HPE Juniper Networking QFX5120-48YM
HPE Juniper Networking QFX5120-48YM, from HPE Juniper Networking, holds FIPS 140-3 certificate #5509 at overall level 1. The validation is active, with a sunset date of 2031-08-31. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: When operated in approved mode. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.
Certificate
| Certificate number | 5509 |
|---|---|
| Standard | FIPS 140-3 |
| Status | active |
| Sunset date | 2031-08-31 |
| Overall level | 1 |
| Module type | Hardware |
| Embodiment | MultiChipStand |
| Vendor | HPE Juniper Networking · website |
Module description
Quoted from the NIST CMVP entry for this certificate.
The HPE Juniper Networking QFX5120 Switch delivers high scale, high availability, and high performance for data center and campus deployments. The QFX5120 Switch is a versatile routing and switching platform addressing higher server access speed and campus distribution use cases while offering high-density 1GbE/10GbE/25GbE and 100GbE uplinks for collapsed spine data center or campus distribution deployments. The QFX5120-48YM is a 10GbE/25GbE/100GbE data center leaf and campus distribution switch.
Security level exceptions
- Roles, services, and authentication: Level 3
- Non-invasive security: N/A
- Mitigation of other attacks: N/A
Approved algorithms (26)
| Algorithm | CAVP certificates |
|---|---|
| AES-CBC | A6551, A7286 |
| AES-CMAC | A6551 |
| AES-CTR | A7286 |
| AES-GCM | AES 4545 |
| AES-KW | A6551 |
| AES-XPN | AES 4545 |
| ECDSA KeyGen (FIPS186-4) | A7286 |
| ECDSA KeyVer (FIPS186-4) | A7286 |
| ECDSA SigGen (FIPS186-4) | A7286 |
| ECDSA SigVer (FIPS186-4) | A7286 |
| HMAC DRBG | A6620 |
| HMAC-SHA-1 | A7286 |
| HMAC-SHA2-256 | A6620, A7286 |
| HMAC-SHA2-512 | A7286 |
| KAS-ECC-SSC Sp800-56Ar3 | A7286 |
| KAS-FFC-SSC Sp800-56Ar3 | A7286 |
| KDF SP800-108 | A6551 |
| KDF SSH | A7286 |
| RSA KeyGen (FIPS186-5) | A7286 |
| RSA SigGen (FIPS186-5) | A7286 |
| RSA SigVer (FIPS186-5) | A7286 |
| Safe Primes Key Generation | A7286 |
| Safe Primes Key Verification | A7286 |
| SHA-1 | A7286 |
| SHA2-256 | A6620, A7286 |
| SHA2-512 | A6550, A6620, A7286 |
Validation history
| Date | Type | Lab |
|---|---|---|
| 2026-09-01 | Initial | Acumen Security |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-09-01: first observed by this tracker, status active
- Validation dates on record: 2026-09-01