{"_type": "sec_certs.sample.fips.FIPSCertificate", "dgst": "3cd7b476b240ffbe", "cert_id": 5472, "web_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.WebData", "module_name": "Cisco ASA FX-OS on 4K/9K Cryptographic Module", "validation_history": [{"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry", "date": "2026-08-06", "validation_type": "Initial", "lab": "Gossamer Security Solutions"}], "vendor_url": "http://www.cisco.com", "vendor": "Cisco Systems, Inc.", "certificate_pdf_url": null, "module_type": "Hardware", "standard": "FIPS 140-3", "status": "active", "level": 2, "caveat": "When operated in approved mode; The tamper evident seals and Physical Kit installed as indicated in the Security Policy; No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs; This module contains the embedded module [Cisco Adaptive Security Appliance on 4K/9K Cryptographic Module] validated to FIPS 140-3 under Cert. #5287 operating in approved mode.", "exceptions": ["Roles, services, and authentication: Level 3", "Operational environment: N/A", "Non-invasive security: N/A", "Mitigation of other attacks: N/A"], "embodiment": "MultiChipStand", "description": "Cisco ASA FX-OS on 4K/9K Cryptographic Module is an integrated network security system providing enterprise-class firewall with a comprehensive range of next-generation network security services, intrusion prevention system (IPS), content security and secure unified communications, HTTPS/TLSv1.2, SSHv2, IPsec/IKEv2, SNMPv3 and Cryptographic Cipher Suite B using the ASA Cryptographic Module.", "tested_conf": null, "hw_versions": null, "fw_versions": null, "sw_versions": null, "mentioned_certs": {"5287": 1}, "historical_reason": null, "date_sunset": "2031-08-05", "revoked_reason": null, "revoked_link": null}, "pdf_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData", "keywords": {"fips_cert_id": {"Cert": {"#5287": 2, "#1": 2}}, "fips_security_level": {"Level": {"Level 2": 2, "Level 1": 1}}, "fips_certlike": {"Certlike": {"HMAC-SHA-1": 18, "HMAC- SHA-1": 4, "SHA2-256": 14, "SHA2-384": 14, "SHA2- 512": 13, "SHA-1": 19, "SHA2-224": 4, "SHA2- 256": 17, "SHA2-512": 9, "SHA3-256": 1, "SHA2- 384": 3, "RSA 2048": 3, "- PKCS 1": 4, "AES-128": 6, "AES-192": 4, "AES-256": 5, "DRBG 384": 2, "PKCS 1": 4}}, "vendor": {"Cisco": {"Cisco Systems, Inc": 161, "Cisco": 85}}, "eval_facility": {}, "symmetric_crypto": {"AES_competition": {"AES": {"AES-128": 6, "AES-192": 4, "AES-256": 5, "AES": 101, "AES-": 18}, "CAST": {"CAST": 112}}, "DES": {"3DES": {"3DES": 12}}, "constructions": {"MAC": {"HMAC": 99}}}, "asymmetric_crypto": {"RSA": {"RSA 2048": 3}, "ECC": {"ECDH": {"ECDH": 181, "ECDHE": 2}, "ECDSA": {"ECDSA": 165}, "ECC": {"ECC": 6}}, "FF": {"DH": {"Diffie-Hellman": 5, "DH": 176}, "DSA": {"DSA": 3}}}, "pq_crypto": {}, "hash_function": {"SHA": {"SHA1": {"SHA-1": 19}, "SHA3": {"SHA3-256": 1}}}, "crypto_scheme": {"MAC": {"MAC": 10}}, "crypto_protocol": {"SSH": {"SSH": 248, "SSHv2": 286}, "TLS": {"TLS": {"TLS v1.2": 12, "TLSv1.2": 291, "TLSv1.3": 8, "TLS": 252}}, "IKE": {"IKEv2": 136, "IKE": 3}, "IPsec": {"IPsec": 2}, "VPN": {"VPN": 6}}, "randomness": {"PRNG": {"DRBG": 175}, "RNG": {"RBG": 2}}, "cipher_mode": {"CTR": {"CTR": 1}, "GCM": {"GCM": 22}}, "ecc_curve": {"NIST": {"P-256": 40, "P-384": 104, "P-521": 104, "secp256r1": 2, "secp384r1": 2, "secp521r1": 2}}, "crypto_engine": {}, "tls_cipher_suite": {}, "crypto_library": {}, "vulnerability": {}, "side_channel_analysis": {}, "device_model": {}, "tee_name": {"AMD": {"PSP": 36}, "IBM": {"SSC": 10}}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"FIPS": {"FIPS 140-3": 9, "FIPS186-4": 51, "FIPS 186-4": 14, "FIPS 198-1": 14, "FIPS 180-4": 14}, "NIST": {"SP 800-140": 1, "SP 800-38A": 3, "SP 800-38D": 3, "SP 800-90A": 2, "SP 800-56A": 6, "SP 800-135": 8, "SP 800-52": 1}, "PKCS": {"PKCS 1": 4}, "RFC": {"RFC7627": 6, "RFC 5647": 4, "RFC 5288": 1, "RFC 7296": 2, "RFC 4419": 2, "RFC 7919": 2, "RFC 3526": 2, "RFC 4492": 1, "RFC 5903": 1}, "ISO": {"ISO/IEC 19790": 2}}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {"OutOfScope": {"out of scope": 2, "fails. Any firmware loaded into the module that is not shown on the module certificate, is out of scope of this validation and requires a separate FIPS 140-3 validation. 4.6 Bypass Actions and Status The": 1, "Table 2 above. Any firmware loaded into the module that is not shown on the module certificate, is out of scope of this validation and requires a separate FIPS 140-3 validation. The Crypto Officer must configure": 1}}}, "policy_metadata": {"pdf_file_size_bytes": 2507049, "pdf_is_encrypted": false, "pdf_number_of_pages": 149, "/Author": "JustinBettencourt", "/ClassificationContentMarkingHeaderFontProps": "#008000,10,Aptos", "/ClassificationContentMarkingHeaderShapeIds": "4904260,4a636302,42523a10", "/ClassificationContentMarkingHeaderText": "UNCLASSIFIED / NON CLASSIFI\u00c9//TLP:AMBER+STRICT", "/Comments": "", "/Company": "", "/CreationDate": "D:20260805120019-04'00'", "/Creator": "Acrobat PDFMaker 26 for Word", "/Keywords": "", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_ActionId": "1a4c8ff1-d7c4-462b-9eb4-0b0e7a638f65", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_ContentBits": "1", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_Enabled": "true", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_Method": "Privileged", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_Name": "TLP-Amber_Strict", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_SetDate": "2026-08-05T15:52:12Z", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_SiteId": "da9cbe40-ec1e-4997-afb3-17d87574571a", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_Tag": "10, 0, 1, 1", "/ModDate": "D:20260805120412-04'00'", "/Producer": "Adobe PDF Library 26.1.187", "/SourceModified": "", "/Subject": "", "/Title": "", "pdf_hyperlinks": {"_type": "Set", "elements": ["https://www.cisco.com/c/dam/en/us/td/i/400001-500000/410001-420000/411001-412000/411270.jpg", "https://www.cisco.com/c/en/us/td/docs/security/firepower/4100/hw/guide/b_install_guide_4100/overview.html#concept_4386239138B84D40979C3AFA97BA852D", "https://www.cisco.com/c/en/us/td/docs/security/firepower/fxos/CLI_Reference_Guide/b_FXOS_CLI_reference/b_CLI_reference_chapter_0100.html", "https://www.cisco.com/c/en/us/td/docs/security/firepower/4100/hw/guide/b_install_guide_4100/overview.html#concept_5D7C952A9363415CB14DB5175EE46654", "https://www.cisco.com/c/dam/en/us/td/i/400001-500000/420001-430000/421001-422000/421569.jpg", "https://www.cisco.com/c/en/us/td/docs/security/firepower/4100/hw/guide/b_install_guide_4100/mount_and_connect.html#id_12047", "https://www.cisco.com/c/en/us/td/docs/security/firepower/quick_start/fp4100/firepower-4100-gsg.html", "https://www.cisco.com/c/en/us/products/collateral/security/firepower-9000-series/datasheet-c78-742471.html", "https://www.cisco.com/c/dam/en/us/td/i/400001-500000/420001-430000/421001-422000/421282.jpg", "https://www.cisco.com/c/en/us/products/collateral/security/firepower-4100-series/datasheet-c78-742474.html", "https://www.cisco.com/c/dam/en/us/td/i/400001-500000/420001-430000/421001-422000/421625.jpg"]}}}, "heuristics": {"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics", "algorithms": {"_type": "Set", "elements": ["AES-CBCC1026", "ECDSA SigGen (FIPS186-4)A4446", "KDF IKEv2A4446", "RSA SigGen (FIPS186-4)A4446", "ECDSA SigVer (FIPS186-4)A4446", "KAS-FFC-SSC Sp800-56Ar3A4446", "SHA2-256C1026", "AES-GCMC1026", "HMAC-SHA2-384C1026", "HMAC-SHA2-224A4446", "Counter DRBGA4446", "SHA-1C1026", "HMAC-SHA2-512C1026", "SHA2-224A4446", "KAS-ECC-SSC Sp800-56Ar3A4446", "Safe Primes Key GenerationA4446", "HMAC-SHA-1C1026", "KDF SNMPA4446", "HMAC-SHA2-256C1026", "RSA SigVer (FIPS186-4)A4446", "ECDSA KeyGen (FIPS186-4)A4446", "SHA2-512C1026", "KDF SSHA4446", "RSA KeyGen (FIPS186-4)A4446", "SHA2-384C1026", "TLS v1.2 KDF RFC7627A4446"]}, "extracted_versions": {"_type": "Set", "elements": ["-"]}, "cpe_matches": null, "verified_cpe_matches": null, "related_cves": null, "policy_prunned_references": {"_type": "Set", "elements": ["5287"]}, "module_prunned_references": {"_type": "Set", "elements": ["5287"]}, "policy_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": {"_type": "Set", "elements": ["5287"]}, "indirectly_referencing": {"_type": "Set", "elements": ["5287"]}}, "module_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": {"_type": "Set", "elements": ["5287"]}, "indirectly_referencing": {"_type": "Set", "elements": ["5287"]}}, "direct_transitive_cves": null, "indirect_transitive_cves": null}, "state": {"_type": "sec_certs.sample.fips.InternalState", "module": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": null, "txt_hash": null, "json_hash": null}, "policy": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "af435355f8ad7bb12088264e388317c2925485a2fbf7147971aa45a6f698588b", "txt_hash": "48e487e4dc6db509c3b14f39eea94923e2a5a2380c7e4bf58c4c2e5d6347ae72", "json_hash": null}}}