Firepower Management Center Virtual VMware Cryptographic Module

Certificate details

Certificate ID #5386
Status active
Validation dates 09.07.2026
Sunset date 16-06-2029
Standard FIPS 140-3
Security level 1
Type Software
Embodiment MultiChipStand
Caveat When installed, initialized and configured as specified in Section Life-Cycle Assurance of the Security Policy. No assurance of the minimum strength of generated SSPs (e.g., keys). No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs
Exceptions
  • Physical security: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A
Description Cisco FMCv Module provides complete and unified management over firewalls, application control, intrusion prevention, URL filtering, and advanced malware protection. Delivering in-depth analysis, streamlined security management across the network and cloud, and accelerated incident investigation and response, working across Cisco and third-party technologies.
Vendor Cisco Systems, Inc http://www.cisco.com
Lab Gossamer Security Solutions
Algorithms
  • AES-CBCA3376
  • AES-GCMA3376
  • Counter DRBGA3376
  • ECDSA KeyGen (FIPS186-4)A3376
  • ECDSA SigGen (FIPS186-4)A3376
  • ECDSA SigVer (FIPS186-4)A3376
  • HMAC-SHA-1A3376
  • HMAC-SHA2-256A3376
  • HMAC-SHA2-384A3376
  • HMAC-SHA2-512A3376
  • KAS-ECC-SSC Sp800-56Ar3A3376
  • KAS-FFC-SSC Sp800-56Ar3A3376
  • KDF SSHA3376
  • RSA KeyGen (FIPS186-4)A3376
  • RSA SigGen (FIPS186-4)A3376
  • RSA SigVer (FIPS186-4)A3376
  • Safe Primes Key GenerationA3376
  • SHA-1A3376
  • SHA2-256A3376
  • SHA2-384A3376
  • SHA2-512A3376
  • TLS v1.2 KDF RFC7627A3376
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.
Certificate
Webpage

Security policy

Extracted keywords

Symmetric Algorithms
AES-256, AES-128, AES-192, AES, AES-, CAST, TDES, HMAC
Asymmetric Algorithms
ECDH, ECDSA, ECC, DH, DSA
Hash functions
SHA-1, SHA2
Schemes
MAC, Key Agreement
Protocols
SSH, SSHv2, TLS v1.2, TLSv1.2, TLS, TLS 1.2
Randomness
DRBG, RBG
Elliptic Curves
P-256, P-384, P-521
Block cipher modes
GCM

Trusted Execution Environments
PSP
Vendor
Cisco Systems, Cisco Systems, Inc, Cisco

Security level
Level 1, level 1

Creation date D:20260706100852-04'00'
Modification date D:20260706100852-04'00'
Pages 39
Creator Microsoft® Word for Microsoft 365
Producer Microsoft® Word for Microsoft 365

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

No automatically derived data are available in this section.

Cross-references

No references are available for this certificate.

Processing updates

  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 5386,
  "dgst": "0a1954a487177cc7",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "SHA-1A3376",
        "HMAC-SHA2-512A3376",
        "HMAC-SHA2-384A3376",
        "#A2952",
        "Counter DRBGA3376",
        "#A3376",
        "RSA SigGen (FIPS186-4)A3376",
        "SHA2-256A3376",
        "HMAC-SHA-1A3376",
        "SHA2-384A3376",
        "KAS-ECC-SSC Sp800-56Ar3A3376",
        "RSA SigVer (FIPS186-4)A3376",
        "AES-GCMA3376",
        "ECDSA KeyGen (FIPS186-4)A3376",
        "KDF SSHA3376",
        "TLS v1.2 KDF RFC7627A3376",
        "AES-CBCA3376",
        "Safe Primes Key GenerationA3376",
        "KAS-FFC-SSC Sp800-56Ar3A3376",
        "HMAC-SHA2-256A3376",
        "RSA KeyGen (FIPS186-4)A3376",
        "ECDSA SigVer (FIPS186-4)A3376",
        "ECDSA SigGen (FIPS186-4)A3376",
        "SHA2-512A3376"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "-"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "br1_deviations": 0,
    "br1_tables": {
      "_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
      "approved_algorithms": {
        "entries": [
          {
            "algorithm": "AES-CBC",
            "cavpCertName": "A2952",
            "properties": "Key Length - 128, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-GCM",
            "cavpCertName": "A2952",
            "properties": "Key Length - 128, 256",
            "reference": "SP 800-38D"
          },
          {
            "algorithm": "Counter DRBG",
            "cavpCertName": "A2952",
            "properties": "Mode - AES-256 Derivation Function Enabled - Yes",
            "reference": "SP 800-90A Rev. 1"
          },
          {
            "algorithm": "ECDSA KeyGen (FIPS186-4)",
            "cavpCertName": "A2952",
            "properties": "Curve - P-256, P-384, P-521",
            "reference": "FIPS 186-4"
          },
          {
            "algorithm": "ECDSA SigGen (FIPS186-4)",
            "cavpCertName": "A2952",
            "properties": "Curve - P-256, P-384, P-521 Hash Algorithm - SHA2-256, SHA2-384, SHA2-512",
            "reference": "FIPS 186-4"
          },
          {
            "algorithm": "ECDSA SigVer (FIPS186-4)",
            "cavpCertName": "A2952",
            "properties": "Curve - P-256, P-384, P-521 Hash Algorithm - SHA2-256, SHA2-384, SHA2-512",
            "reference": "FIPS 186-4"
          },
          {
            "algorithm": "HMAC-SHA-1",
            "cavpCertName": "A2952",
            "properties": "MAC - MAC: 32-160 Increment 8 Key Length - Key Length: 256-448 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2-256",
            "cavpCertName": "A2952",
            "properties": "MAC - MAC: 32-256 Increment 8 Key Length - Key Length: 256-448 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2-384",
            "cavpCertName": "A2952",
            "properties": "MAC - MAC: 32-384 Increment 8 Key Length - Key Length: 256-448 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2-512",
            "cavpCertName": "A2952",
            "properties": "MAC - MAC: 32-512 Increment 8 Key Length - Key Length: 256-448 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "KAS-ECC-SSC Sp800-56Ar3",
            "cavpCertName": "A2952",
            "properties": "Domain Parameter Generation Methods - P-256, P-384, P-521",
            "reference": "SP 800-56A Rev. 3"
          },
          {
            "algorithm": "KAS-FFC-SSC Sp800-56Ar3",
            "cavpCertName": "A2952",
            "properties": "Domain Parameter Generation Methods - modp-2048",
            "reference": "SP 800-56A Rev. 3"
          },
          {
            "algorithm": "KDF SSH (CVL)",
            "cavpCertName": "A2952",
            "properties": "Cipher - AES-128, AES-192, AES-256, TDES Hash Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512",
            "reference": "SP 800-135 Rev. 1"
          },
          {
            "algorithm": "RSA KeyGen (FIPS186-4)",
            "cavpCertName": "A2952",
            "properties": "Modulo - 2048, 3072",
            "reference": "FIPS 186-4"
          },
          {
            "algorithm": "RSA SigGen (FIPS186-4)",
            "cavpCertName": "A2952",
            "properties": "Signature Type - PKCS 1.5 Modulo - 2048, 3072",
            "reference": "FIPS 186-4"
          },
          {
            "algorithm": "RSA SigVer (FIPS186-4)",
            "cavpCertName": "A2952",
            "properties": "Signature Type - PKCS 1.5 Modulo - 2048, 3072",
            "reference": "FIPS 186-4"
          },
          {
            "algorithm": "Safe Primes Key Generation",
            "cavpCertName": "A2952",
            "properties": "Safe Prime Groups - modp-2048",
            "reference": "SP 800-56A Rev. 3"
          },
          {
            "algorithm": "SHA-1",
            "cavpCertName": "A2952",
            "properties": "Message Length - Message Length: 0- 65536 Increment 8",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-256",
            "cavpCertName": "A2952",
            "properties": "Message Length - Message Length: 0- 65536 Increment 8",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-384",
            "cavpCertName": "A2952",
            "properties": "Message Length - Message Length: 0- 65536 Increment 8",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-512",
            "cavpCertName": "A2952",
            "properties": "Message Length - Message Length: 0- 65536 Increment 8",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "TLS v1.2 KDF RFC7627 (CVL)",
            "cavpCertName": "A2952",
            "properties": "Hash Algorithm - SHA2-256, SHA2-384, SHA2-512",
            "reference": "SP 800-135 Rev. 1"
          },
          {
            "algorithm": "AES-CBC",
            "cavpCertName": "A3376",
            "properties": "Key Length - 128, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-GCM",
            "cavpCertName": "A3376",
            "properties": "Key Length - 128, 256",
            "reference": "SP 800-38D"
          },
          {
            "algorithm": "Counter DRBG",
            "cavpCertName": "A3376",
            "properties": "Mode - AES-256 Derivation Function Enabled - Yes",
            "reference": "SP 800-90A Rev. 1"
          },
          {
            "algorithm": "ECDSA KeyGen (FIPS186-4)",
            "cavpCertName": "A3376",
            "properties": "Curve - P-256, P-384, P-521",
            "reference": "FIPS 186-4"
          },
          {
            "algorithm": "ECDSA SigGen (FIPS186-4)",
            "cavpCertName": "A3376",
            "properties": "Curve - P-256, P-384, P-521 Hash Algorithm - SHA2-256, SHA2-384, SHA2-512",
            "reference": "FIPS 186-4"
          },
          {
            "algorithm": "ECDSA SigVer (FIPS186-4)",
            "cavpCertName": "A3376",
            "properties": "Curve - P-256, P-384, P-521 Hash Algorithm - SHA2-256, SHA2-384, SHA2-512",
            "reference": "FIPS 186-4"
          },
          {
            "algorithm": "HMAC-SHA-1",
            "cavpCertName": "A3376",
            "properties": "MAC - MAC: 32-160 Increment 8 Key Length - Key Length: 256-448 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2-256",
            "cavpCertName": "A3376",
            "properties": "MAC - MAC: 32-256 Increment 8 Key Length - Key Length: 256-448 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2-384",
            "cavpCertName": "A3376",
            "properties": "MAC - MAC: 32-384 Increment 8 Key Length - Key Length: 256-448 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2-512",
            "cavpCertName": "A3376",
            "properties": "MAC - MAC: 32-512 Increment 8 Key Length - Key Length: 256-448 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "KAS-ECC-SSC Sp800-56Ar3",
            "cavpCertName": "A3376",
            "properties": "Domain Parameter Generation Methods - P-256, P-384, P-521",
            "reference": "SP 800-56A Rev. 3"
          },
          {
            "algorithm": "KAS-FFC-SSC Sp800-56Ar3",
            "cavpCertName": "A3376",
            "properties": "Domain Parameter Generation Methods - modp-2048",
            "reference": "SP 800-56A Rev. 3"
          },
          {
            "algorithm": "KDF SSH (CVL)",
            "cavpCertName": "A3376",
            "properties": "Cipher - AES-128, AES-192, AES-256, TDES Hash Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512",
            "reference": "SP 800-135 Rev. 1"
          },
          {
            "algorithm": "RSA KeyGen (FIPS186-4)",
            "cavpCertName": "A3376",
            "properties": "Modulo - 2048, 3072",
            "reference": "FIPS 186-4"
          },
          {
            "algorithm": "RSA SigGen (FIPS186-4)",
            "cavpCertName": "A3376",
            "properties": "Signature Type - PKCS 1.5 Modulo - 2048, 3072",
            "reference": "FIPS 186-4"
          },
          {
            "algorithm": "RSA SigVer (FIPS186-4)",
            "cavpCertName": "A3376",
            "properties": "Signature Type - PKCS 1.5 Modulo - 2048, 3072",
            "reference": "FIPS 186-4"
          },
          {
            "algorithm": "Safe Primes Key Generation",
            "cavpCertName": "A3376",
            "properties": "Safe Prime Groups - modp-2048",
            "reference": "SP 800-56A Rev. 3"
          },
          {
            "algorithm": "SHA-1",
            "cavpCertName": "A3376",
            "properties": "Message Length - Message Length: 0- 65536 Increment 8",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-256",
            "cavpCertName": "A3376",
            "properties": "Message Length - Message Length: 0- 65536 Increment 8",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-384",
            "cavpCertName": "A3376",
            "properties": "Message Length - Message Length: 0- 65536 Increment 8",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-512",
            "cavpCertName": "A3376",
            "properties": "Message Length - Message Length: 0- 65536 Increment 8",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "TLS v1.2 KDF RFC7627 (CVL)",
            "cavpCertName": "A3376",
            "properties": "Hash Algorithm - SHA2-256, SHA2-384, SHA2-512",
            "reference": "SP 800-135 Rev. 1"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 5
      },
      "approved_services": {
        "entries": [
          {
            "description": "Provide Module\u0027s current status",
            "indicator": "None",
            "inputs": "API comman d to show status.",
            "name": "Show Status",
            "outputs": "Module\u0027s current status.",
            "rolesSspAccess": "Crypto Officer",
            "secFunImpl": "None"
          },
          {
            "description": "Provide Module\u0027s name/ID and versioning informatio n.",
            "indicator": "None",
            "inputs": "API comman ds to show version.",
            "name": "Show Version",
            "outputs": "Module\u0027s name/ID and versioning information",
            "rolesSspAccess": "Crypto Officer",
            "secFunImpl": "None"
          },
          {
            "description": "Perform Self-Tests (Pre- operationa l self-tests and Conditiona l Self- Tests)",
            "indicator": "None",
            "inputs": "API comman ds to conduct on- demand Self- Tests.",
            "name": "Perform Self- Tests",
            "outputs": "Status of the self- tests results.",
            "rolesSspAccess": "Crypto Officer",
            "secFunImpl": "None"
          },
          {
            "description": "Perform Zeroizatio n.",
            "indicator": "None",
            "inputs": "API comman ds to conduct Zeroizati on operation or Power down the tested platform.",
            "name": "Perform Zeroizati on",
            "outputs": "Status of the SSPs zeroization.",
            "rolesSspAccess": "Crypto Officer - DRBG Entropy Input: Z - DRBG Seed: Z - DRBG Internal State V value: Z - DRBG Key: Z - SSH DH Private Key: Z - SSH DH Public Key: Z - SSH Peer DH Public Key: Z - SSH DH Shared Secret: Z - SSH RSA Private Key: Z - SSH RSA Public Key: Z - SSH Session Encryption Key: Z - SSH Session Authenticati on Key: Z - TLS ECDH Private Key: Z - TLS ECDH Public Key: Z - TLS Peer ECDH",
            "secFunImpl": "None"
          },
          {
            "description": "Descriptio n",
            "indicator": "Indicator",
            "inputs": "Inputs",
            "name": "Name",
            "outputs": "Outputs",
            "rolesSspAccess": "SSP",
            "secFunImpl": "Security Functions"
          },
          {
            "description": "",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "Access Public Key: Z - TLS ECDH Shared Secret: Z - TLS RSA Private Key: Z - TLS RSA Public Key: Z - TLS ECDSA Private Key: Z - TLS ECDSA Public Key: Z - TLS Master Secret: Z - TLS Session Encryption Key: Z - TLS Session Authenticati on Key: Z",
            "secFunImpl": ""
          },
          {
            "description": "Sets configurati on of the systems.",
            "indicator": "None",
            "inputs": "API comman ds to configure the module.",
            "name": "Configur e Network",
            "outputs": "Status of the completion of network related configuratio n.",
            "rolesSspAccess": "Crypto Officer",
            "secFunImpl": "None"
          },
          {
            "description": "Configure SSHv2 Function",
            "indicator": "Global Indicator and SSHv2 configurati on success status message.",
            "inputs": "API comman ds to configure SSHv2.",
            "name": "Configur e SSHv2 Function",
            "outputs": "Status of the completion of SSHv2 configuratio n.",
            "rolesSspAccess": "Crypto Officer - SSH RSA Private Key: G,W,E - SSH RSA Public Key: G,R,W - DRBG Entropy Input:",
            "secFunImpl": "KTS (SSHv2 with AES and HMAC) KTS (TLSv1.2 with AES and HMAC) KTS (TLSv1.2 with AES-GCM) RSA KeyGen"
          },
          {
            "description": "",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "G,W,E - DRBG Seed: G,W,E - DRBG Internal State V value: G,W,E - DRBG",
            "secFunImpl": "(SSHv2, TLSv1.2) DRBG Function"
          },
          {
            "description": "Configure HTTPS over TLSv1.2 Function.",
            "indicator": "Global Indicator and HTTPS over TLSv1.2 configurati on success status message.",
            "inputs": "API comman ds to configure HTTPS over TLSv1.2",
            "name": "Configur e HTTPS over TLSv1.2 Function",
            "outputs": "Status of the completion of HTTPS over TLSv1.2 configuratio n.",
            "rolesSspAccess": "Key: G,W,E Crypto Officer - TLS RSA Private Key: G,W,E - TLS RSA Public Key: G,R,W - TLS ECDSA Private Key: G,W,E - TLS ECDSA Public Key: G,R,W - DRBG Entropy Input: G,W,E - DRBG Seed: G,W,E - DRBG Internal State V value: G,W,E - DRBG Key: G,W,E",
            "secFunImpl": "KTS (SSHv2 with AES and HMAC) KTS (TLSv1.2 with AES and HMAC) KTS (TLSv1.2 with AES-GCM) RSA KeyGen (SSHv2, TLSv1.2) ECDSA KeyGen (TLSv1.2) DRBG Function"
          },
          {
            "description": "Execute SSHv2 Function",
            "indicator": "Global Indicator and Successful SSHv2 log message.",
            "inputs": "API comman ds to execute SSHv2 service.",
            "name": "Run SSHv2 Function",
            "outputs": "Status of SSHv2 secure tunnel establishme nt.",
            "rolesSspAccess": "Crypto Officer - SSH DH Private Key: G,W,E - SSH DH Public Key: G,R,W",
            "secFunImpl": "KAS-FFC (SSHv2) KTS (SSHv2 with AES and HMAC) RSA SigGen (SSHv2, TLSv1.2)"
          },
          {
            "description": "",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "- SSH Peer DH Public Key: W,E - SSH DH Shared Secret: G,W,E - SSH RSA Private Key: G,W,E - SSH RSA Public Key: G,R,W - SSH Session Encryption Key: G,W,E - SSH Session Authenticati on Key: G,W,E - DRBG Entropy Input: G,W,E - DRBG Seed: G,W,E - DRBG Internal State V value: G,W,E - DRBG",
            "secFunImpl": "RSA SigVer (SSHv2, TLSv1.2) SSHv2 Session Encrypt/Decr ypt SSHv2 Session Authenticatio n SSHv2 Keying Materials Development DRBG Function"
          },
          {
            "description": "Execute HTTPS over TLSv1.2 Function.",
            "indicator": "Global Indicator and Successful HTTPS over TLSv1.2 log message.",
            "inputs": "API comman d to execute HTTPS over TLSv1.2 service.",
            "name": "Run HTTPS over TLSv1.2 Function",
            "outputs": "Status of HTTPS over TLSv1.2 establishme nt.",
            "rolesSspAccess": "Key: G,W,E Crypto Officer - TLS ECDH Private Key: G,W,E - TLS ECDH Public Key: G,R,W - TLS Peer ECDH Public Key:",
            "secFunImpl": "KAS-ECC (TLSv1.2) KTS (TLSv1.2 with AES and HMAC) KTS (TLSv1.2 with AES-GCM) RSA SigGen (SSHv2, TLSv1.2) RSA SigVer"
          },
          {
            "description": "",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "W,E - TLS ECDH Shared Secret: G,W,E - TLS RSA Private Key: G,W,E - TLS RSA Public Key: G,R,W - TLS ECDSA Private Key: G,W,E - TLS ECDSA Public Key: G,R,W - TLS Master Secret: G,W,E - TLS Session Encryption Key: G,W,E - TLS Session Authenticati on Key: G,W,E - DRBG Entropy Input: G,W,E - DRBG Seed: G,W,E - DRBG Internal State V value: G,W,E - DRBG Key: G,W,E",
            "secFunImpl": "(SSHv2, TLSv1.2) ECDSA SigGen (TLSv1.2) ECDSA SigVer (TLSv1.2) TLSv1.2 Session Encrypt/Decr ypt TLSv1.2 Session Authenticatio n TLSv1.2 Keying Materials Development DRBG Function"
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 3
      },
      "authentication_methods": {
        "entries": [],
        "found": false,
        "section": 4,
        "subsection": 1
      },
      "cond_self_tests": {
        "entries": [
          {
            "algorithmOrTest": "AES-CBC Encrypt KAT (A2952/A3376)",
            "condition": "Power up",
            "details": "Encrypt",
            "indicator": "Module is in normal state",
            "testMethod": "KAT",
            "testProps": "256 bits",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "AES-CBC Decrypt KAT (A2952/A3376)",
            "condition": "Power up",
            "details": "Decrypt",
            "indicator": "Module is in normal state",
            "testMethod": "KAT",
            "testProps": "256 bits",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "AES-GCM Authenticated Encrypt KAT (A2952/A3376)",
            "condition": "Power up",
            "details": "Authenticat ed Encrypt",
            "indicator": "Module is in normal state",
            "testMethod": "KAT",
            "testProps": "256 bits",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "AES-GCM Authenticated Decrypt KAT (A2952/A3376)",
            "condition": "Power up",
            "details": "Authenticat ed Decrypt",
            "indicator": "Module is in normal state",
            "testMethod": "KAT",
            "testProps": "256 bits",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "Counter DRBG Instantiate/Generate/Res eed KAT (A2952/A3376)",
            "condition": "Power up",
            "details": "Instantiate, Generate, and Reseed KATs",
            "indicator": "Module is in normal state",
            "testMethod": "KAT",
            "testProps": "AES-128",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "ECDSA SigGen (FIPS186-4) KAT (A2952/A3376)",
            "condition": "Power up",
            "details": "ECDSA SigGen KAT",
            "indicator": "Module is in normal state",
            "testMethod": "KAT",
            "testProps": "Curve P- 256 with SHA2- 256",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "ECDSA SigVer (FIPS186-4) KAT (A2952/A3376)",
            "condition": "Power up",
            "details": "ECDSA SigVer KAT",
            "indicator": "Module is in normal state",
            "testMethod": "KAT",
            "testProps": "Curve P- 256 with SHA2- 256",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "HMAC-SHA-1 KAT (A2952/A3376)",
            "condition": "Power up",
            "details": "HMAC- SHA-1",
            "indicator": "Module is in normal state",
            "testMethod": "KAT",
            "testProps": "SHA-1",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "HMAC-SHA2-256 KAT (A2952/A3376)",
            "condition": "Power up",
            "details": "HMAC- SHA2-256",
            "indicator": "Module is in normal state",
            "testMethod": "KAT",
            "testProps": "SHA2- 256",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "HMAC-SHA2-384 KAT (A2952/A3376)",
            "condition": "Power up",
            "details": "HMAC- SHA2-384",
            "indicator": "Module is in normal state",
            "testMethod": "KAT",
            "testProps": "SHA2- 384",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "HMAC-SHA2-512 KAT (A2952/A3376)",
            "condition": "Power up",
            "details": "HMAC- SHA2-512",
            "indicator": "Module is in normal state",
            "testMethod": "KAT",
            "testProps": "SHA2- 512",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "KAS-ECC-SSC Sp800- 56Ar3 KAT (A2952/A3376)",
            "condition": "Power up",
            "details": "Primitive Z KAT",
            "indicator": "Module is in normal state",
            "testMethod": "KAT",
            "testProps": "Curve: P- 256",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "KAS-FFC-SSC Sp800- 56Ar3 KAT (A2952/A3376)",
            "condition": "Power up",
            "details": "Primitive Z KAT",
            "indicator": "Module is in normal state",
            "testMethod": "KAT",
            "testProps": "MODP- 2048",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "KDF SSH KAT (A2952/A3376)",
            "condition": "Power up",
            "details": "N/A",
            "indicator": "Module is in normal state",
            "testMethod": "KAT",
            "testProps": "N/A",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "RSA SigGen (FIPS186-4) KAT (A2952/A3376)",
            "condition": "Power up",
            "details": "RSA",
            "indicator": "Module is in",
            "testMethod": "KAT",
            "testProps": "2048 bit modulus with",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "",
            "condition": "",
            "details": "",
            "indicator": "normal state",
            "testMethod": "",
            "testProps": "SHA2- 256",
            "type": ""
          },
          {
            "algorithmOrTest": "RSA SigVer (FIPS186-4) KAT (A2952/A3376)",
            "condition": "Power up",
            "details": "RSA",
            "indicator": "Module is in normal state",
            "testMethod": "KAT",
            "testProps": "2048 bit modulus with SHA2- 256",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "SHA-1 KAT (A2952/A3376)",
            "condition": "Power up",
            "details": "N/A",
            "indicator": "Module is in normal state",
            "testMethod": "KAT",
            "testProps": "N/A",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "TLS v1.2 KDF RFC7627 KAT (A2952/A3376)",
            "condition": "Power up",
            "details": "N/A",
            "indicator": "Module is in normal state",
            "testMethod": "KAT",
            "testProps": "N/A",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "ECDSA KeyGen (FIPS186-4) PCT (A2952/A3376)",
            "condition": "Performs all required pair-wise consisten cy tests on the newly generated key pairs before the first operation al use.",
            "details": "ECDSA",
            "indicator": "Module is in normal state",
            "testMethod": "PCT",
            "testProps": "N/A",
            "type": "PCT"
          },
          {
            "algorithmOrTest": "KAS-ECC-SSC Sp800- 56Ar3 PCT (A2952/A3376)",
            "condition": "Performs all required pair-wise consisten cy tests on the newly generated key pairs before the first operation al use.",
            "details": "N/A",
            "indicator": "Module is in normal state",
            "testMethod": "PCT",
            "testProps": "N/A",
            "type": "PCT"
          },
          {
            "algorithmOrTest": "KAS-FFC-SSC Sp800- 56Ar3 PCT (A2952/A3376)",
            "condition": "Performs all required pair-wise",
            "details": "N/A",
            "indicator": "Module is in normal state",
            "testMethod": "PCT",
            "testProps": "N/A",
            "type": "PCT"
          },
          {
            "algorithmOrTest": "",
            "condition": "consisten cy tests on the newly generated key pairs before the first operation al use.",
            "details": "",
            "indicator": "",
            "testMethod": "",
            "testProps": "",
            "type": ""
          },
          {
            "algorithmOrTest": "RSA KeyGen (FIPS186- 4) PCT (A2952/A3376)",
            "condition": "Performs all required pair-wise consisten cy tests on the newly generated key pairs before the first operation al use.",
            "details": "RSA",
            "indicator": "Module is in normal state",
            "testMethod": "PCT",
            "testProps": "N/A",
            "type": "PCT"
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 2
      },
      "error_states": {
        "entries": [
          {
            "conditions": "Self-test failure",
            "description": "If self-test tests fail, the module is put into an error state.",
            "indicator": "System halt",
            "name": "Error State",
            "recoveryMethod": "Reboot the module"
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 4
      },
      "mechanisms_actions": {
        "entries": [],
        "found": false,
        "section": 7,
        "subsection": 1
      },
      "modes_of_operation": {
        "entries": [
          {
            "description": "The module is always in the approved mode of operation after initial operations are performed.",
            "name": "Approved",
            "statusIndicator": "\"CC\" mode is configured.",
            "type": "Approved"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 4
      },
      "non_approved_allowed_NSC": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "non_approved_allowed_algos": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "non_approved_not_allowed": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "non_approved_services": {
        "entries": [],
        "found": false,
        "section": 4,
        "subsection": 4
      },
      "ports_interfaces": {
        "entries": [
          {
            "data": "Arguments for an API that provide the data to be used for processed by the module.",
            "logicalInterface": "Data Input",
            "physicalPort": "N/A"
          },
          {
            "data": "Arguments output from an API call.",
            "logicalInterface": "Data Output",
            "physicalPort": "N/A"
          },
          {
            "data": "Arguments for an API call used to control and configure module operation.",
            "logicalInterface": "Control Input",
            "physicalPort": "N/A"
          },
          {
            "data": "N/A",
            "logicalInterface": "Control Output",
            "physicalPort": "N/A"
          },
          {
            "data": "Return values, and/or log messages.",
            "logicalInterface": "Status Output",
            "physicalPort": "N/A"
          },
          {
            "data": "N/A",
            "logicalInterface": "Power",
            "physicalPort": "N/A"
          }
        ],
        "found": true,
        "section": 3,
        "subsection": 1
      },
      "roles": {
        "entries": [
          {
            "authMethodList": "None",
            "name": "Crypto Officer",
            "operatorType": "Crypto Officer",
            "type": "Role"
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 2
      },
      "security_levels": {
        "entries": [
          {
            "level": "1",
            "section": "1",
            "title": "General"
          },
          {
            "level": "1",
            "section": "2",
            "title": "Cryptographic module specification"
          },
          {
            "level": "1",
            "section": "3",
            "title": "Cryptographic module interfaces"
          },
          {
            "level": "1",
            "section": "4",
            "title": "Roles, services, and authentication"
          },
          {
            "level": "1",
            "section": "5",
            "title": "Software/Firmware security"
          },
          {
            "level": "1",
            "section": "6",
            "title": "Operational environment"
          },
          {
            "level": "N/A",
            "section": "7",
            "title": "Physical security"
          },
          {
            "level": "N/A",
            "section": "8",
            "title": "Non-invasive security"
          },
          {
            "level": "1",
            "section": "9",
            "title": "Sensitive security parameter management"
          },
          {
            "level": "1",
            "section": "10",
            "title": "Self-tests"
          },
          {
            "level": "1",
            "section": "11",
            "title": "Life-cycle assurance"
          },
          {
            "level": "N/A",
            "section": "12",
            "title": "Mitigation of other attacks"
          },
          {
            "level": "1",
            "section": "",
            "title": "Overall Level"
          }
        ],
        "found": true,
        "section": 1,
        "subsection": 2
      },
      "self_tests": {
        "entries": [
          {
            "algorithmOrTest": "HMAC-SHA2- 512 (A2952)",
            "details": "HMAC- SHA2-512",
            "indicator": "Module is in normal state",
            "testMethod": "KAT",
            "testProps": "MAC with HMAC- SHA2-512",
            "type": "SW/FW Integrity"
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 1
      },
      "ssp_io_methods": {
        "entries": [
          {
            "dest": "TOEPP",
            "distribution": "Automated",
            "entry": "Electronic",
            "format": "Plaintext",
            "name": "Peer Public Key Input",
            "sfiAlgo": "",
            "source": "External (Outside of the TOEPP)"
          },
          {
            "dest": "External (Outside of the TOEPP)",
            "distribution": "Automated",
            "entry": "Electronic",
            "format": "Plaintext",
            "name": "Module Public Key Output",
            "sfiAlgo": "",
            "source": "TOEPP"
          },
          {
            "dest": "TOEPP",
            "distribution": "Automated",
            "entry": "Electronic",
            "format": "Encrypted",
            "name": "Secret Input via SSHv2 encrypted by AES and HMAC",
            "sfiAlgo": "KTS (SSHv2 with AES and HMAC)",
            "source": "External (Outside of the TOEPP)"
          },
          {
            "dest": "TOEPP",
            "distribution": "Automated",
            "entry": "Electronic",
            "format": "Encrypted",
            "name": "Secret Input via TLS encrypted by GCM",
            "sfiAlgo": "KTS (TLSv1.2 with AES- GCM)",
            "source": "External (Outside of the Module\u0027s Boundary)"
          },
          {
            "dest": "TOEPP",
            "distribution": "Automated",
            "entry": "Electronic",
            "format": "Encrypted",
            "name": "Secret Input via TLS encrypted by AES and HMAC",
            "sfiAlgo": "KTS (TLSv1.2 with AES and HMAC)",
            "source": "External (Outside of the Module\u0027s Boundary)"
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 2
      },
      "ssp_zeroization_methods": {
        "entries": [
          {
            "description": "CO issues zeroization service",
            "method": "Zeroization Command",
            "operatorId": "Delete the virtual machine from the VMware ESXi host.",
            "rationale": "The zeroization command will erase all SSPs stored in the DRAM of the module."
          },
          {
            "description": "Zeroization upon session termination",
            "method": "Session Termination",
            "operatorId": "Terminate Session",
            "rationale": "Session termination will automatically zeroize all session based temporary SSPs"
          },
          {
            "description": "Zeroization upon rebooting the module",
            "method": "Reboot",
            "operatorId": "Reboot",
            "rationale": "Reboot to zeroize all temporary SSPs stored in volatile memory"
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 3
      },
      "storage_areas": {
        "entries": [
          {
            "description": "Volatile memory provided by the ESXi host for the module temporary.",
            "name": "DRAM",
            "persistance": "Dynamic"
          },
          {
            "description": "Non-Volatile memory provided by the ESXi host for the module to retain memory across power-cycles.",
            "name": "Flash",
            "persistance": "Static"
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 1
      },
      "tested_module_id_hw": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "tested_module_id_hw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "tested_module_id_sw_fw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "tested_op_env_sw_fw_hy": {
        "entries": [
          {
            "hardwarePlatform": "UCS C220 M5S SFF Server",
            "hypervisorHostOs": "VMware ESXi 6.7",
            "operatingSystem": "Linux 4 (FX-OS) on VMware ESXi 6.7",
            "paa_pai": "Yes",
            "processors": "Intel Xeon Gold 6128 (Skylake)",
            "version": "7.0.5"
          },
          {
            "hardwarePlatform": "UCS C220 M5S SFF Server",
            "hypervisorHostOs": "VMware ESXi 6.7",
            "operatingSystem": "Linux 4 (FX-OS) on VMware ESXi 6.7",
            "paa_pai": "No",
            "processors": "Intel Xeon Gold 6128 (Skylake)",
            "version": "7.0.5"
          },
          {
            "hardwarePlatform": "UCS C220 M5S SFF Server",
            "hypervisorHostOs": "VMware ESXi 7.0",
            "operatingSystem": "Linux 4 (FX-OS) on VMware ESXi 7.0",
            "paa_pai": "Yes",
            "processors": "Intel Xeon Gold 6128 (Skylake)",
            "version": "7.0.5"
          },
          {
            "hardwarePlatform": "UCS C220 M5S SFF Server",
            "hypervisorHostOs": "VMware ESXi 7.0",
            "operatingSystem": "Linux 4 (FX-OS) on VMware ESXi 7.0",
            "paa_pai": "No",
            "processors": "Intel Xeon Gold 6128 (Skylake)",
            "version": "7.0.5"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 2
      },
      "vendor_affirmed_algos": {
        "entries": [
          {
            "algoPropList": "Key Type:Asymmetric",
            "implName": "N/A",
            "name": "CKG",
            "reference": "The cryptographic module performs Cryptographic Key Generation (CKG) for asymmetric keys as per sections 4 and 5 in SP800-133rev2 (vendor affirmed) and FIPS 140-3 IG D.H. A seed (i.e., the random value) used in asymmetric key generation is a direct output from SP800-90Arev1 CTR_DRBG (A2952/A3376)"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 5
      },
      "vendor_affirmed_op_env_sw_fw_hy": {
        "entries": [
          {
            "hardwarePlatform": "C220 M5 w/KVM/AWS",
            "operatingSystem": "Linux 4 (FX-OS)"
          },
          {
            "hardwarePlatform": "C240 M5 w/ESXi/KVM/AWS",
            "operatingSystem": "Linux 4 (FX-OS)"
          },
          {
            "hardwarePlatform": "C480 M5 w/ESXi/KVM/AWS",
            "operatingSystem": "Linux 4 (FX-OS)"
          },
          {
            "hardwarePlatform": "E160-M3 w/ESXi/KVM/AWS",
            "operatingSystem": "Linux 4 (FX-OS)"
          },
          {
            "hardwarePlatform": "E180D-M3 w/ESXi/KVM/AWS",
            "operatingSystem": "Linux 4 (FX-OS)"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 2
      }
    },
    "is_br1_format": true,
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 2
          },
          "ECDH": {
            "ECDH": 28
          },
          "ECDSA": {
            "ECDSA": 43
          }
        },
        "FF": {
          "DH": {
            "DH": 25
          },
          "DSA": {
            "DSA": 2
          }
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "GCM": {
          "GCM": 6
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "SSH": {
          "SSH": 68,
          "SSHv2": 62
        },
        "TLS": {
          "TLS": {
            "TLS": 84,
            "TLS 1.2": 1,
            "TLS v1.2": 6,
            "TLSv1.2": 83
          }
        }
      },
      "crypto_scheme": {
        "KA": {
          "Key Agreement": 2
        },
        "MAC": {
          "MAC": 14
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-256": 36,
          "P-384": 36,
          "P-521": 36
        }
      },
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "#1": 1
        }
      },
      "fips_certlike": {
        "Certlike": {
          "- PKCS 1": 4,
          "AES-128": 3,
          "AES-192": 2,
          "AES-256": 5,
          "DRBG 384": 1,
          "HMAC- SHA-1": 1,
          "HMAC-SHA-1": 10,
          "PKCS 1": 4,
          "SHA-1": 9,
          "SHA2": 1,
          "SHA2- 256": 5,
          "SHA2- 384": 1,
          "SHA2- 512": 1,
          "SHA2-224": 2,
          "SHA2-256": 11,
          "SHA2-384": 11,
          "SHA2-512": 14
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 3,
          "level 1": 1
        }
      },
      "hash_function": {
        "SHA": {
          "SHA1": {
            "SHA-1": 9
          },
          "SHA2": {
            "SHA2": 1
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 72
        },
        "RNG": {
          "RBG": 2
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-3": 9,
          "FIPS 1403": 2,
          "FIPS 180-4": 8,
          "FIPS 186-4": 15,
          "FIPS 186-5": 1,
          "FIPS 198-1": 8,
          "FIPS186-4": 28
        },
        "ISO": {
          "ISO/IEC 19790": 2
        },
        "NIST": {
          "NIST SP 800-140F": 1,
          "SP 800-135": 4,
          "SP 800-140": 1,
          "SP 800-38A": 2,
          "SP 800-38D": 2,
          "SP 800-38F": 2,
          "SP 800-52": 1,
          "SP 800-56A": 6,
          "SP 800-90A": 2
        },
        "PKCS": {
          "PKCS 1": 4
        },
        "RFC": {
          "RFC 4419": 2,
          "RFC 5288": 1,
          "RFC7627": 4
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 21,
            "AES-": 1,
            "AES-128": 3,
            "AES-192": 2,
            "AES-256": 5
          },
          "CAST": {
            "CAST": 18
          }
        },
        "DES": {
          "3DES": {
            "TDES": 2
          }
        },
        "constructions": {
          "MAC": {
            "HMAC": 17
          }
        }
      },
      "tee_name": {
        "AMD": {
          "PSP": 7
        }
      },
      "tls_cipher_suite": {},
      "vendor": {
        "Cisco": {
          "Cisco": 10,
          "Cisco Systems": 3,
          "Cisco Systems, Inc": 44
        }
      },
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "SHA-1A3376",
        "HMAC-SHA2-512A3376",
        "HMAC-SHA2-384A3376",
        "Counter DRBGA3376",
        "RSA SigGen (FIPS186-4)A3376",
        "SHA2-384A3376",
        "HMAC-SHA-1A3376",
        "KAS-ECC-SSC Sp800-56Ar3A3376",
        "RSA SigVer (FIPS186-4)A3376",
        "AES-GCMA3376",
        "ECDSA KeyGen (FIPS186-4)A3376",
        "KDF SSHA3376",
        "TLS v1.2 KDF RFC7627A3376",
        "AES-CBCA3376",
        "Safe Primes Key GenerationA3376",
        "KAS-FFC-SSC Sp800-56Ar3A3376",
        "HMAC-SHA2-256A3376",
        "RSA KeyGen (FIPS186-4)A3376",
        "ECDSA SigGen (FIPS186-4)A3376",
        "ECDSA SigVer (FIPS186-4)A3376",
        "SHA2-256A3376",
        "SHA2-512A3376"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#A3376",
        "#A2952"
      ]
    },
    "policy_metadata": {
      "/CreationDate": "D:20260706100852-04\u002700\u0027",
      "/Creator": "Microsoft\u00ae Word for Microsoft 365",
      "/ModDate": "D:20260706100852-04\u002700\u0027",
      "/Producer": "Microsoft\u00ae Word for Microsoft 365",
      "pdf_file_size_bytes": 624751,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 39
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "eae4a052dd9f66efab99480a89f0b2868814796045f54b53ff0451aa31b58f07",
      "source_hash": "16afe7924169f60872f996dbf7abb7030979246db4d54e2e654c928f57710138",
      "txt_hash": "42ad147dbbe4c09fa5172766a6f31eb3e245d5077e96ad3c82b929a3ee92d891"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When installed, initialized and configured as specified in Section Life-Cycle Assurance of the Security Policy. No assurance of the minimum strength of generated SSPs (e.g., keys). No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/July 2026_040826_0807.pdf",
    "date_sunset": "2029-06-16",
    "description": "Cisco FMCv Module provides complete and unified management over firewalls, application control, intrusion prevention, URL filtering, and advanced malware protection. Delivering in-depth analysis, streamlined security management across the network and cloud, and accelerated incident investigation and response, working across Cisco and third-party technologies.",
    "embodiment": "MultiChipStand",
    "exceptions": [
      "Physical security: N/A",
      "Non-invasive security: N/A",
      "Mitigation of other attacks: N/A"
    ],
    "fw_versions": null,
    "historical_reason": null,
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {},
    "module_name": "Firepower Management Center Virtual VMware Cryptographic Module",
    "module_type": "Software",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2026-07-09",
        "lab": "Gossamer Security Solutions",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Cisco Systems, Inc",
    "vendor_url": "http://www.cisco.com"
  }
}