This page was not yet optimized for use on mobile devices.

AP-514, AP-515, AP-534, AP-535, AP-584, AP-585, AP-587, AP-635 and AP-655 Access Points

Certificate details

Certificate ID	#4916
Status	active
Validation dates	12.12.2024
Sunset date	11-12-2026
Standard	FIPS 140-3
Security level	2
Type	Hardware
Embodiment	Multi-Chip Stand Alone
Caveat	Interim validation. When operated in the approved mode, with tamper evident labels installed as indicated in the Security Policy
Exceptions	Operational environment: N/A Non-invasive security: N/A Mitigation of other attacks: N/A
Description	Aruba's 802.11 Wi-Fi access points operate at gigabit speeds, offering extreme performance for mobile devices. In FIPS 140-3 mode, Aruba APs in conjunction with a Mobility Controller support the WPA2/WPA3 client standard along with optional Suite B cryptography. Aruba APs also support wireless intrusion detection/prevention services and wireless mesh topologies.
Version (Hardware)	AP-514-USF1 (HPE SKU Q9H68A), AP-515-USF1 (HPE SKU Q9H73A), AP-534-USF1 (HPE SKU JZ342A), AP-535-USF1 (HPE SKU JZ347A), AP-584-US TAA (HPE SKU R7T14A), AP-584-RW TAA (HPE SKU R7T15A), AP-585-US TAA (HPE SKU R7T19A), AP-585-RW TAA (HPE SKU R7T20A), AP-587-US TAA (HPE SKU R7T24A), AP-587-RW TAA (HPE SKU R7T25A), AP-635-RW TAA (HPE SKU R7J32A), AP-635-US TAA (HPE SKU R7J33A), AP-655-RW TAA (HPE SKU R7J43A), AP-655-US TAA (HPE SKU R7J44A) with FIPS Kit 4011570-01 (HPE SKU JY894A)
Version (Firmware)	ArubaOS 8.10.0.5-FIPS
Vendor	Aruba, a Hewlett Packard Enterprise company http://www.arubanetworks.com
Lab	Lightship Security, Inc.
Algorithms	AES-CBCA2690 AES-CCMA2690 AES-CTRA2690 AES-ECBA2690 AES-GCMA2690 Counter DRBGA2690 DSA KeyGen (FIPS186-4)A2690 DSA PQGGen (FIPS186-4)A2690 ECDSA KeyGen (FIPS186-4)A2690 ECDSA KeyVer (FIPS186-4)A2690 ECDSA SigGen (FIPS186-4)A2690 ECDSA SigVer (FIPS186-4)A2690 HMAC-SHA-1A2690 HMAC-SHA2-256A2690 HMAC-SHA2-384A2690 KAS-ECC-SSC Sp800-56Ar3A2690 KAS-FFC-SSC Sp800-56Ar3A2690 KDA TwoStep Sp800-56Cr1A2690 KDF IKEv1A2690 KDF IKEv2A2689 KDF SP800-108A2690 RSA KeyGen (FIPS186-4)A2690 RSA SigGen (FIPS186-4)A2690 RSA Signature PrimitiveA2690 RSA SigVer (FIPS186-2)A2690 RSA SigVer (FIPS186-4)A2690 Safe Primes Key GenerationA2690 Safe Primes Key VerificationA2690 SHA-1A2690 SHA2-256A2690 SHA2-384A2690 SHA2-512A2690 SHA3-256A2738
References	This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.

Certificate

Webpage

Security policy

Security policy PDF TXT

Extracted keywords

Symmetric Algorithms

AES, AES-256, RC4, DES, Triple-DES, HMAC

Asymmetric Algorithms

ECDH, ECDSA, ECC, DH, Diffie-Hellman, DSA

Hash functions

SHA-1, SHA3-256, SHA-3, MD5

Schemes

Key Exchange, Key Agreement

Protocols

SSHv2, SSH, IKE, IKEv1, IKEv2, IPsec, VPN

Randomness

DRBG

Libraries

OpenSSL

Elliptic Curves

P-256, P-384

Block cipher modes

ECB, CBC, CTR, GCM, CCM

Trusted Execution Environments

PSP

Vendor

Qualcomm, Broadcom

Security level

Level 2

Certification process

out of scope, i.e. out of scope of module, - An un-provisioned AP, which by default does not serve any wireless clients, is out of scope of this validation, An un-provisioned AP, which by default does not serve any wireless clients, is out of scope of this validation, 11 Factory CA Public Key -PSP 2048 bits RSA N/A Loaded into the module during manufacturing (i.e. out of scope of module). Import: N/A Export: N/A N/A Stored in TPM Since this is a public key and protected in

Author	McGlashan, Dave
Creation date	D:20241029134347-04'00'
Modification date	D:20241029134538-04'00'
Pages	76
Creator	Acrobat PDFMaker 24 for Word
Producer	Adobe PDF Library 24.3.212

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

No automatically derived data are available in this section.

Cross-references

No references are available for this certificate.

Processing updates

24.09.2026

The certificate data changed.
Certificate changed

The PDF extraction data was updated.

The keywords property was updated, with the {'fips_certlike': {'__update__': {'Certlike': {'__insert__': {'AES CTR 256': 1}}}}, 'certification_process': {'__update__': {'OutOfScope': {'__insert__': {'- An un-provisioned AP, which by default does not serve any wireless clients, is out of scope of this validation': 1, 'An un-provisioned AP, which by default does not serve any wireless clients, is out of scope of this validation': 1, '11 Factory CA Public Key -PSP 2048 bits RSA N/A Loaded into the module during manufacturing (i.e. out of scope of module). Import: N/A Export: N/A N/A Stored in TPM Since this is a public key and protected in': 1}, '__delete__': ['mode of operation. - An un-provisioned AP, which by default does not serve any wireless clients, is out of scope of this validation. The Crypto Officer must ensure that the Wireless Access Point is kept in the', 'mode of operation. An un-provisioned AP, which by default does not serve any wireless clients, is out of scope of this validation. The Crypto Officer must ensure that the Wireless Access Point is kept in the', 'CA Public Key -PSP | 2048 bits | RSA | N/A Loaded into the module during manufacturing (i.e. out of scope of module). | Import: N/A Export: N/A | N/A | Stored in TPM | Since this is a public key and']}}}} data.

The br1_deviations property was set to 28.
23.09.2026

The certificate data changed.
Certificate changed

The PDF extraction data was updated.

The following values were inserted: {'is_br1_format': False, 'br1_deviations': 0, 'br1_tables': None}.

The keywords property was updated, with the {'fips_certlike': {'__update__': {'Certlike': {'__delete__': ['AES CTR 256']}}}, 'certification_process': {'__update__': {'OutOfScope': {'__insert__': {'mode of operation. - An un-provisioned AP, which by default does not serve any wireless clients, is out of scope of this validation. The Crypto Officer must ensure that the Wireless Access Point is kept in the': 1, 'mode of operation. An un-provisioned AP, which by default does not serve any wireless clients, is out of scope of this validation. The Crypto Officer must ensure that the Wireless Access Point is kept in the': 1, 'CA Public Key -PSP | 2048 bits | RSA | N/A Loaded into the module during manufacturing (i.e. out of scope of module). | Import: N/A Export: N/A | N/A | Stored in TPM | Since this is a public key and': 1}, '__delete__': ['- An un-provisioned AP, which by default does not serve any wireless clients, is out of scope of this validation', 'An un-provisioned AP, which by default does not serve any wireless clients, is out of scope of this validation', '11 Factory CA Public Key -PSP 2048 bits RSA N/A Loaded into the module during manufacturing (i.e. out of scope of module). Import: N/A Export: N/A N/A Stored in TPM Since this is a public key and protected in']}}}} data.
21.09.2026

The certificate data changed.
Certificate changed

The PDF extraction data was updated.

The following values were inserted: {'module_algorithms': {'_type': 'Set', 'elements': ['HMAC-SHA2-256A2690', 'Safe Primes Key VerificationA2690', 'ECDSA SigVer (FIPS186-4)A2690', 'KDF SP800-108A2690', 'AES-CTRA2690', 'AES-GCMA2690', 'SHA-1A2690', 'DSA KeyGen (FIPS186-4)A2690', 'ECDSA KeyVer (FIPS186-4)A2690', 'RSA SigVer (FIPS186-4)A2690', 'AES-ECBA2690', 'DSA PQGGen (FIPS186-4)A2690', 'Counter DRBGA2690', 'SHA2-512A2690', 'SHA2-256A2690', 'Safe Primes Key GenerationA2690', 'HMAC-SHA2-384A2690', 'RSA Signature PrimitiveA2690', 'RSA SigVer (FIPS186-2)A2690', 'RSA SigGen (FIPS186-4)A2690', 'KDF IKEv2A2689', 'RSA KeyGen (FIPS186-4)A2690', 'SHA2-384A2690', 'KAS-ECC-SSC Sp800-56Ar3A2690', 'ECDSA SigGen (FIPS186-4)A2690', 'KAS-FFC-SSC Sp800-56Ar3A2690', 'SHA3-256A2738', 'ECDSA KeyGen (FIPS186-4)A2690', 'AES-CBCA2690', 'AES-CCMA2690', 'HMAC-SHA-1A2690', 'KDF IKEv1A2690', 'KDA TwoStep Sp800-56Cr1A2690']}, 'policy_algorithms': {'_type': 'Set', 'elements': ['#A2688', '#A2738', '#A2689', '#A2690']}}.

The keywords property was updated, with the {'fips_security_level': {'__update__': {'Level': {'__delete__': ['Level 1']}}}, 'fips_certlike': {'__update__': {'Certlike': {'__insert__': {'SHA-1 4': 1, 'SHA-1 5': 1, 'SHA-1 10': 1, 'SHA-1 11': 1, 'AES-GCM 6': 1, 'AES-CBC 7': 1, 'AES-GCM 12': 1, 'AES-CBC 13': 1, 'DRBG 2': 1}, '__update__': {'SHA3-256': 4, 'SHA-1': 7, 'AES-256': 7}, '__delete__': ['SHA-14', 'SHA-15', 'SHA-110', 'SHA-111', 'AES-GCM6', 'AES-CBC7', 'AES-GCM12', 'AES-CBC13', 'DRBG2']}}}, 'vendor': {'__update__': {'Qualcomm': {'__update__': {'Qualcomm': 5}}}}, 'symmetric_crypto': {'__update__': {'AES_competition': {'__update__': {'AES': {'__update__': {'AES-256': 7}}}}, 'constructions': {'__update__': {'MAC': {'__update__': {'HMAC': 8}}}}}}, 'hash_function': {'__update__': {'SHA': {'__update__': {'SHA3': {'__update__': {'SHA3-256': 4}}}}}}, 'crypto_protocol': {'__update__': {'IKE': {'__update__': {'IKEv2': 26}}, 'VPN': {'__update__': {'VPN': 3}}}}, 'cipher_mode': {'__update__': {'GCM': {'__update__': {'GCM': 12}}}}, 'standard_id': {'__update__': {'FIPS': {'__update__': {'FIPS 140-3': 109}}, 'NIST': {'__update__': {'SP 800-90B': 3, 'SP 800-56A': 9}, '__delete__': ['SP 800-63B']}}}, 'certification_process': {'__update__': {'OutOfScope': {'__insert__': {'- An un-provisioned AP, which by default does not serve any wireless clients, is out of scope of this validation': 1, 'An un-provisioned AP, which by default does not serve any wireless clients, is out of scope of this validation': 1, '11 Factory CA Public Key -PSP 2048 bits RSA N/A Loaded into the module during manufacturing (i.e. out of scope of module). Import: N/A Export: N/A N/A Stored in TPM Since this is a public key and protected in': 1}, '__delete__': ['mode of operation. • An un-provisioned AP, which by default does not serve any wireless clients, is out of scope of this validation. The Crypto Officer must ensure that the Wireless Access Point is kept in the', 'mode of operation. An un-provisioned AP, which by default does not serve any wireless clients, is out of scope of this validation. The Crypto Officer must ensure that the Wireless Access Point is kept in the', '11 Factory CA Public Key –PSP 2048 bits RSA N/A Loaded into the module during manufacturing (i.e. out of scope of module). Import: N/A Export: N/A N/A Stored in TPM Since this is a public key and protected in']}}}} data.

The computed heuristics were updated.

The algorithms property was updated, with the {'_type': 'Set', 'elements': ['#A2688', '#A2738', '#A2689', '#A2690']} values added.

The state was updated.

The policy property was updated, with the {'txt_hash': 'e2184c5a7eb2b9ae376c0f1ebf18a2ee309c9834e4b3d0c6c589f83fcd39d260', 'json_hash': 'be5c3dc4124297867499a09e73701f2a7d3147b65fcb6e81899f5eead08fa309'} data.
20.06.2026

The certificate data changed.
Certificate changed

The web extraction data was updated.

The certificate_pdf_url property was set to https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/December 2024_060125_0402.pdf.
15.12.2025

The certificate data changed.
Certificate changed

The state was updated.

The following values were inserted: {'policy_json_hash': None}.

The following properties were deleted: ['policy_convert_garbage'].
20.10.2025

The certificate data changed.
Certificate changed

The web extraction data was updated.

The validation_history property was updated.
08.09.2025

The certificate data changed.
Certificate changed

The web extraction data was updated.

The validation_history property was updated.
04.04.2025

The certificate data changed.
Certificate changed

The PDF extraction data was updated.

The keywords property was updated, with the {'crypto_protocol': {'__update__': {'SSH': {'__insert__': {'SSHv2': 3}}}}} data.
24.02.2025

The certificate data changed.
Certificate changed

The web extraction data was updated.

The exceptions property was updated.
16.12.2024

The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 4916,
  "dgst": "10ec7498052c6366",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "Counter DRBGA2690",
        "ECDSA SigGen (FIPS186-4)A2690",
        "AES-CTRA2690",
        "SHA2-384A2690",
        "DSA PQGGen (FIPS186-4)A2690",
        "KDF IKEv1A2690",
        "SHA3-256A2738",
        "KDF SP800-108A2690",
        "ECDSA KeyVer (FIPS186-4)A2690",
        "RSA SigGen (FIPS186-4)A2690",
        "SHA-1A2690",
        "Safe Primes Key VerificationA2690",
        "#A2738",
        "Safe Primes Key GenerationA2690",
        "#A2689",
        "#A2688",
        "KAS-FFC-SSC Sp800-56Ar3A2690",
        "RSA SigVer (FIPS186-2)A2690",
        "HMAC-SHA2-384A2690",
        "RSA KeyGen (FIPS186-4)A2690",
        "AES-GCMA2690",
        "AES-CCMA2690",
        "KAS-ECC-SSC Sp800-56Ar3A2690",
        "SHA2-256A2690",
        "#A2690",
        "ECDSA KeyGen (FIPS186-4)A2690",
        "SHA2-512A2690",
        "HMAC-SHA2-256A2690",
        "HMAC-SHA-1A2690",
        "DSA KeyGen (FIPS186-4)A2690",
        "ECDSA SigVer (FIPS186-4)A2690",
        "KDA TwoStep Sp800-56Cr1A2690",
        "AES-CBCA2690",
        "RSA SigVer (FIPS186-4)A2690",
        "RSA Signature PrimitiveA2690",
        "AES-ECBA2690",
        "KDF IKEv2A2689"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "8.10.0.5"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "br1_deviations": 28,
    "br1_tables": null,
    "is_br1_format": false,
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 2
          },
          "ECDH": {
            "ECDH": 3
          },
          "ECDSA": {
            "ECDSA": 24
          }
        },
        "FF": {
          "DH": {
            "DH": 7,
            "Diffie-Hellman": 11
          },
          "DSA": {
            "DSA": 3
          }
        }
      },
      "certification_process": {
        "OutOfScope": {
          "- An un-provisioned AP, which by default does not serve any wireless clients, is out of scope of this validation": 1,
          "11 Factory CA Public Key -PSP 2048 bits RSA N/A Loaded into the module during manufacturing (i.e. out of scope of module). Import: N/A Export: N/A N/A Stored in TPM Since this is a public key and protected in": 1,
          "An un-provisioned AP, which by default does not serve any wireless clients, is out of scope of this validation": 1,
          "i.e. out of scope of module": 1,
          "out of scope": 3
        }
      },
      "cipher_mode": {
        "CBC": {
          "CBC": 6
        },
        "CCM": {
          "CCM": 4
        },
        "CTR": {
          "CTR": 3
        },
        "ECB": {
          "ECB": 2
        },
        "GCM": {
          "GCM": 12
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {
        "OpenSSL": {
          "OpenSSL": 24
        }
      },
      "crypto_protocol": {
        "IKE": {
          "IKE": 27,
          "IKEv1": 21,
          "IKEv2": 26
        },
        "IPsec": {
          "IPsec": 2
        },
        "SSH": {
          "SSH": 1,
          "SSHv2": 3
        },
        "VPN": {
          "VPN": 3
        }
      },
      "crypto_scheme": {
        "KA": {
          "Key Agreement": 2
        },
        "KEX": {
          "Key Exchange": 1
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-256": 46,
          "P-384": 38
        }
      },
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "#7": 2
        }
      },
      "fips_certlike": {
        "Certlike": {
          "AES CTR 256": 1,
          "AES-256": 7,
          "AES-CBC 13": 1,
          "AES-CBC 7": 1,
          "AES-GCM 12": 1,
          "AES-GCM 6": 1,
          "DRBG 2": 1,
          "HMAC-SHA- 1": 2,
          "HMAC-SHA-1": 20,
          "PKCS#1": 1,
          "PKCS1": 14,
          "RSA PKCS#1": 1,
          "SHA- 1": 1,
          "SHA-1": 7,
          "SHA-1 10": 1,
          "SHA-1 11": 1,
          "SHA-1 4": 1,
          "SHA-1 5": 1,
          "SHA-3": 3,
          "SHA2-256": 33,
          "SHA2-384": 18,
          "SHA2-512": 14,
          "SHA3-256": 4
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 2": 90
        }
      },
      "hash_function": {
        "MD": {
          "MD5": {
            "MD5": 2
          }
        },
        "SHA": {
          "SHA1": {
            "SHA-1": 11
          },
          "SHA3": {
            "SHA-3": 3,
            "SHA3-256": 4
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 35
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-3": 109,
          "FIPS 180-4": 3,
          "FIPS 186-2": 2,
          "FIPS 186-4": 11,
          "FIPS 197": 3,
          "FIPS 198-1": 4,
          "FIPS 202": 2
        },
        "ISO": {
          "ISO/IEC 19790:2012": 1,
          "ISO/IEC 24759": 2,
          "ISO/IEC 24759:2017": 1
        },
        "NIST": {
          "SP 800-108": 5,
          "SP 800-133": 1,
          "SP 800-135": 11,
          "SP 800-38A": 3,
          "SP 800-38D": 2,
          "SP 800-38F": 4,
          "SP 800-56A": 9,
          "SP 800-56C": 5,
          "SP 800-90A": 12,
          "SP 800-90B": 3
        },
        "PKCS": {
          "PKCS#1": 1,
          "PKCS1": 7
        },
        "RFC": {
          "RFC 4106": 1,
          "RFC 5282": 1,
          "RFC 7296": 1
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 26,
            "AES-256": 7
          },
          "RC": {
            "RC4": 1
          }
        },
        "DES": {
          "3DES": {
            "Triple-DES": 9
          },
          "DES": {
            "DES": 2
          }
        },
        "constructions": {
          "MAC": {
            "HMAC": 8
          }
        }
      },
      "tee_name": {
        "AMD": {
          "PSP": 5
        }
      },
      "tls_cipher_suite": {},
      "vendor": {
        "Broadcom": {
          "Broadcom": 1
        },
        "Qualcomm": {
          "Qualcomm": 5
        }
      },
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "Counter DRBGA2690",
        "ECDSA SigGen (FIPS186-4)A2690",
        "AES-CTRA2690",
        "SHA2-384A2690",
        "DSA PQGGen (FIPS186-4)A2690",
        "KDF IKEv1A2690",
        "SHA3-256A2738",
        "KDF SP800-108A2690",
        "ECDSA KeyVer (FIPS186-4)A2690",
        "RSA SigGen (FIPS186-4)A2690",
        "SHA-1A2690",
        "Safe Primes Key VerificationA2690",
        "Safe Primes Key GenerationA2690",
        "KAS-FFC-SSC Sp800-56Ar3A2690",
        "RSA SigVer (FIPS186-2)A2690",
        "HMAC-SHA2-384A2690",
        "RSA KeyGen (FIPS186-4)A2690",
        "AES-GCMA2690",
        "AES-CCMA2690",
        "KAS-ECC-SSC Sp800-56Ar3A2690",
        "SHA2-256A2690",
        "ECDSA KeyGen (FIPS186-4)A2690",
        "SHA2-512A2690",
        "HMAC-SHA2-256A2690",
        "HMAC-SHA-1A2690",
        "DSA KeyGen (FIPS186-4)A2690",
        "ECDSA SigVer (FIPS186-4)A2690",
        "KDA TwoStep Sp800-56Cr1A2690",
        "AES-CBCA2690",
        "RSA SigVer (FIPS186-4)A2690",
        "RSA Signature PrimitiveA2690",
        "AES-ECBA2690",
        "KDF IKEv2A2689"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#A2688",
        "#A2690",
        "#A2738",
        "#A2689"
      ]
    },
    "policy_metadata": {
      "/Author": "McGlashan, Dave",
      "/Comments": "",
      "/Company": "",
      "/CreationDate": "D:20241029134347-04\u002700\u0027",
      "/Creator": "Acrobat PDFMaker 24 for Word",
      "/Keywords": "",
      "/ModDate": "D:20241029134538-04\u002700\u0027",
      "/Producer": "Adobe PDF Library 24.3.212",
      "/SourceModified": "D:20241029174307",
      "/Subject": "",
      "/Title": "",
      "pdf_file_size_bytes": 2601030,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "https://csrc.nist.gov/projects/cryptographic-module-validation-program/entropy-validations/certificate/7",
          "https://csrc.nist.gov/projects/cryptographic-module-validation-program/validated-modules/search",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=15161",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=15163",
          "https://www.arubanetworks.com/",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=15162",
          "https://networkingsupport.hpe.com/downloads;pageSize=100;fileTypes=DOCUMENT;products=Aruba%20Access%20Points,Aruba%20Mobility%20Gateways;softwareGroups=ArubaOS;softwareMajorVersions=8.10",
          "http://www.arubanetworks.com/",
          "https://www.arubanetworks.com/open_source",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/Details?validation=35300",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=15237",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/Details?validation=35301",
          "https://csrc.nist.gov/projects/cryptographic-module-validation-program",
          "https://networkingsupport.hpe.com/end-of-life"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 76
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "be5c3dc4124297867499a09e73701f2a7d3147b65fcb6e81899f5eead08fa309",
      "source_hash": "eaa0a286fff125a0a95a7a706d96124edb085e4bef5ca0d251b651f70a75441c",
      "txt_hash": "e2184c5a7eb2b9ae376c0f1ebf18a2ee309c9834e4b3d0c6c589f83fcd39d260"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "Interim validation. When operated in the approved mode, with tamper evident labels installed as indicated in the Security Policy",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/December 2024_060125_0402.pdf",
    "date_sunset": "2026-12-11",
    "description": "Aruba\u0027s 802.11 Wi-Fi access points operate at gigabit speeds, offering extreme performance for mobile devices. In FIPS 140-3 mode, Aruba APs in conjunction with a Mobility Controller support the WPA2/WPA3 client standard along with optional Suite B cryptography. Aruba APs also support wireless intrusion detection/prevention services and wireless mesh topologies.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": [
      "Operational environment: N/A",
      "Non-invasive security: N/A",
      "Mitigation of other attacks: N/A"
    ],
    "fw_versions": "ArubaOS 8.10.0.5-FIPS",
    "historical_reason": null,
    "hw_versions": "AP-514-USF1 (HPE SKU Q9H68A), AP-515-USF1 (HPE SKU Q9H73A), AP-534-USF1 (HPE SKU JZ342A), AP-535-USF1 (HPE SKU JZ347A), AP-584-US TAA (HPE SKU R7T14A), AP-584-RW TAA (HPE SKU R7T15A), AP-585-US TAA (HPE SKU R7T19A), AP-585-RW TAA (HPE SKU R7T20A), AP-587-US TAA (HPE SKU R7T24A), AP-587-RW TAA (HPE SKU R7T25A), AP-635-RW TAA (HPE SKU R7J32A), AP-635-US TAA (HPE SKU R7J33A), AP-655-RW TAA (HPE SKU R7J43A), AP-655-US TAA (HPE SKU R7J44A) with FIPS Kit 4011570-01 (HPE SKU JY894A)",
    "level": 2,
    "mentioned_certs": {},
    "module_name": "AP-514, AP-515, AP-534, AP-535, AP-584, AP-585, AP-587, AP-635 and AP-655 Access Points",
    "module_type": "Hardware",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2024-12-12",
        "lab": "Lightship Security, Inc.",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Aruba, a Hewlett Packard Enterprise company",
    "vendor_url": "http://www.arubanetworks.com"
  }
}

Sections

AP-514, AP-515, AP-534, AP-535, AP-584, AP-585, AP-587, AP-635 and AP-655 Access Points

Certificate details

Security policy

Extracted keywords

Symmetric Algorithms

Asymmetric Algorithms

Hash functions

Schemes

Protocols

Randomness

Libraries

Elliptic Curves

Block cipher modes

Trusted Execution Environments

Vendor

Security level

Certification process

Standards

File metadata

Automated analysis

Automated inference - use with caution

Cross-references

Processing updates

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

New certificate

Raw data

Sections

AP-514, AP-515, AP-534, AP-535, AP-584, AP-585, AP-587, AP-635 and AP-655 Access Points

Certificate details

Security policy

Extracted keywords

Cryptography

Symmetric Algorithms

Asymmetric Algorithms

Hash functions

Schemes

Protocols

Randomness

Libraries

Elliptic Curves

Block cipher modes

Device

Trusted Execution Environments

Vendor

Security

Security level

Certification process

Other

Standards

File metadata

Automated analysis

Automated inference - use with caution

Cross-references

Processing updates

Raw data

Toggle raw data