This page was not yet optimized for use on mobile devices.

Comparing certificates Experimental feature

You are comparing two certificates. By default, only differing attributes are shown. Use the button below to show/hide all attributes.

Showing only differing attributes.

	VMware's OpenSSL FIPS Object Module	VMware's OpenSSL FIPS Object Module
cert_id	3550	3857
dgst	af545f4ae604100b	e3aa235a10ec0805
heuristics/algorithms	AES#C470, Triple-DES#C470, DSA#C470, RSA#C470, HMAC#C470, ECDSA#C470, SHS#C470, CVL#C470, DRBG#C470	AES#C470, Triple-DES#C470, DSA#C470, RSA#C470, HMAC#C470, ECDSA#C470, SHS#C470, DRBG#C470
heuristics/cpe_matches	{}	{}
heuristics/direct_transitive_cves	{}	{}
heuristics/extracted_versions	-	-
heuristics/indirect_transitive_cves	{}	{}
heuristics/module_processed_references/directly_referenced_by	3857	{}
heuristics/module_processed_references/directly_referencing	{}	3550
heuristics/module_processed_references/indirectly_referenced_by	3857	{}
heuristics/module_processed_references/indirectly_referencing	{}	3550
heuristics/module_prunned_references	{}	3550
heuristics/policy_processed_references/directly_referenced_by	{}	{}
heuristics/policy_processed_references/directly_referencing	{}	{}
heuristics/policy_processed_references/indirectly_referenced_by	{}	{}
heuristics/policy_processed_references/indirectly_referencing	{}	{}
heuristics/policy_prunned_references	{}	{}
heuristics/related_cves	{}	{}
heuristics/verified_cpe_matches	{}	{}
pdf_data/keywords/fips_cert_id
pdf_data/keywords/fips_security_level	Level: Level 1: 3	Level: Level 1: 3
pdf_data/keywords/fips_certlike	Certlike: AES 128/ 192/256: 1 AES 128/192/256: 2 DRBG4: 1 DSA (1024: 1 HMAC SHA-1: 5 PKCS#1: 4 SHA- 1, 256: 1 SHA- 224: 3 SHA- 256: 1 SHA- 512: 1 SHA-1: 22 SHA-1, 224: 20 SHA-1, 256: 5 SHA-2 (224: 2 SHA-224: 15 SHA-256: 14 SHA-384: 3 SHA-512: 3	Certlike: AES 128/ 192/256: 1 AES 128/192/256: 2 DRBG4: 1 DSA (1024: 1 HMAC SHA-1: 5 PKCS#1: 4 SHA- 1, 256: 1 SHA- 224: 3 SHA- 256: 1 SHA- 512: 1 SHA-1: 22 SHA-1, 224: 20 SHA-1, 256: 5 SHA-2 (224: 2 SHA-224: 15 SHA-256: 11 SHA-384: 3 SHA-512: 1
pdf_data/keywords/vendor	Cisco: Cisco: 2	Cisco: Cisco: 1
pdf_data/keywords/eval_facility
pdf_data/keywords/symmetric_crypto	AES_competition: AES: AES: 27 DES: 3DES: TDES: 7 Triple-DES: 11 DES: DES: 1 constructions: MAC: CBC-MAC: 1 CMAC: 17 HMAC: 12	AES_competition: AES: AES: 27 DES: 3DES: TDES: 7 Triple-DES: 11 DES: DES: 1 constructions: MAC: CBC-MAC: 1 CMAC: 17 HMAC: 12
pdf_data/keywords/asymmetric_crypto	ECC: ECC: ECC: 6 ECDSA: ECDSA: 17 FF: DH: DH: 9 Diffie-Hellman: 2 DSA: DSA: 19	ECC: ECC: ECC: 6 ECDSA: ECDSA: 17 FF: DH: DH: 7 Diffie-Hellman: 2 DSA: DSA: 19
pdf_data/keywords/pq_crypto
pdf_data/keywords/hash_function	SHA: SHA1: SHA-1: 47 SHA2: SHA-2: 2 SHA-224: 15 SHA-256: 14 SHA-384: 3 SHA-512: 3	SHA: SHA1: SHA-1: 47 SHA2: SHA-2: 2 SHA-224: 15 SHA-256: 11 SHA-384: 3 SHA-512: 1
pdf_data/keywords/crypto_scheme	KA: Key Agreement: 2 Key agreement: 2	KA: Key Agreement: 2 Key agreement: 1
pdf_data/keywords/crypto_protocol	VPN: VPN: 1	VPN: VPN: 1
pdf_data/keywords/randomness	PRNG: DRBG: 17 PRNG: 2 RNG: RNG: 3	PRNG: DRBG: 17 PRNG: 2 RNG: RNG: 3
pdf_data/keywords/cipher_mode	CBC: CBC: 5 CCM: CCM: 5 CFB: CFB: 5 CTR: CTR: 4 ECB: ECB: 7 GCM: GCM: 6 OFB: OFB: 3 XTS: XTS: 5	CBC: CBC: 5 CCM: CCM: 5 CFB: CFB: 5 CTR: CTR: 4 ECB: ECB: 7 GCM: GCM: 6 OFB: OFB: 3 XTS: XTS: 5
pdf_data/keywords/ecc_curve	NIST: B-163: 3 B-283: 2 B-571: 2 K-233: 3 K-409: 1 K-571: 1 P-192: 6 P-224: 4 P-256: 4 P-384: 2 P-521: 4	NIST: B-163: 3 B-233: 1 B-283: 3 B-409: 1 B-571: 2 K-233: 4 K-283: 1 K-409: 2 K-571: 1 P-192: 6 P-224: 6 P-256: 4 P-384: 4 P-521: 4
pdf_data/keywords/crypto_engine
pdf_data/keywords/tls_cipher_suite
pdf_data/keywords/crypto_library	OpenSSL: OpenSSL: 46	OpenSSL: OpenSSL: 48
pdf_data/keywords/vulnerability
pdf_data/keywords/side_channel_analysis
pdf_data/keywords/device_model
pdf_data/keywords/tee_name
pdf_data/keywords/os_name
pdf_data/keywords/cplc_data
pdf_data/keywords/ic_data_group
pdf_data/keywords/standard_id	FIPS: FIPS 140-2: 15 FIPS 180-4: 1 FIPS 186-2: 5 FIPS 186-4: 9 FIPS 197: 1 FIPS 198: 1 NIST: SP 800-38A: 1 SP 800-38B: 1 SP 800-38C: 1 SP 800-38D: 1 SP 800-38E: 1 SP 800-56A: 5 SP 800-56B: 1 SP 800-57: 1 SP 800-67: 1 SP 800-90A: 8 PKCS: PKCS#1: 2	FIPS: FIPS 140-2: 17 FIPS 180-4: 1 FIPS 186-2: 5 FIPS 186-4: 9 FIPS 197: 1 FIPS 198: 1 NIST: SP 800-135: 1 SP 800-38A: 1 SP 800-38B: 1 SP 800-38C: 1 SP 800-38D: 1 SP 800-38E: 1 SP 800-56B: 1 SP 800-56C: 1 SP 800-57: 1 SP 800-67: 1 SP 800-90A: 8 PKCS: PKCS#1: 2
pdf_data/keywords/javacard_version
pdf_data/keywords/javacard_api_const
pdf_data/keywords/javacard_packages
pdf_data/keywords/certification_process
pdf_data/policy_metadata	/Author: Manoj Maskara /CreationDate: D:20191018111150-07'00' /Creator: Microsoft® Word for Office 365 /ModDate: D:20191018111150-07'00' /Producer: Microsoft® Word for Office 365 /Subject: FIPS 140-2 Security Policy Template /Title: Security Policy pdf_file_size_bytes: 873489 pdf_hyperlinks: https://csrc.nist.gov/Projects/Cryptographic-Module-Validation-Program/Validated-Modules/Search, https://csrc.nist.gov/projects/cryptographic-module-validation-program, mailto:[email protected] pdf_is_encrypted: False pdf_number_of_pages: 25	/Author: Manoj Maskara /CreationDate: D:20210209080754-05'00' /Creator: Microsoft® Word for Microsoft 365 /ModDate: D:20210209080754-05'00' /Producer: Microsoft® Word for Microsoft 365 /Subject: FIPS 140-2 Security Policy Template /Title: Security Policy pdf_file_size_bytes: 905932 pdf_hyperlinks: https://csrc.nist.gov/Projects/Cryptographic-Module-Validation-Program/Validated-Modules/Search, https://csrc.nist.gov/projects/cryptographic-module-validation-program, mailto:[email protected] pdf_is_encrypted: False pdf_number_of_pages: 27
state/module_download_ok	True	True
state/module_extract_ok	True	True
state/policy_convert_garbage	False	False
state/policy_convert_ok	True	True
state/policy_download_ok	True	True
state/policy_extract_ok	True	True
state/policy_pdf_hash	Different	Different
state/policy_txt_hash	Different	Different
web_data/caveat	When operated in FIPS mode	When operated in FIPS mode. This validation entry is a non-security-relevant modification to Cert. #3550
web_data/certificate_pdf_url	https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/FIPSConsolidatedOct2019 .pdf	https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/March 2021_010421_0724_signed.pdf
web_data/date_sunset
web_data/description	VMware's OpenSSL FIPS Object Module v2.0.20-vmw is a general-purpose cryptographic module that provides FIPS-Approved cryptographic functions and services to various VMware's products and components.	VMware's OpenSSL FIPS Object Module v2.0.20-vmw is a general-purpose cryptographic module that provides FIPS-Approved cryptographic functions and services to various VMware's products and components.
web_data/embodiment	Multi-Chip Stand Alone	Multi-Chip Stand Alone
web_data/exceptions	Roles, Services, and Authentication: Level 2, Physical Security: N/A, Design Assurance: Level 3, Mitigation of Other Attacks: N/A	Roles, Services, and Authentication: Level 2, Physical Security: N/A, Design Assurance: Level 3, Mitigation of Other Attacks: N/A
web_data/fw_versions	[]	[]
web_data/historical_reason	SP 800-56Arev3 transition	Moved to historical list due to sunsetting
web_data/hw_versions	[]	[]
web_data/level	1	1
web_data/mentioned_certs		3550: 1
web_data/module_name	VMware's OpenSSL FIPS Object Module	VMware's OpenSSL FIPS Object Module
web_data/module_type	Software	Software
web_data/revoked_link	None	None
web_data/revoked_reason	None	None
web_data/standard	FIPS 140-2	FIPS 140-2
web_data/status	historical	historical
web_data/sw_versions	2.0.20-vmw	2.0.20-vmw
web_data/tested_conf	PhotonOS 1.0 on ESXi 6.7 running on a Dell PowerEdge R740 with Intel Xeon Gold 6126 with PAA, PhotonOS 1.0 on ESXi 6.7 running on a Dell PowerEdge R740 with Intel Xeon Gold 6126 without PAA, PhotonOS 2.0 on ESXi 6.7 running on a Dell PowerEdge R740 with Intel Xeon Gold 6126 with PAA, PhotonOS 2.0 on ESXi 6.7 running on a Dell PowerEdge R740 with Intel Xeon Gold 6126 without PAA, Ubuntu 16.04 on ESXi 6.7 running on a Dell PowerEdge R740 with Intel Xeon Gold 6126 with PAA, Ubuntu 16.04 on ESXi 6.7 running on a Dell PowerEdge R740 with Intel Xeon Gold 6126 without PAA, VMware SD-WAN OS 3.3 on a VMware SD-WAN Edge 3800 with Intel Xeon D-2187NT with PAA, VMware SD-WAN OS 3.3 on a VMware SD-WAN Edge 3800 with Intel Xeon D-2187NT without PAA (single-user mode), VMware SD-WAN OS 3.3 on a VMware SD-WAN Edge 610 with Intel Atom C3308 with PAA, VMware SD-WAN OS 3.3 on a VMware SD-WAN Edge 610 with Intel Atom C3308 without PAA, VMware SD-WAN OS 3.3 on ESXi 6.7 running on a Dell PowerEdge R740 with Intel Xeon Gold 6126 with PAA, VMware SD-WAN OS 3.3 on ESXi 6.7 running on a Dell PowerEdge R740 with Intel Xeon Gold 6126 without PAA, Within ESXi 6.7 running on a Dell PowerEdge R740 with an Intel Xeon Gold 6126 with PAA, Within ESXi 6.7 running on a Dell PowerEdge R740 with an Intel Xeon Gold 6126 without PAA, , , , , , , , , , , , , , , , , , , ,	Amazon Linux 2 on ESXi 7.0 running on a Dell PowerEdge R740 with Intel Xeon Gold 6126 with PAA, Amazon Linux 2 on ESXi 7.0 running on a Dell PowerEdge R740 with Intel Xeon Gold 6126 without PAA, PhotonOS 1.0 on ESXi 6.7 running on a Dell PowerEdge R740 with Intel Xeon Gold 6126 with PAA, PhotonOS 1.0 on ESXi 6.7 running on a Dell PowerEdge R740 with Intel Xeon Gold 6126 without PAA, PhotonOS 2.0 on ESXi 6.7 running on a Dell PowerEdge R740 with Intel Xeon Gold 6126 with PAA, PhotonOS 2.0 on ESXi 6.7 running on a Dell PowerEdge R740 with Intel Xeon Gold 6126 without PAA, PhotonOS 2.0 on ESXi 7.0 running on a Dell PowerEdge R740 with Intel Xeon Gold 6126 with PAA, PhotonOS 2.0 on ESXi 7.0 running on a Dell PowerEdge R740 with Intel Xeon Gold 6126 without PAA, PhotonOS 3.0 on ESXi 7.0 running on a Dell PowerEdge R740 with Intel Xeon Gold 6126 with PAA, PhotonOS 3.0 on ESXi 7.0 running on a Dell PowerEdge R740 with Intel Xeon Gold 6126 without PAA, RHEL 7.7 on ESXi 7.0 running on a Dell PowerEdge R740 with Intel Xeon Gold 6126 with PAA, RHEL 7.7 on ESXi 7.0 running on a Dell PowerEdge R740 with Intel Xeon Gold 6126 without PAA, RHEL 7.7 running on a Dell PowerEdge T430 with Intel Xeon E5-2620 with PAA, RHEL 7.7 running on a Dell PowerEdge T430 with Intel Xeon E5-2620 without PAA, RHEL 7.7 running on a Lenovo Yoga 710 with Intel Core i5 with PAA, RHEL 7.7 running on a Lenovo Yoga 710 with Intel Core i5 without PAA, Ubuntu 16.04 on ESXi 6.7 running on a Dell PowerEdge R740 with Intel Xeon Gold 6126 with PAA, Ubuntu 16.04 on ESXi 6.7 running on a Dell PowerEdge R740 with Intel Xeon Gold 6126 without PAA, Ubuntu 16.04 on ESXi 7.0 running on a Dell PowerEdge R740 with Intel Xeon Gold 6126 with PAA, Ubuntu 16.04 on ESXi 7.0 running on a Dell PowerEdge R740 with Intel Xeon Gold 6126 without PAA, Ubuntu 18.04 on ESXi 7.0 running on a Dell PowerEdge R740 with Intel Xeon Gold 6126 with PAA, Ubuntu 18.04 on ESXi 7.0 running on a Dell PowerEdge R740 with Intel Xeon Gold 6126 without PAA, Ubuntu 20.04 on ESXi 7.0 running on a Dell PowerEdge R740 with Intel Xeon Gold 6126 with PAA, Ubuntu 20.04 on ESXi 7.0 running on a Dell PowerEdge R740 with Intel Xeon Gold 6126 without PAA, VMware SD-WAN OS 3.3 on a VMware SD-WAN Edge 3800 with Intel Xeon D-2187NT with PAA, VMware SD-WAN OS 3.3 on a VMware SD-WAN Edge 3800 with Intel Xeon D-2187NT without PAA, VMware SD-WAN OS 3.3 on a VMware SD-WAN Edge 610 with Intel Atom C3308 with PAA, VMware SD-WAN OS 3.3 on a VMware SD-WAN Edge 610 with Intel Atom C3308 without PAA, VMware SD-WAN OS 3.3 on ESXi 6.7 running on a Dell PowerEdge R740 with Intel Xeon Gold 6126 with PAA, VMware SD-WAN OS 3.3 on ESXi 6.7 running on a Dell PowerEdge R740 with Intel Xeon Gold 6126 without PAA, Within ESXi 6.7 running on a Dell PowerEdge R740 with an Intel Xeon Gold 6126 with PAA, Within ESXi 6.7 running on a Dell PowerEdge R740 with an Intel Xeon Gold 6126 without PAA, Within ESXi 7.0 running on a Dell PowerEdge R740 with Intel Xeon Gold 6126 with PAA, Within ESXi 7.0 running on a Dell PowerEdge R740 with Intel Xeon Gold 6126 without PAA (single-user mode)
web_data/validation_history	date: 18.10.2019 lab: CGI Information Systems & Management Consultants Inc validation_type: Initial	date: 24.03.2021 lab: ACUMEN SECURITY, LLC validation_type: Initial
web_data/vendor	VMware, Inc.	VMware, Inc.
web_data/vendor_url	http://www.vmware.com	http://www.vmware.com