Module Name
IBM System Storage LTO Ultrium 4 Tape Drive
Historical Reason
RNG SP800-131A Revision 1 Transition
Caveat
When operated in FIPS mode
Embodiment
Multi-chip standalone
Description
The IBM LTO Ultrium 4 Tape Drive provides AES-GCM encryption of customer data recorded to tape. Both encryption and compression are implemented in the hardware for optimum performance. Three different host interface types of the LTO Ultrium 4 "brick" unit are FIPS certified as a multi-chip, standalone cryptographic module. In customer operation the "brick" unit may be embedded in bridge box or in a canister package for operation in a library.
Approved Algorithms
AES |
Certs. #918 and #919 |
AES GCM |
Certs. #918 and #919, vendor affirmed |
RNG |
Cert. #527 |
RSA |
Cert. #446 |
SHS |
Cert. #906 |
Other Algorithms
RSA (key wrapping; key establishment methodology provides 112 bits of encryption strength)
Hardware Versions
23R9539 (Fibre Channel), 23R9904 (SAS), and 95P4613 (SCSI)
Firmware Versions
df080911bf_89Bb.FC.fips.ro (Fibre Channel), df080911bf_89Bb.SAS.fips.ro (SAS), and df080911bf_89Bb.SCSI.fips.ro (SCSI)