HPE Juniper Networking QFX5120-48YM
Caveat: When operated in approved mode. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.
Certificate
| Certificate number | 5509 |
|---|---|
| Standard | FIPS 140-3 |
| Status | active |
| Sunset date | 2031-08-31 |
| Overall level | 1 |
| Module type | Hardware |
| Embodiment | MultiChipStand |
| Vendor | HPE Juniper Networking · website |
Module description
The HPE Juniper Networking QFX5120 Switch delivers high scale, high availability, and high performance for data center and campus deployments. The QFX5120 Switch is a versatile routing and switching platform addressing higher server access speed and campus distribution use cases while offering high-density 1GbE/10GbE/25GbE and 100GbE uplinks for collapsed spine data center or campus distribution deployments. The QFX5120-48YM is a 10GbE/25GbE/100GbE data center leaf and campus distribution switch.
Security level exceptions
- Roles, services, and authentication: Level 3
- Non-invasive security: N/A
- Mitigation of other attacks: N/A
Approved algorithms
| Algorithm | CAVP certificate |
|---|---|
| AES-CBC | A6551 |
| AES-CBC | A7286 |
| AES-CMAC | A6551 |
| AES-CTR | A7286 |
| AES-GCM | AES 4545 |
| AES-KW | A6551 |
| AES-XPN | AES 4545 |
| ECDSA KeyGen (FIPS186-4) | A7286 |
| ECDSA KeyVer (FIPS186-4) | A7286 |
| ECDSA SigGen (FIPS186-4) | A7286 |
| ECDSA SigVer (FIPS186-4) | A7286 |
| HMAC DRBG | A6620 |
| HMAC-SHA-1 | A7286 |
| HMAC-SHA2-256 | A6620 |
| HMAC-SHA2-256 | A7286 |
| HMAC-SHA2-512 | A7286 |
| KAS-ECC-SSC Sp800-56Ar3 | A7286 |
| KAS-FFC-SSC Sp800-56Ar3 | A7286 |
| KDF SP800-108 | A6551 |
| KDF SSH | A7286 |
| RSA KeyGen (FIPS186-5) | A7286 |
| RSA SigGen (FIPS186-5) | A7286 |
| RSA SigVer (FIPS186-5) | A7286 |
| Safe Primes Key Generation | A7286 |
| Safe Primes Key Verification | A7286 |
| SHA-1 | A7286 |
| SHA2-256 | A6620 |
| SHA2-256 | A7286 |
| SHA2-512 | A6550 |
| SHA2-512 | A6620 |
| SHA2-512 | A7286 |
Validation history
| Date | Type | Lab |
|---|---|---|
| 2026-09-01 | Initial | Acumen Security |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-09-01: first observed by this tracker, status active
- Validation dates on record: 2026-09-01