808bits

ActivIdentity Digital Identity Applet Suite V2 on Gemalto SafesITe TOP IM CY2 (aka Cyberflex Access 64K V2)

FIPS 140-2 certificate #647 · Gemalto · data as of 2026-10-21

ActivIdentity Digital Identity Applet Suite V2 on Gemalto SafesITe TOP IM CY2 (aka Cyberflex Access 64K V2), from Gemalto, holds FIPS 140-2 certificate #647 at overall level 2. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. RNG SP800-131A Revision 1 Transition. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode

Certificate

Certificate number647
StandardFIPS 140-2
Statushistorical
Overall level2
Module typeHardware
EmbodimentSingle-chip
VendorGemalto · website
Hardware versionsP/Ns A1002057, A1002631 and A1006577, Hardmask 1v3
Firmware versionsV2.3.0c suite: ACA applet package version 2.3.0c, PKI/GC applet package version 2.3.0c, ASC library package version 2.3.0c; V2.6.1 suite: ACA applet package version 2.6.1, PKI/GC applet package version 2.6.1, ASC library package version 2.6.1; V2.6.2 suite: ACA applet package version 2.6.2, PKI/GC applet package version 2.6.2, ASC library package version 2.6.2

Module description

Quoted from the NIST CMVP entry for this certificate.

This product can be configured to use with suite V2.3.0c for GSC-IS v2.1 support, and with suite V2.6.1 for both GSC-IS v2.1 support and SP800-73 Transitional Card Edge support (for HSPD12/PIV).

Security level exceptions

  • Roles, Services, and Authentication: Level 3
  • Physical Security: Level 3
  • EMI/EMC: Level 3

Approved algorithms (6)

AlgorithmCAVP certificates
AES220
RNG64
RSA51
SHS301
Triple-DES312
Triple-DES MACvendor affirmed

Other algorithms

DES (Cert. #293); DES MAC (Cert. #293, vendor affirmed)

Validation history

DateTypeLab
2006-04-03InitialUL Verification Services, Inc.
2006-05-26Update
2006-08-29Update
2008-07-28Update

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2006-04-03, 2006-05-26, 2006-08-29, 2008-07-28

Source documents