit ARM Cortex A53) without PAA
- ArubaOS 8.10 running on MCR-HW-5K Mobility Conductor Hardware Appliance with Intel Xeon E5-2620v4 (Broadwell) with PAA
Validation history
| Date | Type | Lab |
|---|---|---|
| 2025-01-09 | Initial | Lightship Security, Inc. |
| 2026-04-03 | Update | Lightship Security, Inc. |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status active
- Validation dates on record: 2025-01-09