Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

    Projects Cryptographic Module Validation Program Validated Modules Search

Cryptographic Module Validation Program CMVP

Certificate #5551

Details

Module Name
Cisco FTD FX-OS on 4K/9K Cryptographic Module
Standard
FIPS 140-3
Status
Active
Sunset Date
10/14/2031
Overall Level
2
Caveat
When operated in approved mode; The tamper evident seals and Physical Kit installed as indicated in the Security Policy; This module contains the embedded module [Cisco Firepower Threat Defense on 4K/9K Cryptographic Module] validated to FIPS 140-3 under Cert. #5456 operating in approved mode.
Security Level Exceptions
  • Roles, services, and authentication: Level 3
  • Operational environment: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A
Module Type
Hardware
Embodiment
MultiChipStand
Description
Cisco FTD FX-OS on 4K/9K Cryptographic Module is an integrated network security system providing enterprise-class firewall with a comprehensive range of next-generation network security services, intrusion prevention system (IPS), content security and secure unified communications, HTTPS/TLSv1.2, SSHv2, IPsec/IKEv2, SNMPv3 and Cryptographic Cipher Suite B.
Approved Algorithms
AES-CBC
A4446
AES-CBC
C1026
AES-GCM
A4446
AES-GCM
C1026
Counter DRBG
A4446
ECDSA KeyGen (FIPS186-4)
A4446
ECDSA SigGen (FIPS186-4)
A4446
ECDSA SigVer (FIPS186-4)
A4446
HMAC-SHA-1
A4446
HMAC-SHA-1
C1026
HMAC-SHA2-224
A4446
HMAC-SHA2-256
A4446
HMAC-SHA2-256
C1026
HMAC-SHA2-384
A4446
HMAC-SHA2-384
C1026
HMAC-SHA2-512
A4446
HMAC-SHA2-512
C1026
KAS-ECC-SSC Sp800-56Ar3
A4446
KAS-FFC-SSC Sp800-56Ar3
A4446
KDF IKEv2
A4446
KDF SNMP
A4446
KDF SSH
A4446
RSA KeyGen (FIPS186-4)
A4446
RSA SigGen (FIPS186-4)
A4446
RSA SigVer (FIPS186-4)
A4446
Safe Primes Key Generation
A4446
SHA-1
A4446
SHA-1
C1026
SHA2-224
A4446
SHA2-256
A4446
SHA2-256
C1026
SHA2-384
A4446
SHA2-384
C1026
SHA2-512
A4446
SHA2-512
C1026
TLS v1.2 KDF RFC7627
A4446

Vendor

Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134
USA

Global Certification Team
[email protected]
Phone: 800-553-6387

Related Files

Security Policy

Validation History

Date Type Lab
10/15/2026 Initial Gossamer Security Solutions