{"_type": "sec_certs.sample.fips.FIPSCertificate", "dgst": "c34ae04b892e736b", "cert_id": 5353, "web_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.WebData", "module_name": "Panorama Virtual Appliance 11.1 and 11.2", "validation_history": [{"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry", "date": "2026-06-25", "validation_type": "Initial", "lab": "Leidos Accredited Testing & Evaluation (AT&E) Lab"}], "vendor_url": "http://www.paloaltonetworks.com", "vendor": "Palo Alto Networks, Inc.", "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/June 2026_080726_0648.pdf", "module_type": "Software", "standard": "FIPS 140-3", "status": "active", "level": 1, "caveat": "When installed, initialized and configured as specified in Section 11.1 of the Security Policy", "exceptions": ["Roles, services, and authentication: Level 3", "Physical security: N/A", "Non-invasive security: N/A", "Life-cycle assurance: Level 3", "Mitigation of other attacks: N/A"], "embodiment": "MultiChipStand", "description": "Panorama offers easy-to-implement, centralized management features that provide insight into network-wide traffic and simplify configurations.", "tested_conf": null, "hw_versions": null, "fw_versions": null, "sw_versions": null, "mentioned_certs": {}, "historical_reason": null, "date_sunset": "2031-06-24", "revoked_reason": null, "revoked_link": null}, "pdf_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData", "keywords": {"fips_cert_id": {}, "fips_security_level": {"Level": {"level 1": 1, "Level 1": 4}}, "fips_certlike": {"Certlike": {"HMAC-SHA-1": 4, "HMAC-SHA-256": 6, "HMAC- SHA-256": 1, "HMAC- SHA-1": 2, "SHA2-224": 3, "SHA2-256": 10, "SHA2-384": 5, "SHA2-512": 6, "SHA-1": 9, "SHA-256": 5, "SHA- 256": 1, "SHA2- 224": 1, "SHA2- 256": 2, "SHA2- 384": 2, "SHA2- 512": 2, "RSA 2048": 11, "RSA 3072": 1, "RSA 4096": 1, "PKCS 1": 4, "AES-256": 3, "AES-128": 1, "AES-192": 1, "AES 256": 2, "AES 128/192/256": 1, "AES (128": 1}}, "vendor": {"Microsoft": {"Microsoft": 2}}, "eval_facility": {}, "symmetric_crypto": {"AES_competition": {"AES": {"AES-256": 3, "AES-128": 1, "AES-192": 1, "AES": 41, "AES-": 11}, "CAST": {"CAST": 44}}, "constructions": {"MAC": {"HMAC": 42, "HMAC-SHA-256": 3, "CBC-MAC": 1}}}, "asymmetric_crypto": {"RSA": {"RSA 2048": 11, "RSA 3072": 1, "RSA 4096": 1}, "ECC": {"ECDH": {"ECDH": 6, "ECDHE": 2}, "ECDSA": {"ECDSA": 77}, "ECC": {"ECC": 16}}, "FF": {"DH": {"DH": 2, "DHE": 2}}}, "pq_crypto": {}, "hash_function": {"SHA": {"SHA1": {"SHA-1": 9}, "SHA2": {"SHA-256": 5}}}, "crypto_scheme": {"MAC": {"MAC": 3}, "KA": {"Key Agreement": 4}}, "crypto_protocol": {"SSH": {"SSH": 109, "SSHv2": 57}, "TLS": {"TLS": {"TLS v1.2": 9, "TLSv1.2": 72, "TLS": 93, "TLS 1.2": 1, "TLSv1.3": 1}}}, "randomness": {"PRNG": {"DRBG": 64}, "RNG": {"RBG": 2}}, "cipher_mode": {"ECB": {"ECB": 1}, "CBC": {"CBC": 2}, "CTR": {"CTR": 3}, "CFB": {"CFB": 1}, "GCM": {"GCM": 18}}, "ecc_curve": {"NIST": {"P-256": 20, "P-384": 22, "P-521": 18}}, "crypto_engine": {}, "tls_cipher_suite": {"TLS": {"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": 1, "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384": 1, "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256": 1, "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384": 1}}, "crypto_library": {}, "vulnerability": {}, "side_channel_analysis": {}, "device_model": {}, "tee_name": {"AMD": {"PSP": 13}, "IBM": {"SSC": 23}}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"FIPS": {"FIPS 140-3": 10, "FIPS186-4": 26, "FIPS 186-4": 8, "FIPS 198-1": 5, "FIPS 180-4": 5, "FIPS 186-2": 1, "FIPS 186-5": 1, "FIPS18": 4, "FIPS186": 4}, "NIST": {"SP 800-38A": 5, "SP 800-38D": 1, "SP 800-90A": 1, "SP 800-56A": 6, "SP 800-135": 3, "SP 800-90B": 1}, "PKCS": {"PKCS 1": 2}, "RFC": {"RFC7627": 3, "RFC 5288": 1, "RFC 5246": 1, "RFC762": 3}}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {"OutOfScope": {"out of scope": 2, "the module. Any software loaded into this module that is not shown on the module certificate is out of scope of this validation and requires a separate FIPS 140-3 validation. 5.2 Initiate on Demand Page 36": 1, "in Section 11 will result in the module operating in a non-compliant state, which is considered out of scope of this validation. 11.2 Administrator Guidance The Administrator Guidance can be obtained from": 1}}}, "policy_metadata": {"pdf_file_size_bytes": 975215, "pdf_is_encrypted": false, "pdf_number_of_pages": 63, "/Producer": "Microsoft\u00ae Word for Microsoft 365", "/Creator": "Microsoft\u00ae Word for Microsoft 365", "/CreationDate": "D:20260624131604-04'00'", "/ModDate": "D:20260624131604-04'00'", "pdf_hyperlinks": {"_type": "Set", "elements": ["https://docs.paloaltonetworks.com/panorama/11-1/panorama-admin"]}}}, "heuristics": {"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics", "algorithms": {"_type": "Set", "elements": ["HMAC-SHA-1A3454", "RSA KeyGen (FIPS186-4)A3454", "KDF SSHA3454", "AES-CFB128A3454", "AES-CFB1A3454", "SHA2-224A3454", "TLS v1.2 KDF RFC7627A3454", "SHA2-256A3454", "SHA2-384A3454", "KAS-ECC-SSC Sp800-56Ar3A3454", "Safe Primes Key VerificationA3454", "HMAC-SHA2-512A3454", "HMAC-SHA2-256A3454", "ECDSA SigVer (FIPS186-4)A3454", "Counter DRBGA3454", "Safe Primes Key GenerationA3454", "HMAC-SHA2-384A3454", "SHA-1A3454", "KDF SNMPA3454", "AES-CBCA3454", "ECDSA SigGen (FIPS186-4)A3454", "AES-CFB8A3454", "AES-CTRA3454", "ECDSA KeyGen (FIPS186-4)A3454", "KAS-FFC-SSC Sp800-56Ar3A3454", "RSA SigGen (FIPS186-4)A3454", "AES-GCMA3454", "SHA2-512A3454", "HMAC-SHA2-224A3454", "RSA SigVer (FIPS186-4)A3454"]}, "extracted_versions": {"_type": "Set", "elements": ["11.2", "11.1"]}, "cpe_matches": null, "verified_cpe_matches": null, "related_cves": null, "policy_prunned_references": {"_type": "Set", "elements": []}, "module_prunned_references": {"_type": "Set", "elements": []}, "policy_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "module_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "direct_transitive_cves": null, "indirect_transitive_cves": null}, "state": {"_type": "sec_certs.sample.fips.InternalState", "module": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": null, "txt_hash": null, "json_hash": null}, "policy": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "e6734180e94e43627bb3a79b455bfaac38f7d0c5348a1be386a1542ccbe6cd07", "txt_hash": "eae08ba9ff1e5349290bc7a1c0835b6dc99b7212be908cc03d47c9c694f7798e", "json_hash": null}}}