808bits

OVHcloud KMS

FIPS 140-2 certificate #5042 · OVHcloud · data as of 2026-10-09

OVHcloud KMS, from OVHcloud, holds FIPS 140-2 certificate #5042 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its algorithm certificates, its validation history, and the list moves this tracker has observed, which NIST does not date.

Historical. Moved to historical list due to sunsetting. Federal agencies may reference historical validations for existing systems only, not for new procurement. Observed moving to historical on 2026-09-22. It was one of the last FIPS 140-2 certificates, all moved at the 140-2 sunset on 2026-09-21.
Caveat: When operated in FIPS mode. No assurance of the minimum strength of generated keys.

Certificate

Certificate number5042
StandardFIPS 140-2
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorOVHcloud · website
Software versions2.0.0

Module description

Quoted from the NIST CMVP entry for this certificate.

The OVHcloud KMS is a general-purpose cryptographic software incorporated into the OVHcloud family of products to provide FIPS validated cryptography for the protection of sensitive information.

Security level exceptions

  • Physical Security: N/A
  • Design Assurance: Level 3

Approved algorithms (19)

AlgorithmCAVP certificates
AESA4086, A6984
CKGvendor affirmed
CVLA4086, A6984
DRBGA4086, A6984
DSAA4086, A6984
ECDSAA4086, A6984
HMACA4086, A6984
KAS-RSA-SSCA4086, A6984
KAS-SSCA4086, A6984
KBKDFA4086, A6984
KDAA4086, A6984
KMACA4086, A6984
KTS
KTS-RSA
PBKDFA4086, A6984
RSAA4086, A6984
SHA-3A4086, A6984
SHSA4086, A6984
Triple-DESA4086, A6984

Tested configurations

  • Debian 11.5 running on Dell Inspiron 7591 with Intel i7(x64) with PAA
  • Debian 11.5 running on Dell Inspiron 7591 with Intel i7(x64) without PAA
  • Debian 12 running on Scale A1 with AMD EPYC GENOA 9124 with PAA
  • Debian 12 running on Scale A1 with AMD EPYC GENOA 9124 without PAA
  • Debian 12 running on Scale A2 with AMD EPYC GENOA 9254 with PAA
  • Debian 12 running on Scale A2 with AMD EPYC GENOA 9254 without PAA
  • Debian 12 running on x86_64 AMD with Intel Core Processor(x64) with PAA
  • Debian 12 running on x86_64 AMD with Intel Core Processor(x64) without PAA
  • FreeBSD 13.1 running on Dell Inspiron 7591 with Intel i7(x64) with PAA
  • FreeBSD 13.1 running on Dell Inspiron 7591 with Intel i7(x64) without PAA
  • macOS 11.5.2 running on Apple i7 Mac Mini with Intel i7(x64) with PAA
  • macOS 11.5.2 running on Apple i7 Mac Mini with Intel i7(x64) without PAA
  • macOS 11.5.2 running on Apple M1 Mac Mini with M1 with PAA
  • macOS 11.5.2 running on Apple M1 Mac Mini with M1 without PAA
  • Ubuntu Linux 22.04.1 LTS running on Dell Inspiron 7591 with Intel i7(x64) with PAA
  • Ubuntu Linux 22.04.1 LTS running on Dell Inspiron 7591 with Intel i7(x64) without PAA
  • Ubuntu Linux 24.04.2 LTS running on x86_64 AMD with Intel Core Processor(x64) with PAA
  • Ubuntu Linux 24.04.2 LTS running on x86_64 AMD with Intel Core Processor(x64) without PAA (single-user mode)
  • Windows 10 running on Dell Inspiron 7591 with Intel i7(x64) with PAA
  • Windows 10 running on Dell Inspiron 7591 with Intel i7(x64) without PAA

Validation history

DateTypeLab
2025-07-22InitialAcumen Security
2025-12-16UpdateAcumen Security

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical at the time of the earliest snapshot
  • 2026-09-22: observed moving from active to historical
  • Validation dates on record: 2025-07-22, 2025-12-16

Source documents