IBM® NVMe FlashCore™ Module 3
IBM® NVMe FlashCore™ Module 3, from IBM(R) Corporation, holds FIPS 140-3 certificate #5088 at overall level 2. The validation is active, with a sunset date of 2030-11-02. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: When installed, initialized and configured as specified in Section 11.1 of the Security Policy. No operator authentication is enforced for executing security services that were unlocked by an authenticated service
Certificate
| Certificate number | 5088 |
|---|---|
| Standard | FIPS 140-3 |
| Status | active |
| Sunset date | 2030-11-02 |
| Overall level | 2 |
| Module type | Hardware |
| Embodiment | Multi-Chip Embedded |
| Vendor | IBM(R) Corporation · website |
| Hardware versions | 03GH930 with TEL part number: 03JN363, 03GH932 with TEL part number: 03JN363, 03GH934 with TEL part number: 03JN363, 03GH936 with TEL part number: 03JN363 |
| Firmware versions | 3.1.5.99 |
| Entropy | ENT (P) |
Module description
Quoted from the NIST CMVP entry for this certificate.
The IBM(R) NVMe FlashCore(TM) Module 3 is a NVMe-connected self-encrypting non-volatile storage module.
Security level exceptions
- Operational environment: N/A
- Non-invasive security: N/A
- Mitigation of other attacks: N/A
Approved algorithms (15)
| Algorithm | CAVP certificates |
|---|---|
| AES-CBC | A6888 |
| AES-ECB | A2687, A6888, AES 5897 |
| AES-KW | A6888 |
| AES-KWP | A6888 |
| AES-XTS | AES 5897 |
| AES-XTS Testing Revision 2.0 | A2687 |
| Conditioning Component AES-CBC-MAC SP800-90B | A6888 |
| Hash DRBG | A6888 |
| HMAC-SHA2-256 | A6888 |
| KDF SP800-108 | A6888 |
| KTS-IFC | A6888 |
| RSA KeyGen (FIPS186-4) | A6888 |
| SHA2-256 | A6888 |
| SHA2-512 | A6888 |
| SHA3-384 | A1883, A2686 |
Tested configurations
- N/A
Validation history
| Date | Type | Lab |
|---|---|---|
| 2025-11-03 | Initial | Leidos Accredited Testing & Evaluation (AT&E) Lab |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status active
- Validation dates on record: 2025-11-03