Comparing certificates Experimental feature

You are comparing two certificates. By default, only differing attributes are shown. Use the button below to show/hide all attributes.

Showing only differing attributes.
Lenel OnGuard Access Control Cryptographic Module
Lenel OnGuard Access Control Cryptographic Module
cert_id 2958 3566
dgst 3765c3e23aeefaf3 7d2371aaf1df1dcb
heuristics/algorithms SHS#1903, RSA#1783, AES#2197, AES#3497, DRBG#868, DRBG#258, SHS#2373, RSA#1493, SHS#2886, DRBG#489, AES#2832, AES#4149, RSA#1134 CVL#886, AES#4064, RSA#1783, RSA#2193, AES#C500, CVL#575, AES#3497, SHS#3347, DRBG#868, DRBG#1217, KTS#C500, SHS#2886, HMAC#2651, HMAC#2233
heuristics/module_processed_references/directly_referencing 1892, 2357, 2606 2937, 2606
heuristics/module_processed_references/indirectly_referencing 3464, 1891, 3427, 3451, 3426, 2357, 2701, 2702, 2602, 1895, 2600, 2700, 3415, 2606, 2601, 2604, 2351, 2355, 3437, 1892, 1896, 2356, 3469, 1897, 3447, 2352, 2605 3464, 3427, 3451, 3426, 2701, 2702, 2602, 2933, 3510, 2600, 2932, 2935, 2700, 3501, 3415, 3487, 2606, 2601, 2604, 3502, 2937, 3437, 2931, 2936, 3469, 3447, 2605
heuristics/module_prunned_references 1892, 2357, 2606 2937, 2606
heuristics/policy_processed_references/directly_referencing 1892, 2357, 2606 2937, 2606
heuristics/policy_processed_references/indirectly_referencing 3464, 1891, 3427, 3451, 3553, 2357, 3426, 1132, 2701, 2702, 2602, 3646, 1895, 2600, 2700, 3415, 2606, 2601, 2604, 2351, 2355, 3652, 3437, 1494, 1892, 1896, 2356, 3469, 1897, 3447, 2352, 2605 3464, 3427, 3451, 3553, 3426, 2701, 2702, 2602, 2933, 3510, 3646, 2600, 2932, 2935, 2700, 3501, 3415, 3487, 2606, 2601, 2604, 3652, 3502, 2937, 3437, 2931, 2936, 3469, 3447, 2605
heuristics/policy_prunned_references 1892, 2357, 2606 2937, 2606
pdf_data/keywords/fips_cert_id
  • Cert:
    • #1892: 5
    • #2197: 1
    • #2357: 5
    • #2606: 4
    • #2832: 1
    • #3497: 1
    • #4149: 3
  • Cert:
    • #1217: 3
    • #1783: 1
    • #2193: 1
    • #2233: 1
    • #2606: 4
    • #2651: 1
    • #2937: 4
    • #3497: 1
    • #4064: 1
    • #868: 3
pdf_data/keywords/fips_certlike
  • Certlike:
    • AES Cert. #4149: 1
    • AES-128: 3
    • AES-256: 1
    • DRBG 2197: 1
    • DRBG 6: 1
    • PKCS1: 2
    • RSA 2048: 2
    • SHA-256: 11
  • Certlike:
    • AES-128: 1
    • AES-128/ 256: 1
    • AES-256: 1
    • HMAC SHA-1 (160: 1
    • HMAC SHA-256: 1
    • HMAC SHA-384: 1
    • PKCS1: 4
    • RSA 2048: 2
    • RSA 4096: 1
    • SHA-1: 1
    • SHA-1 (160: 1
    • SHA-256: 5
    • SHA-384: 1
    • SHA-512: 1
pdf_data/keywords/vendor
  • Microsoft:
    • Microsoft: 13
  • Microsoft:
    • Microsoft: 11
pdf_data/keywords/symmetric_crypto
  • AES_competition:
    • AES:
      • AES: 16
      • AES-128: 3
      • AES-256: 1
    • RC:
      • RC2: 1
  • AES_competition:
    • AES:
      • AES: 17
      • AES-128: 1
      • AES-256: 1
    • RC:
      • RC2: 1
  • constructions:
    • MAC:
      • HMAC: 7
pdf_data/keywords/asymmetric_crypto
  • RSA:
    • RSA 2048: 2
  • RSA:
    • RSA 2048: 2
    • RSA 4096: 1
    • RSA-1024: 2
    • RSA-2048: 1
pdf_data/keywords/hash_function
  • SHA:
    • SHA2:
      • SHA-256: 11
  • SHA:
    • SHA1:
      • SHA-1: 2
    • SHA2:
      • SHA-256: 5
      • SHA-384: 1
      • SHA-512: 1
pdf_data/keywords/crypto_scheme
  • KEX:
    • Key Exchange: 2
pdf_data/keywords/crypto_protocol
  • TLS:
    • TLS:
      • TLS: 48
      • TLS 1.2: 1
      • TLS v1.1: 3
pdf_data/keywords/randomness
  • PRNG:
    • DRBG: 22
  • RNG:
    • RNG: 2
  • PRNG:
    • DRBG: 22
  • RNG:
    • RNG: 3
pdf_data/keywords/cipher_mode
  • CBC:
    • CBC: 3
  • CTR:
    • CTR: 3
  • ECB:
    • ECB: 3
  • CBC:
    • CBC: 6
  • CTR:
    • CTR: 2
  • ECB:
    • ECB: 3
pdf_data/keywords/tls_cipher_suite
  • TLS:
    • TLS_RSA_WITH_AES_128_CBC_SHA: 1
    • TLS_RSA_WITH_AES_128_CBC_SHA256: 1
    • TLS_RSA_WITH_AES_128_CBC_SHA384: 1
    • TLS_RSA_WITH_AES_256_CBC_SHA: 1
    • TLS_RSA_WITH_AES_256_CBC_SHA256: 1
    • TLS_RSA_WITH_AES_256_CBC_SHA384: 1
pdf_data/keywords/standard_id
  • FIPS:
    • FIPS 140-2: 14
    • FIPS 180-4: 1
    • FIPS 186-4: 1
    • FIPS 197: 2
    • FIPS PUB 140-2: 1
  • NIST:
    • SP 800-38A: 2
    • SP 800-90A: 7
  • PKCS:
    • PKCS1: 1
  • FIPS:
    • FIPS 140-2: 13
    • FIPS 197: 2
    • FIPS PUB 140-2: 1
  • NIST:
    • SP 800-56B: 1
    • SP 800-90A: 4
  • PKCS:
    • PKCS1: 2
pdf_data/policy_metadata
  • /Author: lgarcia
  • /CreationDate: D:20191114101039-08'00'
  • /Creator: PScript5.dll Version 5.2.2
  • /ModDate: D:20191114101039-08'00'
  • /Producer: Acrobat Distiller 17.0 (Windows)
  • /Title: Microsoft Word - 712m - 7.5.375.1 - Lenel Security Policy.docx
  • pdf_file_size_bytes: 193496
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 21
state/policy_pdf_hash Different Different
state/policy_txt_hash Different Different
web_data/caveat When operated in FIPS mode with [(Windows 10 Cryptographic Primitives Library (BCRYPT) validated to FIPS 140-2 under Cert. #2606 operating in FIPS mode), (Windows Server 2012 R2 and Windows 8.1 Cryptographic Primitives Library (BCRYPT) validated to FIPS 140-2 under Cert. #2357 operating in FIPS mode), or (Windows 8 and Windows Server 2012 Cryptographic Primitives Library (BCRYPT) validated to FIPS 140-2 under Cert. #1892 operating in FIPS mode)] When operated in FIPS mode with Cryptographic Primitives Library (bcryptprimitives.dll and ncryptsslp.dll) in Microsoft Windows 10, Windows 10 Pro, Windows 10 Enterprise, Windows 10 Enterprise LTSB, Windows 10 Mobile, Windows 10 for Surface Hub validated to FIPS 140-2 under Cert. #2606 operating in FIPS mode or Cryptographic Primitives Library (bcryptprimitives.dll and ncryptsslp.dll) in Microsoft Windows 10, Windows 10 Pro, Windows 10 Enterprise, Windows 10 Enterprise LTSB, Windows 10 Mobile, Windows Server 2016 Standard, Windows Server 2016 Datacenter, Windows Storage Server 2016 validated to FIPS 140-2 under Cert. #2937 operating in FIPS mode
web_data/certificate_pdf_url https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/FIPS140ConsolidatedCertJuly2017.pdf https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/FIPS140ConsolidatedCertNov2019.pdf
web_data/description The Lenel OnGuard Access Control Cryptographic Module's primary purpose is to provide secure communications with external access control devices. The module is part of the Lenel's advanced access control and alarm monitoring system which is built on an open architecture platform and offers unlimited scalability, database segmentation, fault tolerance, and biometrics and smart card support. The Lenel advanced access control and alarm monitoring system is fully customizable, and can be seamlessly integrated into the OnGuard total security solution. Lenel open platform security system integrates seamlessly with video, intrusion, access and fire products and offers remote access and management functionality, and is constantly evolving to meet changing mandates and guidelines. FICAM Architecture options include onboard authentication, ideal for new installations, or an add-on authentication module, perfect for retrofits and architectures where onboard authentication is not available. The OnGuard FICAM security management solution consists of Lenel OnGuard software, Lenel access and door controllers, and HID pivCLASS® software and readers.
web_data/historical_reason Moved to historical list in accordance with SP800-131A Revision 1 Transition (AES/TDES key wrapping) Moved to historical list due to dependency on certificate #2606
web_data/mentioned_certs
  • 1892: 1
  • 2357: 1
  • 2606: 1
  • 2606: 1
  • 2937: 1
web_data/sw_versions 7.3.345.54 7.4.457.69 with Critical On-Demand Hot Fix for DE40714 or 7.5.375.1
web_data/tested_conf Intel i7-6700 w/ Microsoft Windows 10 64-bit on Vmware ESXi 6.0 (single-user mode), Intel i7-6700 w/ Microsoft Windows 8 64-bit on Vmware ESXi 6.0, Intel i7-6700 w/ Microsoft Windows 8.1 64-bit on Vmware ESXi 6.0, Intel i7-6700 w/ Microsoft Windows Server 2012 64-bit on Vmware ESXi 6.0, Intel i7-6700 w/ Microsoft Windows Server 2012 R2 64-bit on Vmware ESXi 6.0 Microsoft Windows 10 64-bit running on Precision Workstation T3500 with an Intel Xeon W3670, Microsoft Windows Server 2016 64-bit running on Precision Workstation T3500 with an Intel Xeon W3530 (single-user mode), None, None, None
web_data/validation_history
  • date: 13.07.2017
  • lab: UL VERIFICATION SERVICES INC
  • validation_type: Initial
  • date: 18.11.2019
  • lab: UL VERIFICATION SERVICES INC
  • validation_type: Initial