Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Projects Cryptographic Module Validation Program

Cryptographic Module Validation Program CMVP

FIPS 140-3 Management Manual

 

FIPS 140-3 Management Manual - Latest Version (5-14-2025)

The purpose of the CMVP Management Manual is to provide effective management guidance for the CMVP, CST labs, and the vendors who participate in the program. Consumers who procure validated cryptographic modules may also be interested in the contents of this manual.

This manual outlines the management activities, processes, and responsibilities that have been assigned to the various participating groups. This manual includes administrative guidance. For technical aspects of the requirements of the referenced standards, please refer to the CMVP webpage and associated links (e.g., FIPS 140-3 IG and RFG Announcements).

 

Contacts

David Hawes - NIST CMVP Program Manager
[email protected]

Kailai Chen - CCCS CMVP Program Manager
[email protected]

Topics

Security and Privacy: cryptography, testing & validation

Technologies: hardware, software & firmware

Created October 11, 2016, Updated June 25, 2025