iLO 5 Cryptographic Module

Certificate #4831

Webpage information ?

Status active
Validation dates 11.10.2024
Sunset date 21-09-2026
Standard FIPS 140-2
Security level 1
Type Hardware
Embodiment Multi-Chip Embedded
Caveat When installed, initialized and configured as specified in the Security Policy Section 3
Exceptions
  • Mitigation of Other Attacks: N/A
Description The HP Integrated Lights-Out 5 (HP iLO 5) built into HP ProLiant Gen10 and Synergy servers is an autonomous secure management component embedded directly on the server motherboard. iLO helps simplify initial server setup, power and thermal optimization, remote server administration, and provides server health monitoring with the HP Active Health System (AHS).
Version (Hardware) ASIC (GXP: 815393-001) with Flash Memory (1819-1208), NVRAM (1819-1209), and DDR3 SDRAM (2660-0461)
Version (Firmware) 2.45
Vendor Hewlett Packard Enterprise Development LP
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.

Security policy ?

Symmetric Algorithms
AES, AES-, DES, TDES, HMAC
Asymmetric Algorithms
RSA 4096, ECDSA, ECC, Diffie-Hellman, DH, DSA
Hash functions
SHA-1, SHA-512, SHA-256, SHA-384, SHA-2
Schemes
Key Agreement
Protocols
SSH, SSL, TLS, TLS 1.2
Randomness
DRBG, RNG
Elliptic Curves
P-256, P-384
Block cipher modes
ECB, CBC, CTR, OFB, GCM

Trusted Execution Environments
SSC
Vendor
Microsoft

Security level
Level 1

Standards
FIPS 140-2, FIPS 186-4, FIPS 186-2, SP 800-13536, SP 800-108, SP 800-90B, NIST SP 800-90A, SP 800-90A, PKCS#1, RFC 2313, RFC 5288, RFC 5647

File metadata

Title FIPS 140-2 Non-Proprietary Security Policy
Author Shantamurty, Rupesh
Creation date D:20240703144932-04'00'
Modification date D:20240902101956-04'00'
Pages 31
Creator Acrobat PDFMaker 24 for Word
Producer Adobe PDF Library 24.2.121

Heuristics ?

No heuristics are available for this certificate.

References ?

No references are available for this certificate.

Updates ?

  • 14.10.2024 The certificate was first processed.
    New certificate

    A new FIPS 140 certificate with the product name was processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 4831,
  "dgst": "c745b79afd666fe9",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "DRBG#A2273",
        "DSA#A2273",
        "ECDSA#A2273",
        "CVL#A2273",
        "KBKDF#A2273",
        "SHS#3679",
        "RSA#A2273",
        "KTS#A2273",
        "KAS#A2273",
        "SHS#A2273",
        "AES#A2273",
        "HMAC#A2273",
        "AES#4467",
        "KAS-SSC#A2273"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "2.45"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 1
          },
          "ECDSA": {
            "ECDSA": 19
          }
        },
        "FF": {
          "DH": {
            "DH": 3,
            "Diffie-Hellman": 28
          },
          "DSA": {
            "DSA": 10
          }
        },
        "RSA": {
          "RSA 4096": 1
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 4
        },
        "CTR": {
          "CTR": 12
        },
        "ECB": {
          "ECB": 1
        },
        "GCM": {
          "GCM": 26
        },
        "OFB": {
          "OFB": 3
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "SSH": {
          "SSH": 27
        },
        "TLS": {
          "SSL": {
            "SSL": 2
          },
          "TLS": {
            "TLS": 55,
            "TLS 1.2": 1
          }
        }
      },
      "crypto_scheme": {
        "KA": {
          "Key Agreement": 2
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-256": 12,
          "P-384": 4
        }
      },
      "eval_facility": {
        "Acumen": {
          "Acumen Security": 1
        }
      },
      "fips_cert_id": {
        "Cert": {
          "#2273": 1
        }
      },
      "fips_certlike": {
        "Certlike": {
          "AES 128": 1,
          "AES GCM IV70": 1,
          "AES GCM24": 1,
          "AES- 256": 1,
          "AES13": 1,
          "DSA29": 1,
          "HMAC SHA-2": 1,
          "HMAC SHA-512": 1,
          "HMAC33": 2,
          "PKCS#1": 2,
          "RSA 4096": 1,
          "RSA28": 1,
          "SHA- 384": 1,
          "SHA-1": 3,
          "SHA-2": 1,
          "SHA-256": 4,
          "SHA-384": 3,
          "SHA-512": 6,
          "SHA-512 3679": 1,
          "SHA31-132": 1
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 3
        }
      },
      "hash_function": {
        "SHA": {
          "SHA1": {
            "SHA-1": 3
          },
          "SHA2": {
            "SHA-2": 1,
            "SHA-256": 4,
            "SHA-384": 3,
            "SHA-512": 7
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 28
        },
        "RNG": {
          "RNG": 1
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-2": 46,
          "FIPS 186-2": 1,
          "FIPS 186-4": 3
        },
        "NIST": {
          "NIST SP 800-90A": 10,
          "SP 800-108": 3,
          "SP 800-13536": 1,
          "SP 800-90A": 4,
          "SP 800-90B": 6
        },
        "PKCS": {
          "PKCS#1": 1
        },
        "RFC": {
          "RFC 2313": 1,
          "RFC 5288": 2,
          "RFC 5647": 1
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 37,
            "AES-": 1
          }
        },
        "DES": {
          "3DES": {
            "TDES": 1
          },
          "DES": {
            "DES": 1
          }
        },
        "constructions": {
          "MAC": {
            "HMAC": 7
          }
        }
      },
      "tee_name": {
        "IBM": {
          "SSC": 2
        }
      },
      "tls_cipher_suite": {},
      "vendor": {
        "Microsoft": {
          "Microsoft": 1
        }
      },
      "vulnerability": {}
    },
    "policy_metadata": {
      "/Author": "Shantamurty, Rupesh",
      "/Company": "Hewlett Packard Enterprise",
      "/Created": "D:20180128",
      "/CreationDate": "D:20240703144932-04\u002700\u0027",
      "/Creator": "Acrobat PDFMaker 24 for Word",
      "/LastSaved": "D:20201026",
      "/ModDate": "D:20240902101956-04\u002700\u0027",
      "/Producer": "Adobe PDF Library 24.2.121",
      "/SourceModified": "D:20240703184859",
      "/Title": "FIPS 140-2 Non-Proprietary Security Policy",
      "pdf_file_size_bytes": 967633,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "http://www.hpe.com/",
          "http://www.acumensecurity.net/",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=16925",
          "https://192.168.1.4/",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=34882",
          "https://csrc.nist.gov/Projects/cryptographic-module-validation-program/validated-modules/Search",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=19053",
          "http://csrc.nist.gov/groups/STM/cmvp"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 31
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.InternalState",
    "module_download_ok": true,
    "module_extract_ok": true,
    "policy_convert_garbage": false,
    "policy_convert_ok": true,
    "policy_download_ok": true,
    "policy_extract_ok": true,
    "policy_pdf_hash": "97e99b74318e5f87f56c3eb9523d16a4015dee1bdf2761995f197516c8b6c5af",
    "policy_txt_hash": "9e03f8e904b5c833c129cf09b50159a4ebe53aa71912230f1320691d222ab0a6"
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When installed, initialized and configured as specified in the Security Policy Section 3",
    "certificate_pdf_url": null,
    "date_sunset": "2026-09-21",
    "description": "The HP Integrated Lights-Out 5 (HP iLO 5) built into HP ProLiant Gen10 and Synergy servers is an autonomous secure management component embedded directly on the server motherboard. iLO helps simplify initial server setup, power and thermal optimization, remote server administration, and provides server health monitoring with the HP Active Health System (AHS).",
    "embodiment": "Multi-Chip Embedded",
    "exceptions": [
      "Mitigation of Other Attacks: N/A"
    ],
    "fw_versions": "2.45",
    "historical_reason": null,
    "hw_versions": "ASIC (GXP: 815393-001) with Flash Memory (1819-1208), NVRAM (1819-1209), and DDR3 SDRAM (2660-0461)",
    "level": 1,
    "mentioned_certs": {},
    "module_name": "iLO 5 Cryptographic Module",
    "module_type": "Hardware",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-2",
    "status": "active",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2024-10-11",
        "lab": "ACUMEN SECURITY, LLC",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Hewlett Packard Enterprise Development LP",
    "vendor_url": "http://www.hpe.com"
  }
}