Aruba 2930M, 3810M and 5400R zl2 Switch Series

Certificate details

Certificate ID #3165
Status historical
Historical reason Moved to historical list due to sunsetting
Validation dates 04.04.2018
Standard FIPS 140-2
Security level 1
Type Hardware
Embodiment Multi-Chip Stand Alone
Caveat When operated in FIPS mode
Exceptions
  • Roles, Services, and Authentication: Level 3
  • Design Assurance: Level 2
  • Mitigation of Other Attacks: N/A
Description The Aruba 2930M and 3810M Switch Series are designed for customers creating digital workplaces that are optimized for mobile users with an integrated wired and wireless approach. These Layer 3 access switches support 10GbE and 40GbE uplinks, Dual Modular Power Supplies, full PoE+, HPE Smart Rate, ACLs, robust QoS, RIP, OSPF routing, Tunnel Node, PIM, VRRP and IPv6. The Aruba 5400R zl2 Switch Series is an industry-leading mobile campus access chassis solution with HPE Smart Rate multi-gigabit ports.
Version (Hardware) Aruba 2930M Switches (JL319A, JL320A, JL321A, JL322A, JL323A, and JL324A) [1] with Expansion Cards listed in Table 2 of the Security Policy, Aruba 3810M Switches (JL071A, JL072A, JL073A, JL074A, JL075A, and JL076A) [2] with Expansion Cards listed in Table 3 of the Security Policy, Aruba 5400R zl2 Switches (5406R zl2 J9821A and 5412R zl2 J9822A) [3] with Management card and Interface Cards listed in Table 4 of the Security Policy
Version (Firmware) WC.16.04.0011 [1] and KB.16.04.0011 [2] or [3]
Vendor Hewlett Packard Enterprise http://www.hpe.com/networking
Lab Gossamer Security Solutions
Algorithms
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.

Security policy

Extracted keywords

Symmetric Algorithms
AES, AES-256, AES-, AES-128, DES, Triple-DES, HMAC
Asymmetric Algorithms
RSA 2048, ECDH, ECDSA, Diffie-Hellman, DSA
Hash functions
SHA-1, SHA1, SHA-224, SHA-256, SHA-384, SHA-512, MD5
Schemes
Key Agreement, Key agreement
Protocols
SSH, SSHv2, SSL, TLS
Randomness
DRBG
Elliptic Curves
P-256, P-384
Block cipher modes
CBC, CTR, GCM

Security level
Level 1

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

No automatically derived data are available in this section.

Cross-references

No references are available for this certificate.

Processing updates

Feed
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 3165,
  "dgst": "8d57a52196dfab70",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "#2665",
        "#2555",
        "#1705",
        "CVL#1491",
        "#3249",
        "HMAC#3249",
        "SHS#3991",
        "#4853",
        "RSA#2665",
        "#3991",
        "Triple-DES#2555",
        "DRBG#1705",
        "#1491",
        "AES#4853"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "16.04.0011"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "br1_deviations": 40,
    "br1_tables": null,
    "is_br1_format": false,
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECDH": {
            "ECDH": 1
          },
          "ECDSA": {
            "ECDSA": 1
          }
        },
        "FF": {
          "DH": {
            "Diffie-Hellman": 7
          },
          "DSA": {
            "DSA": 1
          }
        },
        "RSA": {
          "RSA 2048": 8
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 2
        },
        "CTR": {
          "CTR": 2
        },
        "GCM": {
          "GCM": 1
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "SSH": {
          "SSH": 33,
          "SSHv2": 10
        },
        "TLS": {
          "SSL": {
            "SSL": 1
          },
          "TLS": {
            "TLS": 29
          }
        }
      },
      "crypto_scheme": {
        "KA": {
          "Key Agreement": 2,
          "Key agreement": 1
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-256": 4,
          "P-384": 4
        }
      },
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "#1491": 1,
          "#1705": 2,
          "#2": 1,
          "#2555": 1,
          "#2665": 3,
          "#3249": 1,
          "#3991": 1,
          "#4853": 2
        }
      },
      "fips_certlike": {
        "Certlike": {
          "#1705 DRBG": 1,
          "#2665 RSA": 3,
          "#3249 HMAC": 1,
          "#3991 SHS": 1,
          "#4853 AES": 1,
          "AES #4853": 2,
          "AES 128": 1,
          "AES 256": 1,
          "AES-128": 1,
          "AES-256": 1,
          "AES-CBC 128": 1,
          "CVL #1491": 1,
          "DRBG #1705": 1,
          "DRBG Cert. #1705": 1,
          "Diffie- Hellman 2048": 1,
          "Diffie- Hellman 224": 1,
          "HMAC #3249": 2,
          "HMAC-SHA1": 4,
          "HMAC-SHA1 160": 2,
          "PKCS1": 4,
          "RSA #2665": 3,
          "RSA 2048": 8,
          "SHA-1": 4,
          "SHA-224": 1,
          "SHA-256": 7,
          "SHA-384": 2,
          "SHA-512": 3,
          "SHA1": 1,
          "SHS #3991": 1
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 5
        }
      },
      "hash_function": {
        "MD": {
          "MD5": {
            "MD5": 5
          }
        },
        "SHA": {
          "SHA1": {
            "SHA-1": 4,
            "SHA1": 1
          },
          "SHA2": {
            "SHA-224": 1,
            "SHA-256": 7,
            "SHA-384": 2,
            "SHA-512": 3
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 22
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-2": 50,
          "FIPS 180-4": 1,
          "FIPS 186-4": 3,
          "FIPS 197": 1,
          "FIPS 198-1": 1,
          "FIPS PUB 140-2": 2
        },
        "NIST": {
          "SP 800-133": 1,
          "SP 800-38A": 1,
          "SP 800-38D": 1,
          "SP 800-67": 1,
          "SP 800-90A": 7,
          "SP 800-90a": 1
        },
        "PKCS": {
          "PKCS1": 2
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 7,
            "AES-": 1,
            "AES-128": 1,
            "AES-256": 1
          }
        },
        "DES": {
          "3DES": {
            "Triple-DES": 6
          },
          "DES": {
            "DES": 5
          }
        },
        "constructions": {
          "MAC": {
            "HMAC": 3
          }
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "CVL#1491",
        "HMAC#3249",
        "SHS#3991",
        "RSA#2665",
        "Triple-DES#2555",
        "DRBG#1705",
        "AES#4853"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#2665",
        "#1705",
        "#3249",
        "#3991",
        "#1491",
        "#2555",
        "#4853"
      ]
    },
    "policy_metadata": {
      "/Author": "[email protected]",
      "/CreationDate": "D:20180329171646-04\u002700\u0027",
      "/Creator": "Microsoft\u00ae Word 2013",
      "/ModDate": "D:20180329171646-04\u002700\u0027",
      "/Producer": "Microsoft\u00ae Word 2013",
      "/Title": "HPE Aruba 2930F Security Policy",
      "pdf_file_size_bytes": 1788114,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "https://csrc.nist.gov/Projects/Cryptographic-Algorithm-Validation-Program/Validation/Validation-List/Component#1491",
          "https://csrc.nist.gov/Projects/Cryptographic-Algorithm-Validation-Program/Validation/Validation-List/TDES#2555",
          "https://csrc.nist.gov/Projects/Cryptographic-Algorithm-Validation-Program/Validation/Validation-List/DRBG#1705",
          "http://csrc.nist.gov/groups/STM/cmvp",
          "http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140val-all.htm",
          "https://csrc.nist.gov/Projects/Cryptographic-Algorithm-Validation-Program/Validation/Validation-List/RSA#2665",
          "file:///C:/Users/sweingart/AppData/Local/Microsoft/Windows/Temporary%20Internet%20Files/Content.Outlook/V3LN0ZO3/www.hpe.com",
          "http://www.arubanetworks.com/",
          "https://www.hpe.com/us/en/networking/switches.html",
          "https://csrc.nist.gov/Projects/Cryptographic-Algorithm-Validation-Program/Validation/Validation-List/AES#4853",
          "https://www.cse-cst.gc.ca/en",
          "http://h20566.www2.hpe.com/hpsc/doc/public/display?sp4ts.oid=1008995294\u0026docLocale=en_US\u0026docId=emr_na-c05163011",
          "http://www.hpe.com./",
          "https://csrc.nist.gov/Projects/Cryptographic-Algorithm-Validation-Program/Validation/Validation-List/SHS#3991",
          "http://h17007.www1.hpe.com/us/en/networking/library/#.WqnKvTaWzSd",
          "https://csrc.nist.gov/Projects/Cryptographic-Algorithm-Validation-Program/Validation/Validation-List/HMAC#3249"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 41
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "05ea0b68e698a676446db9ec52b0cd96a15373a0c817c39d2ef4c5a33e5ce910",
      "source_hash": "be4097a8daf53105b3ab4ced53f8c71d291b6f9db13ba4f3945fee3d3e0a7355",
      "txt_hash": "ed369b7527db29f393c2e3ee7f48d870a2e2df07bf74e8b3187b7fe5ca496faa"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When operated in FIPS mode",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/AprilConsolidated2018.pdf",
    "date_sunset": null,
    "description": "The Aruba 2930M and 3810M Switch Series are designed for customers creating digital workplaces that are optimized for mobile users with an integrated wired and wireless approach. These Layer 3 access switches support 10GbE and 40GbE uplinks, Dual Modular Power Supplies, full PoE+, HPE Smart Rate, ACLs, robust QoS, RIP, OSPF routing, Tunnel Node, PIM, VRRP and IPv6. The Aruba 5400R zl2 Switch Series is an industry-leading mobile campus access chassis solution with HPE Smart Rate multi-gigabit ports.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": [
      "Roles, Services, and Authentication: Level 3",
      "Design Assurance: Level 2",
      "Mitigation of Other Attacks: N/A"
    ],
    "fw_versions": "WC.16.04.0011 [1] and KB.16.04.0011 [2] or [3]",
    "historical_reason": "Moved to historical list due to sunsetting",
    "hw_versions": "Aruba 2930M Switches (JL319A, JL320A, JL321A, JL322A, JL323A, and JL324A) [1] with Expansion Cards listed in Table 2 of the Security Policy, Aruba 3810M Switches (JL071A, JL072A, JL073A, JL074A, JL075A, and JL076A) [2] with Expansion Cards listed in Table 3 of the Security Policy, Aruba 5400R zl2 Switches (5406R zl2 J9821A and 5412R zl2 J9822A) [3] with Management card and Interface Cards listed in Table 4 of the Security Policy",
    "level": 1,
    "mentioned_certs": {},
    "module_name": "Aruba 2930M, 3810M and 5400R zl2 Switch Series",
    "module_type": "Hardware",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-2",
    "status": "historical",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2018-04-04",
        "lab": "Gossamer Security Solutions",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Hewlett Packard Enterprise",
    "vendor_url": "http://www.hpe.com/networking"
  }
}