This page was not yet optimized for use on mobile devices.
NetApp CryptoMod
Certificate details
| Certificate ID | #4731 |
|---|---|
| Status | historical |
| Historical reason | Replaced by certificate #5271 |
| Validation dates | 19.07.2024 , 06.03.2026 |
| Standard | FIPS 140-3 |
| Security level | 1 |
| Type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Caveat | Interim validation. When installed, initialized and configured as specified in section 11 of the Security Policy |
| Exceptions |
|
| Description | NetApp CryptoMod is a software cryptographic module whose purpose is to provide encryption/decryption services for NetApp’s ONTAP Operating System (OS) kernel. The CryptoMod module makes use of the AES-NI instruction set in Intel processors. Since CryptoMod can support non-PAA implementations as well as PAA implementations of the pertinent cryptographic algorithms, CryptoMod is designated as a software-only cryptographic module. |
| Tested configurations |
|
| Vendor | NetApp, Inc. http://www.netapp.com |
| Lab | Lightship Security, Inc. |
| Algorithms |
|
| References | This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates. |
Security policy
Extracted keywords
Symmetric Algorithms
AES, AES-256, AES-, CAST, HMAC, CMACHash functions
SHA-1, SHA3-256, SHA-3, PBKDFSchemes
MAC, Key AgreementProtocols
TLS, IPsecRandomness
DRBG, RNG, RBGBlock cipher modes
CTR, GCM, CCM, XTSVendor
MicrosoftSecurity level
Level 1Automated analysis
Automated inference - use with caution
All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.No automatically derived data are available in this section.
Cross-references
No references are available for this certificate.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate was first processed.
{
"_type": "sec_certs.sample.fips.FIPSCertificate",
"cert_id": 4731,
"dgst": "d2c5ea6c63da5897",
"heuristics": {
"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
"algorithms": {
"_type": "Set",
"elements": [
"AES-GMACA2640",
"AES-GCMA2640",
"AES-CBCA2640",
"HMAC-SHA2-256A2640",
"SHA-1A2640",
"SHA3-256A2640",
"AES-KWPA2640",
"SHA2-512A2640",
"AES-XTS Testing Revision 2.0A2640",
"Counter DRBGA2640",
"AES-ECBA2640",
"SHA2-256A2640",
"HMAC-SHA2-512A2640",
"PBKDFA2640",
"AES-CCMA2640",
"#A6624",
"KDF SP800-108A2640",
"AES-CMACA2640",
"HMAC-SHA-1A2640"
]
},
"cpe_matches": null,
"direct_transitive_cves": null,
"extracted_versions": {
"_type": "Set",
"elements": [
"-"
]
},
"indirect_transitive_cves": null,
"module_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"module_prunned_references": {
"_type": "Set",
"elements": []
},
"policy_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"policy_prunned_references": {
"_type": "Set",
"elements": []
},
"related_cves": null,
"verified_cpe_matches": null
},
"pdf_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
"br1_deviations": 0,
"br1_tables": {
"_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
"approved_algorithms": {
"entries": [
{
"algorithm": "AES-CBC",
"cavpCertName": "A6624",
"properties": "-",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CCM",
"cavpCertName": "A6624",
"properties": "-",
"reference": "SP 800-38C"
},
{
"algorithm": "AES-CMAC",
"cavpCertName": "A6624",
"properties": "-",
"reference": "SP 800-38B"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A6624",
"properties": "-",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A6624",
"properties": "-",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GMAC",
"cavpCertName": "A6624",
"properties": "-",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-KWP",
"cavpCertName": "A6624",
"properties": "-",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A6624",
"properties": "-",
"reference": "SP 800-38E"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A6624",
"properties": "-",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A6624",
"properties": "-",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-256",
"cavpCertName": "A6624",
"properties": "-",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-512",
"cavpCertName": "A6624",
"properties": "-",
"reference": "FIPS 198-1"
},
{
"algorithm": "KDF SP800-108",
"cavpCertName": "A6624",
"properties": "-",
"reference": "SP 800-108 Rev. 1"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A6624",
"properties": "-",
"reference": "SP 800-132"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A6624",
"properties": "-",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A6624",
"properties": "-",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A6624",
"properties": "-",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA3-256",
"cavpCertName": "A6624",
"properties": "-",
"reference": "FIPS 202"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"approved_services": {
"entries": [
{
"description": "Returns the name of the module",
"indicator": "N/A",
"inputs": "API call paramete rs",
"name": "Show versioning information",
"outputs": "Module name and version",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": ""
},
{
"description": "and the version associate d with the module",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "",
"secFunImpl": ""
},
{
"description": "Return FIPS mode status",
"indicator": "FIPS status",
"inputs": "API call paramete rs",
"name": "Show status",
"outputs": "FIPS status",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": ""
},
{
"description": "Initiates and runs the pre- operationa l self-tests",
"indicator": "API output of 0 indicate s success",
"inputs": "API call paramete rs",
"name": "Perform on demand self-tests",
"outputs": "API output of 0 indicates success, non-zero indicates failure",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "Perform self-tests (All) Software Integrity Test"
},
{
"description": "Perform encryption or decryption using AES",
"indicator": "API output of 0 indicate s success",
"inputs": "API call paramete rs",
"name": "Encryption/decrypt ion",
"outputs": "Status return, plaintext or ciphertex t",
"rolesSspAccess": "User - AES key: E,W - AES XTS key: E,W",
"secFunImpl": "Symmetric Encryption and Decryption"
},
{
"description": "Perform encryption or decryption using AES CCM or AES GCM",
"indicator": "API output of 0 indicate s success",
"inputs": "API call paramete rs",
"name": "Authenticated encryption/decrypt ion",
"outputs": "Status return, plaintext or ciphertex t",
"rolesSspAccess": "User - AES CCM key: E,W - AES GCM key: E,W",
"secFunImpl": "Authenticat ed Symmetric Encryption and Decryption"
},
{
"description": "Perform key wrapping or unwrappin g using AES",
"indicator": "API output of 0 indicate s success",
"inputs": "API call paramete rs",
"name": "Key wrapping/unwrapp ing",
"outputs": "Status return, wrapped or unwrapp ed key",
"rolesSspAccess": "User - AES key: E,R,W - CPKEK key: E,R,W",
"secFunImpl": "KTS-AES"
},
{
"description": "Provide random bits from the module\u0027s DRBG",
"indicator": "API output of 0 indicate s success",
"inputs": "API call paramete rs",
"name": "Random bit generation",
"outputs": "Status, random bytes",
"rolesSspAccess": "User - DRBG V value: E,G - DRBG entropy input: E,G - DRBG internal state key: E,G",
"secFunImpl": "Entropy Noise Source Random Number Generation"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "- ESV state: E,G",
"secFunImpl": ""
},
{
"description": "Perform key generation using the module\u0027s DRBG",
"indicator": "API output of 0 indicate s success",
"inputs": "API call paramete rs",
"name": "Key generation",
"outputs": "Status return, key",
"rolesSspAccess": "User - AES key: R - AES CCM key: R - AES CMAC key: R - AES GCM key: R - AES GMAC key: R - AES KEK key: R - AES XTS key: R",
"secFunImpl": "Entropy Noise Source Random Number Generation Cryptograp hic Key Generation (CKG)"
},
{
"description": "Generate or verify data integrity",
"indicator": "API output of 0 indicate s success",
"inputs": "API call paramete rs",
"name": "HMAC message authentication",
"outputs": "Status return, tag value",
"rolesSspAccess": "User - HMAC key: E,R,W",
"secFunImpl": "Keyed Hash"
},
{
"description": "Generate or verify data integrity",
"indicator": "API output of 0 indicate s success",
"inputs": "API call paramete rs",
"name": "AES message authentication",
"outputs": "Status return, tag value",
"rolesSspAccess": "User - AES CCM key: E,R,W - AES GCM key: E,R,W",
"secFunImpl": "AES Keyed Hash"
},
{
"description": "Perform SHA hashing function",
"indicator": "API output of 0 indicate s success",
"inputs": "API call paramete rs",
"name": "Hashing",
"outputs": "Status return, digest",
"rolesSspAccess": "User",
"secFunImpl": "Message Digest"
},
{
"description": "Perform key derivation using PBKDF or NIST SP",
"indicator": "API output of 0 indicate s success",
"inputs": "API call paramete rs",
"name": "Key derivation",
"outputs": "Status return, key",
"rolesSspAccess": "User - Passphras e: E,W,Z - CPKEK key: G,R",
"secFunImpl": "Key Derivation"
},
{
"description": "800-108 in CTR mode",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "- KDK key: E,W - KDK output",
"secFunImpl": ""
},
{
"description": "Zeroize and dellocate memory containing sensitive data",
"indicator": "None",
"inputs": "Reboot or power cycle NetApp platform",
"name": "Zeroize",
"outputs": "None",
"rolesSspAccess": "key: G,R Crypto Officer - AES key: Z - AES CCM key: Z - AES CMAC key: Z - AES GCM key: Z - AES GMAC key: Z - AES KEK key: Z - AES XTS key: Z - CPKEK key: Z - HMAC key: Z - DRBG V value: Z - DRBG entropy input: Z - DRBG internal state key: Z - DRBG seed: Z - ESV state: Z - KDK key: Z - KDK output key: Z",
"secFunImpl": ""
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "- Passphras e: Z",
"secFunImpl": ""
}
],
"found": true,
"section": 4,
"subsection": 3
},
"authentication_methods": {
"entries": [],
"found": false,
"section": 4,
"subsection": 1
},
"cond_self_tests": {
"entries": [
{
"algorithmOrTest": "AES-CBC",
"condition": "On reloading the module",
"details": "Encrypt/Decrypt",
"indicator": "FIPS_OK",
"testMethod": "KAT",
"testProps": "Key Length: 128 and 256 bits",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CCM",
"condition": "On reloading the module",
"details": "Encrypt/Decrypt",
"indicator": "FIPS_OK",
"testMethod": "KAT",
"testProps": "Key Length: 128 bits",
"type": "CAST"
},
{
"algorithmOrTest": "AES- CMAC",
"condition": "On reloading the module",
"details": "Hash",
"indicator": "FIPS_OK",
"testMethod": "KAT",
"testProps": "Key Length: 128 and 256 bits",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB",
"condition": "On reloading the module",
"details": "Encrypt/Decrypt",
"indicator": "FIPS_OK",
"testMethod": "KAT",
"testProps": "Key Length: 128 and 256 bits",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM",
"condition": "On reloading the module",
"details": "Encrypt/Decrypt",
"indicator": "FIPS_OK",
"testMethod": "KAT",
"testProps": "Key Length: 128 and 256 bits",
"type": "CAST"
},
{
"algorithmOrTest": "AES-KWP",
"condition": "On reloading the module",
"details": "Encrypt/Decrypt",
"indicator": "FIPS_OK",
"testMethod": "KAT",
"testProps": "Key Length: 128 and 256 bits",
"type": "CAST"
},
{
"algorithmOrTest": "AES- GMAC",
"condition": "On reloading the module",
"details": "Encrypt/Decrypt",
"indicator": "FIPS_OK",
"testMethod": "KAT",
"testProps": "Key Length: 128 and 256 bits",
"type": "CAST"
},
{
"algorithmOrTest": "AES-XTS Testing Revision 2.0",
"condition": "On reloading the module",
"details": "Encrypt/Decrypt",
"indicator": "FIPS_OK",
"testMethod": "KAT",
"testProps": "Key Length: 128 and 256 bits",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG",
"condition": "On reloading the module",
"details": "Generate, Reseed, Instantiate functions",
"indicator": "FIPS_OK",
"testMethod": "KAT",
"testProps": "AES CTR (256 bits) with derivation function",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA-1",
"condition": "On reloading the module",
"details": "HMAC tag generation",
"indicator": "FIPS_OK",
"testMethod": "KAT",
"testProps": "PRF: SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-256",
"condition": "On reloading the module",
"details": "HMAC tag generation",
"indicator": "FIPS_OK",
"testMethod": "KAT",
"testProps": "PRF: SHA2- 256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-512",
"condition": "On reloading the module",
"details": "HMAC tag generation",
"indicator": "FIPS_OK",
"testMethod": "KAT",
"testProps": "PRF: SHA2- 512",
"type": "CAST"
},
{
"algorithmOrTest": "KDF SP800-108",
"condition": "On reloading the module",
"details": "Counter Mode (HMAC-SHA2- 512)",
"indicator": "FIPS_OK",
"testMethod": "KAT",
"testProps": "PRF: HMAC- SHA2-512",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF",
"condition": "On reloading the module",
"details": "Key Derivation",
"indicator": "FIPS_OK",
"testMethod": "KAT",
"testProps": "Derivation of the Master Key (MK) PRF: HMAC-SHA-1, HMAC-SHA2- 256, HMAC- SHA2-512",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1",
"condition": "On reloading the module",
"details": "Hash",
"indicator": "FIPS_OK",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-256",
"condition": "On reloading the module",
"details": "Hash",
"indicator": "FIPS_OK",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512",
"condition": "On reloading the module",
"details": "Hash",
"indicator": "FIPS_OK",
"testMethod": "KAT",
"testProps": "SHA2-512",
"type": "CAST"
},
{
"algorithmOrTest": "SHA3-256",
"condition": "On reloading the module",
"details": "Hash",
"indicator": "FIPS_OK",
"testMethod": "KAT",
"testProps": "SHA3-256",
"type": "CAST"
}
],
"found": true,
"section": 10,
"subsection": 2
},
"error_states": {
"entries": [
{
"conditions": "Entered whenever one or more KAT self-tests fail or if the software integrity test fails.",
"description": "The error state is persistent and no services are available. Any attempt to use the Module\u0027s services result in the return of a non-zero error code.",
"indicator": "ERROR_STATE",
"name": "ERROR_STATE",
"recoveryMethod": "The NetApp platform automatically reboots."
}
],
"found": true,
"section": 10,
"subsection": 4
},
"mechanisms_actions": {
"entries": [],
"found": false,
"section": 7,
"subsection": 1
},
"modes_of_operation": {
"entries": [
{
"description": "The module must be installed per instructions provided in Section 11 of this document.",
"name": "Approved mode",
"statusIndicator": "FIPS mode = true",
"type": "Approved"
}
],
"found": true,
"section": 2,
"subsection": 4
},
"non_approved_allowed_NSC": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_allowed_algos": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_not_allowed": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_services": {
"entries": [],
"found": false,
"section": 4,
"subsection": 4
},
"ports_interfaces": {
"entries": [
{
"data": "API call parameters passed by reference or value for cryptographic service input",
"logicalInterface": "Control Input",
"physicalPort": "N/A"
},
{
"data": "Not implemented",
"logicalInterface": "Control Output",
"physicalPort": "N/A"
},
{
"data": "API call parameters passed by reference or value for cryptographic service input",
"logicalInterface": "Data Input",
"physicalPort": "N/A"
},
{
"data": "API call parameters passed by reference or value for cryptographic service output",
"logicalInterface": "Data Output",
"physicalPort": "N/A"
},
{
"data": "API return value: enumerated status resulting from call execution",
"logicalInterface": "Status Output",
"physicalPort": "N/A"
}
],
"found": true,
"section": 3,
"subsection": 1
},
"roles": {
"entries": [
{
"authMethodList": "",
"name": "User",
"operatorType": "User",
"type": "Role"
},
{
"authMethodList": "",
"name": "Crypto Officer",
"operatorType": "Crypto Officer",
"type": "Role"
}
],
"found": true,
"section": 4,
"subsection": 2
},
"security_levels": {
"entries": [
{
"level": "1",
"section": "1",
"title": "General"
},
{
"level": "1",
"section": "2",
"title": "Cryptographic module specification"
},
{
"level": "1",
"section": "3",
"title": "Cryptographic module interfaces"
},
{
"level": "1",
"section": "4",
"title": "Roles, services, and authentication"
},
{
"level": "1",
"section": "5",
"title": "Software/Firmware security"
},
{
"level": "1",
"section": "6",
"title": "Operational environment"
},
{
"level": "N/A",
"section": "7",
"title": "Physical security"
},
{
"level": "N/A",
"section": "8",
"title": "Non-invasive security"
},
{
"level": "1",
"section": "9",
"title": "Sensitive security parameter management"
},
{
"level": "1",
"section": "10",
"title": "Self-tests"
},
{
"level": "1",
"section": "11",
"title": "Life-cycle assurance"
},
{
"level": "N/A",
"section": "12",
"title": "Mitigation of other attacks"
},
{
"level": "1",
"section": "",
"title": "Overall Level"
}
],
"found": true,
"section": 1,
"subsection": 2
},
"self_tests": {
"entries": [
{
"algorithmOrTest": "HMAC-SHA2- 256 (A2640)",
"details": "MAC (HMAC- SHA2-256, A2640)",
"indicator": "Success: all self- tests passed (as expected)",
"testMethod": "KAT",
"testProps": "Key length: 256 bits",
"type": "SW/FW Integrity"
}
],
"found": true,
"section": 10,
"subsection": 1
},
"ssp_io_methods": {
"entries": [
{
"dest": "Module",
"distribution": "Manual",
"entry": "Electronic",
"format": "Plaintext",
"name": "[Input] Call stack parameters",
"sfiAlgo": "",
"source": "Calling application"
},
{
"dest": "Calling application",
"distribution": "Manual",
"entry": "Electronic",
"format": "Plaintext",
"name": "[Output] Call stack parameters",
"sfiAlgo": "",
"source": "Module"
}
],
"found": true,
"section": 9,
"subsection": 2
},
"ssp_zeroization_methods": {
"entries": [
{
"description": "Zeroisation of SSPs managed by the caller",
"method": "Cleansed",
"operatorId": "Module initiated",
"rationale": "Overwrites with random data followed by an overwrite with zeroes"
},
{
"description": "Zeroisation of temporary copies of CSPs within the relevant function",
"method": "Cleared after use",
"operatorId": "Module initiated",
"rationale": "Overwrites with zeroes"
},
{
"description": "RAM is used for temporary storage of SSPs",
"method": "Reboot",
"operatorId": "Operator initiated",
"rationale": "Restarting the NetApp controller clears the SSPs in RAM"
}
],
"found": true,
"section": 9,
"subsection": 3
},
"storage_areas": {
"entries": [
{
"description": "Temporary, plaintext storage",
"name": "RAM",
"persistance": "Dynamic"
}
],
"found": true,
"section": 9,
"subsection": 1
},
"tested_module_id_hw": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_hw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_sw_fw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_op_env_sw_fw_hy": {
"entries": [
{
"hardwarePlatform": "AFF A250",
"hypervisorHostOs": "N/A",
"operatingSystem": "ONTAP 9.11.1",
"paa_pai": "No",
"processors": "Intel Xeon D-2164IT",
"version": "3.0"
},
{
"hardwarePlatform": "AFF A250",
"hypervisorHostOs": "N/A",
"operatingSystem": "ONTAP 9.11.1",
"paa_pai": "Yes",
"processors": "Intel Xeon D-2164IT",
"version": "3.0"
},
{
"hardwarePlatform": "AFF A400",
"hypervisorHostOs": "N/A",
"operatingSystem": "ONTAP 9.11.1",
"paa_pai": "No",
"processors": "Intel Xeon Silver 4210",
"version": "3.0"
},
{
"hardwarePlatform": "AFF A400",
"hypervisorHostOs": "N/A",
"operatingSystem": "ONTAP 9.11.1",
"paa_pai": "Yes",
"processors": "Intel Xeon Silver 4210",
"version": "3.0"
},
{
"hardwarePlatform": "AFF A900",
"hypervisorHostOs": "N/A",
"operatingSystem": "ONTAP 9.11.1",
"paa_pai": "No",
"processors": "Intel Xeon Platinum 8352Y",
"version": "3.0"
},
{
"hardwarePlatform": "AFF A900",
"hypervisorHostOs": "N/A",
"operatingSystem": "ONTAP 9.11.1",
"paa_pai": "Yes",
"processors": "Intel Xeon Platinum 8352Y",
"version": "3.0"
}
],
"found": true,
"section": 2,
"subsection": 2
},
"vendor_affirmed_algos": {
"entries": [
{
"algoPropList": "Key Type:Symmetric",
"implName": "NetApp CryptoMod",
"name": "CKG - Section 6.3",
"reference": "SP 800-133 Rev. 2 Section 6.3: Symmetric Keys Produced by Combining Multiple Keys and Other Data. (Method 2)"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"vendor_affirmed_op_env_sw_fw_hy": {
"entries": [
{
"hardwarePlatform": "AFF A150",
"operatingSystem": "ONTAP 9.11"
},
{
"hardwarePlatform": "AFF A150",
"operatingSystem": "ONTAP 9.12"
},
{
"hardwarePlatform": "AFF A150",
"operatingSystem": "ONTAP 9.13"
},
{
"hardwarePlatform": "AFF A150",
"operatingSystem": "ONTAP 9.14"
},
{
"hardwarePlatform": "AFF A150",
"operatingSystem": "ONTAP 9.15"
},
{
"hardwarePlatform": "AFF A150",
"operatingSystem": "ONTAP 9.16"
},
{
"hardwarePlatform": "AFF A150",
"operatingSystem": "ONTAP 9.17"
},
{
"hardwarePlatform": "AFF A1K",
"operatingSystem": "ONTAP 9.15"
},
{
"hardwarePlatform": "AFF A1K",
"operatingSystem": "ONTAP 9.16"
},
{
"hardwarePlatform": "AFF A1K",
"operatingSystem": "ONTAP 9.17"
},
{
"hardwarePlatform": "AFF A220",
"operatingSystem": "ONTAP 9.11"
},
{
"hardwarePlatform": "AFF A220",
"operatingSystem": "ONTAP 9.12"
},
{
"hardwarePlatform": "AFF A220",
"operatingSystem": "ONTAP 9.13"
},
{
"hardwarePlatform": "AFF A220",
"operatingSystem": "ONTAP 9.14"
},
{
"hardwarePlatform": "AFF A220",
"operatingSystem": "ONTAP 9.15"
},
{
"hardwarePlatform": "AFF A220",
"operatingSystem": "ONTAP 9.16"
},
{
"hardwarePlatform": "AFF A220",
"operatingSystem": "ONTAP 9.17"
},
{
"hardwarePlatform": "AFF A250",
"operatingSystem": "ONTAP 9.12"
},
{
"hardwarePlatform": "AFF A250",
"operatingSystem": "ONTAP 9.13"
},
{
"hardwarePlatform": "AFF A250",
"operatingSystem": "ONTAP 9.14"
},
{
"hardwarePlatform": "AFF A250",
"operatingSystem": "ONTAP 9.15"
},
{
"hardwarePlatform": "AFF A250",
"operatingSystem": "ONTAP 9.16"
},
{
"hardwarePlatform": "AFF A250",
"operatingSystem": "ONTAP 9.17"
},
{
"hardwarePlatform": "AFF A300",
"operatingSystem": "ONTAP 9.11"
},
{
"hardwarePlatform": "AFF A300",
"operatingSystem": "ONTAP 9.12"
},
{
"hardwarePlatform": "AFF A300",
"operatingSystem": "ONTAP 9.13"
},
{
"hardwarePlatform": "AFF A300",
"operatingSystem": "ONTAP 9.14"
},
{
"hardwarePlatform": "AFF A300",
"operatingSystem": "ONTAP 9.15"
},
{
"hardwarePlatform": "AFF A300",
"operatingSystem": "ONTAP 9.16"
},
{
"hardwarePlatform": "AFF A320",
"operatingSystem": "ONTAP 9.11"
},
{
"hardwarePlatform": "AFF A320",
"operatingSystem": "ONTAP 9.12"
},
{
"hardwarePlatform": "AFF A320",
"operatingSystem": "ONTAP 9.13"
},
{
"hardwarePlatform": "AFF A320",
"operatingSystem": "ONTAP 9.14"
},
{
"hardwarePlatform": "AFF A400",
"operatingSystem": "ONTAP 9.12"
},
{
"hardwarePlatform": "AFF A400",
"operatingSystem": "ONTAP 9.13"
},
{
"hardwarePlatform": "AFF A400",
"operatingSystem": "ONTAP 9.14"
},
{
"hardwarePlatform": "AFF A400",
"operatingSystem": "ONTAP 9.15"
},
{
"hardwarePlatform": "AFF A400",
"operatingSystem": "ONTAP 9.16"
},
{
"hardwarePlatform": "AFF A400",
"operatingSystem": "ONTAP 9.17"
},
{
"hardwarePlatform": "AFF A20",
"operatingSystem": "ONTAP 9.16"
},
{
"hardwarePlatform": "AFF A20",
"operatingSystem": "ONTAP 9.17"
},
{
"hardwarePlatform": "AFF A30",
"operatingSystem": "ONTAP 9.16"
},
{
"hardwarePlatform": "AFF A30",
"operatingSystem": "ONTAP 9.17"
},
{
"hardwarePlatform": "AFF A50",
"operatingSystem": "ONTAP 9.16"
},
{
"hardwarePlatform": "AFF A50",
"operatingSystem": "ONTAP 9.17"
},
{
"hardwarePlatform": "AFF A70",
"operatingSystem": "ONTAP 9.15"
},
{
"hardwarePlatform": "AFF A70",
"operatingSystem": "ONTAP 9.16"
},
{
"hardwarePlatform": "AFF A70",
"operatingSystem": "ONTAP 9.17"
},
{
"hardwarePlatform": "AFF A90",
"operatingSystem": "ONTAP 9.15"
},
{
"hardwarePlatform": "AFF A90",
"operatingSystem": "ONTAP 9.16"
},
{
"hardwarePlatform": "AFF A90",
"operatingSystem": "ONTAP 9.17"
},
{
"hardwarePlatform": "AFF A700",
"operatingSystem": "ONTAP 9.11"
},
{
"hardwarePlatform": "AFF A700",
"operatingSystem": "ONTAP 9.12"
},
{
"hardwarePlatform": "AFF A700",
"operatingSystem": "ONTAP 9.13"
},
{
"hardwarePlatform": "AFF A700",
"operatingSystem": "ONTAP 9.14"
},
{
"hardwarePlatform": "AFF A700",
"operatingSystem": "ONTAP 9.15"
},
{
"hardwarePlatform": "AFF A700",
"operatingSystem": "ONTAP 9.16"
},
{
"hardwarePlatform": "AFF A700",
"operatingSystem": "ONTAP 9.17"
},
{
"hardwarePlatform": "AFF A800",
"operatingSystem": "ONTAP 9.11"
},
{
"hardwarePlatform": "AFF A800",
"operatingSystem": "ONTAP 9.12"
},
{
"hardwarePlatform": "AFF A800",
"operatingSystem": "ONTAP 9.13"
},
{
"hardwarePlatform": "AFF A800",
"operatingSystem": "ONTAP 9.14"
},
{
"hardwarePlatform": "AFF A800",
"operatingSystem": "ONTAP 9.15"
},
{
"hardwarePlatform": "AFF A800",
"operatingSystem": "ONTAP 9.16"
},
{
"hardwarePlatform": "AFF A800",
"operatingSystem": "ONTAP 9.17"
},
{
"hardwarePlatform": "AFF A900",
"operatingSystem": "ONTAP 9.12"
},
{
"hardwarePlatform": "AFF A900",
"operatingSystem": "ONTAP 9.13"
},
{
"hardwarePlatform": "AFF A900",
"operatingSystem": "ONTAP 9.14"
},
{
"hardwarePlatform": "AFF A900",
"operatingSystem": "ONTAP 9.15"
},
{
"hardwarePlatform": "AFF A900",
"operatingSystem": "ONTAP 9.16"
},
{
"hardwarePlatform": "AFF A900",
"operatingSystem": "ONTAP 9.17"
},
{
"hardwarePlatform": "AFF C30",
"operatingSystem": "ONTAP 9.16"
},
{
"hardwarePlatform": "AFF C30",
"operatingSystem": "ONTAP 9.17"
},
{
"hardwarePlatform": "AFF C60",
"operatingSystem": "ONTAP 9.16"
},
{
"hardwarePlatform": "AFF C60",
"operatingSystem": "ONTAP 9.17"
},
{
"hardwarePlatform": "AFF C80",
"operatingSystem": "ONTAP 9.16"
},
{
"hardwarePlatform": "AFF C80",
"operatingSystem": "ONTAP 9.17"
},
{
"hardwarePlatform": "AFF C190",
"operatingSystem": "ONTAP 9.11"
},
{
"hardwarePlatform": "AFF C190",
"operatingSystem": "ONTAP 9.12"
},
{
"hardwarePlatform": "AFF C190",
"operatingSystem": "ONTAP 9.13"
},
{
"hardwarePlatform": "AFF C190",
"operatingSystem": "ONTAP 9.14"
},
{
"hardwarePlatform": "AFF C190",
"operatingSystem": "ONTAP 9.15"
},
{
"hardwarePlatform": "AFF C190",
"operatingSystem": "ONTAP 9.16"
},
{
"hardwarePlatform": "AFF C190",
"operatingSystem": "ONTAP 9.17"
},
{
"hardwarePlatform": "AFF C250",
"operatingSystem": "ONTAP 9.11"
},
{
"hardwarePlatform": "AFF C250",
"operatingSystem": "ONTAP 9.12"
},
{
"hardwarePlatform": "AFF C250",
"operatingSystem": "ONTAP 9.13"
},
{
"hardwarePlatform": "AFF C250",
"operatingSystem": "ONTAP 9.14"
},
{
"hardwarePlatform": "AFF C250",
"operatingSystem": "ONTAP 9.15"
},
{
"hardwarePlatform": "AFF C250",
"operatingSystem": "ONTAP 9.16"
},
{
"hardwarePlatform": "AFF C250",
"operatingSystem": "ONTAP 9.17"
},
{
"hardwarePlatform": "AFF C400",
"operatingSystem": "ONTAP 9.11"
},
{
"hardwarePlatform": "AFF C400",
"operatingSystem": "ONTAP 9.12"
},
{
"hardwarePlatform": "AFF C400",
"operatingSystem": "ONTAP 9.13"
},
{
"hardwarePlatform": "AFF C400",
"operatingSystem": "ONTAP 9.14"
},
{
"hardwarePlatform": "AFF C400",
"operatingSystem": "ONTAP 9.15"
},
{
"hardwarePlatform": "AFF C400",
"operatingSystem": "ONTAP 9.16"
},
{
"hardwarePlatform": "AFF C400",
"operatingSystem": "ONTAP 9.17"
},
{
"hardwarePlatform": "AFF C800",
"operatingSystem": "ONTAP 9.11"
},
{
"hardwarePlatform": "AFF C800",
"operatingSystem": "ONTAP 9.12"
},
{
"hardwarePlatform": "AFF C800",
"operatingSystem": "ONTAP 9.13"
},
{
"hardwarePlatform": "AFF C800",
"operatingSystem": "ONTAP 9.14"
},
{
"hardwarePlatform": "AFF C800",
"operatingSystem": "ONTAP 9.15"
},
{
"hardwarePlatform": "AFF C800",
"operatingSystem": "ONTAP 9.16"
},
{
"hardwarePlatform": "AFF C800",
"operatingSystem": "ONTAP 9.17"
},
{
"hardwarePlatform": "ASA A1K",
"operatingSystem": "ONTAP 9.16"
},
{
"hardwarePlatform": "ASA A1K",
"operatingSystem": "ONTAP 9.17"
},
{
"hardwarePlatform": "ASA A20",
"operatingSystem": "ONTAP 9.16"
},
{
"hardwarePlatform": "ASA A20",
"operatingSystem": "ONTAP 9.17"
},
{
"hardwarePlatform": "ASA A30",
"operatingSystem": "ONTAP 9.16"
},
{
"hardwarePlatform": "ASA A30",
"operatingSystem": "ONTAP 9.17"
},
{
"hardwarePlatform": "ASA A50",
"operatingSystem": "ONTAP 9.16"
},
{
"hardwarePlatform": "ASA A50",
"operatingSystem": "ONTAP 9.17"
},
{
"hardwarePlatform": "ASA A70",
"operatingSystem": "ONTAP 9.16"
},
{
"hardwarePlatform": "ASA A70",
"operatingSystem": "ONTAP 9.17"
},
{
"hardwarePlatform": "ASA A90",
"operatingSystem": "ONTAP 9.16 ONTAP"
},
{
"hardwarePlatform": "ASA A90",
"operatingSystem": "9.17"
},
{
"hardwarePlatform": "ASA A150",
"operatingSystem": "ONTAP 9.13"
},
{
"hardwarePlatform": "ASA A150",
"operatingSystem": "ONTAP 9.14"
},
{
"hardwarePlatform": "ASA A150",
"operatingSystem": "ONTAP 9.15"
},
{
"hardwarePlatform": "ASA A150",
"operatingSystem": "ONTAP 9.16"
},
{
"hardwarePlatform": "ASA A150",
"operatingSystem": "ONTAP 9.17"
},
{
"hardwarePlatform": "ASA A250",
"operatingSystem": "ONTAP 9.13"
},
{
"hardwarePlatform": "ASA A250",
"operatingSystem": "ONTAP 9.14"
},
{
"hardwarePlatform": "ASA A250",
"operatingSystem": "ONTAP 9.15"
},
{
"hardwarePlatform": "ASA A250",
"operatingSystem": "ONTAP 9.16"
},
{
"hardwarePlatform": "ASA A250",
"operatingSystem": "ONTAP 9.17"
},
{
"hardwarePlatform": "ASA A400",
"operatingSystem": "ONTAP 9.13"
},
{
"hardwarePlatform": "ASA A400",
"operatingSystem": "ONTAP 9.14"
},
{
"hardwarePlatform": "ASA A400",
"operatingSystem": "ONTAP 9.15"
},
{
"hardwarePlatform": "ASA A400",
"operatingSystem": "ONTAP 9.16"
},
{
"hardwarePlatform": "ASA A400",
"operatingSystem": "ONTAP 9.17"
},
{
"hardwarePlatform": "ASA A800",
"operatingSystem": "ONTAP 9.13"
},
{
"hardwarePlatform": "ASA A800",
"operatingSystem": "ONTAP 9.14"
},
{
"hardwarePlatform": "ASA A800",
"operatingSystem": "ONTAP 9.15"
},
{
"hardwarePlatform": "ASA A800",
"operatingSystem": "ONTAP 9.16"
},
{
"hardwarePlatform": "ASA A800",
"operatingSystem": "ONTAP 9.17"
},
{
"hardwarePlatform": "ASA A900",
"operatingSystem": "ONTAP 9.13"
},
{
"hardwarePlatform": "ASA A900",
"operatingSystem": "ONTAP 9.14"
},
{
"hardwarePlatform": "ASA A900",
"operatingSystem": "ONTAP 9.15"
},
{
"hardwarePlatform": "ASA A900",
"operatingSystem": "ONTAP 9.16"
},
{
"hardwarePlatform": "ASA A900",
"operatingSystem": "ONTAP 9.17"
},
{
"hardwarePlatform": "ASA AFF A220",
"operatingSystem": "ONTAP 9.11"
},
{
"hardwarePlatform": "ASA AFF A220",
"operatingSystem": "ONTAP 9.12"
},
{
"hardwarePlatform": "ASA AFF A220",
"operatingSystem": "ONTAP 9.13"
},
{
"hardwarePlatform": "ASA AFF A220",
"operatingSystem": "ONTAP 9.14"
},
{
"hardwarePlatform": "ASA AFF A220",
"operatingSystem": "ONTAP 9.15"
},
{
"hardwarePlatform": "ASA AFF A220",
"operatingSystem": "ONTAP 9.16"
},
{
"hardwarePlatform": "ASA AFF A220",
"operatingSystem": "ONTAP 9.17"
},
{
"hardwarePlatform": "ASA AFF A250",
"operatingSystem": "ONTAP 9.11"
},
{
"hardwarePlatform": "ASA AFF A250",
"operatingSystem": "ONTAP 9.12"
},
{
"hardwarePlatform": "ASA AFF A250",
"operatingSystem": "ONTAP 9.13"
},
{
"hardwarePlatform": "ASA AFF A400",
"operatingSystem": "ONTAP 9.11"
},
{
"hardwarePlatform": "ASA AFF A400",
"operatingSystem": "ONTAP 9.12"
},
{
"hardwarePlatform": "ASA AFF A400",
"operatingSystem": "ONTAP 9.13"
},
{
"hardwarePlatform": "ASA AFF A700",
"operatingSystem": "ONTAP 9.11"
},
{
"hardwarePlatform": "ASA AFF A700",
"operatingSystem": "ONTAP 9.12"
},
{
"hardwarePlatform": "ASA AFF A700",
"operatingSystem": "ONTAP 9.13"
},
{
"hardwarePlatform": "ASA AFF A700",
"operatingSystem": "ONTAP 9.14"
},
{
"hardwarePlatform": "ASA AFF A700",
"operatingSystem": "ONTAP 9.15"
},
{
"hardwarePlatform": "ASA AFF A700",
"operatingSystem": "ONTAP 9.16"
},
{
"hardwarePlatform": "ASA AFF A700",
"operatingSystem": "ONTAP 9.17"
},
{
"hardwarePlatform": "ASA AFF A800",
"operatingSystem": "ONTAP 9.11"
},
{
"hardwarePlatform": "ASA AFF A800",
"operatingSystem": "ONTAP 9.12"
},
{
"hardwarePlatform": "ASA AFF A800",
"operatingSystem": "ONTAP 9.13"
},
{
"hardwarePlatform": "ASA C30",
"operatingSystem": "ONTAP 9.16"
},
{
"hardwarePlatform": "ASA C30",
"operatingSystem": "ONTAP 9.17"
},
{
"hardwarePlatform": "ASA C250",
"operatingSystem": "ONTAP 9.13"
},
{
"hardwarePlatform": "ASA C250",
"operatingSystem": "ONTAP 9.14"
},
{
"hardwarePlatform": "ASA C250",
"operatingSystem": "ONTAP 9.15"
},
{
"hardwarePlatform": "ASA C250",
"operatingSystem": "ONTAP 9.16"
},
{
"hardwarePlatform": "ASA C250",
"operatingSystem": "ONTAP 9.17"
},
{
"hardwarePlatform": "ASA C400",
"operatingSystem": "ONTAP 9.13"
},
{
"hardwarePlatform": "ASA C400",
"operatingSystem": "ONTAP 9.14"
},
{
"hardwarePlatform": "ASA C400",
"operatingSystem": "ONTAP 9.15"
},
{
"hardwarePlatform": "ASA C400",
"operatingSystem": "ONTAP 9.16"
},
{
"hardwarePlatform": "ASA C400",
"operatingSystem": "ONTAP 9.17"
},
{
"hardwarePlatform": "ASA C800",
"operatingSystem": "ONTAP 9.13"
},
{
"hardwarePlatform": "ASA C800",
"operatingSystem": "ONTAP 9.14"
},
{
"hardwarePlatform": "ASA C800",
"operatingSystem": "ONTAP 9.15"
},
{
"hardwarePlatform": "ASA C800",
"operatingSystem": "ONTAP 9.16"
},
{
"hardwarePlatform": "ASA C800",
"operatingSystem": "ONTAP 9.17"
},
{
"hardwarePlatform": "FAS50",
"operatingSystem": "ONTAP 9.16"
},
{
"hardwarePlatform": "FAS50",
"operatingSystem": "ONTAP 9.17"
},
{
"hardwarePlatform": "FAS70",
"operatingSystem": "ONTAP 9.15"
},
{
"hardwarePlatform": "FAS70",
"operatingSystem": "ONTAP 9.16"
},
{
"hardwarePlatform": "FAS70",
"operatingSystem": "ONTAP 9.17"
},
{
"hardwarePlatform": "FAS90",
"operatingSystem": "ONTAP 9.15"
},
{
"hardwarePlatform": "FAS90",
"operatingSystem": "ONTAP 9.16"
},
{
"hardwarePlatform": "FAS90",
"operatingSystem": "ONTAP 9.17"
},
{
"hardwarePlatform": "FAS2720",
"operatingSystem": "ONTAP 9.11"
},
{
"hardwarePlatform": "FAS2720",
"operatingSystem": "ONTAP 9.12"
},
{
"hardwarePlatform": "FAS2720",
"operatingSystem": "ONTAP 9.13"
},
{
"hardwarePlatform": "FAS2720",
"operatingSystem": "ONTAP 9.14"
},
{
"hardwarePlatform": "FAS2720",
"operatingSystem": "ONTAP 9.15"
},
{
"hardwarePlatform": "FAS2720",
"operatingSystem": "ONTAP 9.16"
},
{
"hardwarePlatform": "FAS2720",
"operatingSystem": "ONTAP 9.17"
},
{
"hardwarePlatform": "FAS2750",
"operatingSystem": "ONTAP 9.11"
},
{
"hardwarePlatform": "FAS2750",
"operatingSystem": "ONTAP 9.12"
},
{
"hardwarePlatform": "FAS2750",
"operatingSystem": "ONTAP 9.13"
},
{
"hardwarePlatform": "FAS2750",
"operatingSystem": "ONTAP 9.14"
},
{
"hardwarePlatform": "FAS2750",
"operatingSystem": "ONTAP 9.15"
},
{
"hardwarePlatform": "FAS2750",
"operatingSystem": "ONTAP 9.16"
},
{
"hardwarePlatform": "FAS2750",
"operatingSystem": "ONTAP 9.17"
},
{
"hardwarePlatform": "FAS2820",
"operatingSystem": "ONTAP 9.13"
},
{
"hardwarePlatform": "FAS2820",
"operatingSystem": "ONTAP 9.14"
},
{
"hardwarePlatform": "FAS2820",
"operatingSystem": "ONTAP 9.15"
},
{
"hardwarePlatform": "FAS2820",
"operatingSystem": "ONTAP 9.16"
},
{
"hardwarePlatform": "FAS2820",
"operatingSystem": "ONTAP 9.17"
},
{
"hardwarePlatform": "FAS500f",
"operatingSystem": "ONTAP 9.11"
},
{
"hardwarePlatform": "FAS500f",
"operatingSystem": "ONTAP 9.12"
},
{
"hardwarePlatform": "FAS500f",
"operatingSystem": "ONTAP 9.13"
},
{
"hardwarePlatform": "FAS500f",
"operatingSystem": "ONTAP 9.14"
},
{
"hardwarePlatform": "FAS500f",
"operatingSystem": "ONTAP 9.15"
},
{
"hardwarePlatform": "FAS500f",
"operatingSystem": "ONTAP 9.16"
},
{
"hardwarePlatform": "FAS500f",
"operatingSystem": "ONTAP 9.17"
},
{
"hardwarePlatform": "FAS8200",
"operatingSystem": "ONTAP 9.11"
},
{
"hardwarePlatform": "FAS8200",
"operatingSystem": "ONTAP 9.12"
},
{
"hardwarePlatform": "FAS8200",
"operatingSystem": "ONTAP 9.13"
},
{
"hardwarePlatform": "FAS8200",
"operatingSystem": "ONTAP 9.14"
},
{
"hardwarePlatform": "FAS8200",
"operatingSystem": "ONTAP 9.15"
},
{
"hardwarePlatform": "FAS8200",
"operatingSystem": "ONTAP 9.16"
},
{
"hardwarePlatform": "FAS8300",
"operatingSystem": "ONTAP 9.11"
},
{
"hardwarePlatform": "FAS8300",
"operatingSystem": "ONTAP 9.12"
},
{
"hardwarePlatform": "FAS8300",
"operatingSystem": "ONTAP 9.13"
},
{
"hardwarePlatform": "FAS8300",
"operatingSystem": "ONTAP 9.14"
},
{
"hardwarePlatform": "FAS8300",
"operatingSystem": "ONTAP 9.15"
},
{
"hardwarePlatform": "FAS8300",
"operatingSystem": "ONTAP 9.16"
},
{
"hardwarePlatform": "FAS8300",
"operatingSystem": "ONTAP 9.17"
},
{
"hardwarePlatform": "FAS8700",
"operatingSystem": "ONTAP 9.11"
},
{
"hardwarePlatform": "FAS8700",
"operatingSystem": "ONTAP 9.12"
},
{
"hardwarePlatform": "FAS8700",
"operatingSystem": "ONTAP 9.13"
},
{
"hardwarePlatform": "FAS8700",
"operatingSystem": "ONTAP 9.14"
},
{
"hardwarePlatform": "FAS8700",
"operatingSystem": "ONTAP 9.15"
},
{
"hardwarePlatform": "FAS8700",
"operatingSystem": "ONTAP 9.16"
},
{
"hardwarePlatform": "FAS8700",
"operatingSystem": "ONTAP 9.17"
},
{
"hardwarePlatform": "FAS9000",
"operatingSystem": "ONTAP 9.11"
},
{
"hardwarePlatform": "FAS9000",
"operatingSystem": "ONTAP 9.12"
},
{
"hardwarePlatform": "FAS9000",
"operatingSystem": "ONTAP 9.13"
},
{
"hardwarePlatform": "FAS9000",
"operatingSystem": "ONTAP 9.14"
},
{
"hardwarePlatform": "FAS9000",
"operatingSystem": "ONTAP 9.15"
},
{
"hardwarePlatform": "FAS9000",
"operatingSystem": "ONTAP 9.16"
},
{
"hardwarePlatform": "FAS9000",
"operatingSystem": "ONTAP 9.17"
},
{
"hardwarePlatform": "FAS9500",
"operatingSystem": "ONTAP 9.11"
},
{
"hardwarePlatform": "FAS9500",
"operatingSystem": "ONTAP 9.12"
},
{
"hardwarePlatform": "FAS9500",
"operatingSystem": "ONTAP 9.13"
},
{
"hardwarePlatform": "FAS9500",
"operatingSystem": "ONTAP 9.14"
},
{
"hardwarePlatform": "FAS9500",
"operatingSystem": "ONTAP 9.15"
},
{
"hardwarePlatform": "FAS9500",
"operatingSystem": "ONTAP 9.16"
},
{
"hardwarePlatform": "FAS9500",
"operatingSystem": "ONTAP 9.17"
},
{
"hardwarePlatform": "AFF A700s",
"operatingSystem": "ONTAP 9.11"
},
{
"hardwarePlatform": "AFF A700s",
"operatingSystem": "ONTAP 9.12"
},
{
"hardwarePlatform": "AFF A700s",
"operatingSystem": "ONTAP 9.13"
},
{
"hardwarePlatform": "AFF A700s",
"operatingSystem": "ONTAP 9.14"
},
{
"hardwarePlatform": "AFF A700s",
"operatingSystem": "ONTAP 9.15"
},
{
"hardwarePlatform": "AFF A700s",
"operatingSystem": "ONTAP 9.16"
},
{
"hardwarePlatform": "AFF A700s",
"operatingSystem": "ONTAP 9.17"
},
{
"hardwarePlatform": "FDvM300-16GB",
"operatingSystem": "Data ONTAP Select 9.11 with VMware ESXi 7, 8"
},
{
"hardwarePlatform": "FDvM300-16GB FDvM300-16GB",
"operatingSystem": "Data ONTAP Select 9.12 with VMware ESXi 7, 8"
},
{
"hardwarePlatform": "FDvM300-16GB",
"operatingSystem": "Data ONTAP Select 9.13 with VMware ESXi 7, 8"
},
{
"hardwarePlatform": "",
"operatingSystem": "Data ONTAP Select 9.14 with VMware ESXi 7, 8"
},
{
"hardwarePlatform": "FDvM300-16GB",
"operatingSystem": "Data ONTAP Select 9.15 with VMware ESXi 7, 8"
},
{
"hardwarePlatform": "FDvM300-16GB",
"operatingSystem": "Data ONTAP Select 9.16 with VMware ESXi 7, 8"
},
{
"hardwarePlatform": "FDvM300-16GB",
"operatingSystem": "Data ONTAP Select 9.17 with VMware ESXi 7, 8"
},
{
"hardwarePlatform": "FDvM300-16GB",
"operatingSystem": "Data ONTAP Select 9.17 with VMware ESXi 9"
},
{
"hardwarePlatform": "FDvM300-16GB",
"operatingSystem": "Data ONTAP Select 9.16 with RHEL Server KVM 9.5, 9.6"
},
{
"hardwarePlatform": "FDvM300-16GB",
"operatingSystem": "Data ONTAP Select 9.17 with RHEL Server KVM 9.5, 9.6"
},
{
"hardwarePlatform": "FDvM300-16GB",
"operatingSystem": "Data ONTAP Select 9.14 with RHEL Server KVM 8.6, 8.7, 8.8, 8.9, 9.0, 9.1, 9.2, 9.3, 9.4"
},
{
"hardwarePlatform": "FDvM300-16GB",
"operatingSystem": "Data ONTAP Select 9.15 with RHEL Server KVM 8.6, 8.7, 8.8, 8.9, 9.0, 9.1, 9.2, 9.3, 9.4"
},
{
"hardwarePlatform": "FDvM300-16GB",
"operatingSystem": "Data ONTAP Select 9.16 with RHEL Server KVM 8.6, 8.7, 8.8, 8.9, 9.0, 9.1, 9.2, 9.3, 9.4"
},
{
"hardwarePlatform": "FDvM300-64GB",
"operatingSystem": "Data ONTAP Select 9.11 with VMware ESXi 7, 8"
},
{
"hardwarePlatform": "FDvM300-64GB",
"operatingSystem": "Data ONTAP Select 9.12 with VMware ESXi 7, 8"
},
{
"hardwarePlatform": "FDvM300-64GB",
"operatingSystem": "Data ONTAP Select 9.13 with VMware ESXi 7, 8"
},
{
"hardwarePlatform": "FDvM300-64GB",
"operatingSystem": "Data ONTAP Select 9.14 with VMware ESXi 7, 8"
},
{
"hardwarePlatform": "FDvM300-64GB",
"operatingSystem": "Data ONTAP Select 9.15 with VMware ESXi 7, 8"
},
{
"hardwarePlatform": "FDvM300-64GB",
"operatingSystem": "Data ONTAP Select 9.16 with VMware ESXi 7, 8"
},
{
"hardwarePlatform": "FDvM300-64GB",
"operatingSystem": "Data ONTAP Select 9.17 with VMware ESXi 7, 8"
},
{
"hardwarePlatform": "FDvM300-64GB",
"operatingSystem": "Data ONTAP Select 9.17 with VMware ESXi 9"
},
{
"hardwarePlatform": "FDvM300-64GB",
"operatingSystem": "Data ONTAP Select 9.16 with RHEL Server KVM 9.5, 9.6"
},
{
"hardwarePlatform": "FDvM300-64GB",
"operatingSystem": "Data ONTAP Select 9.17 with RHEL Server KVM 9.5, 9.6"
},
{
"hardwarePlatform": "FDvM300-64GB",
"operatingSystem": "Data ONTAP Select 9.14 with RHEL Server KVM 8.6, 8.7, 8.8, 8.9, 9.0, 9.1, 9.2, 9.3, 9.4"
},
{
"hardwarePlatform": "FDvM300-64GB",
"operatingSystem": "Data ONTAP Select 9.15 with RHEL Server KVM 8.6, 8.7, 8.8, 8.9, 9.0, 9.1, 9.2, 9.3, 9.4"
},
{
"hardwarePlatform": "FDvM300-64GB",
"operatingSystem": "Data ONTAP Select 9.16 with RHEL Server KVM 8.6, 8.7, 8.8, 8.9, 9.0, 9.1, 9.2, 9.3, 9.4"
},
{
"hardwarePlatform": "FDvM300-128GB",
"operatingSystem": "Data ONTAP Select 9.11 with VMware ESXi 7, 8"
},
{
"hardwarePlatform": "FDvM300-128GB",
"operatingSystem": "Data ONTAP Select 9.12 with VMware ESXi 7, 8"
},
{
"hardwarePlatform": "FDvM300-128GB",
"operatingSystem": "Data ONTAP Select 9.13 with VMware ESXi 7, 8"
},
{
"hardwarePlatform": "FDvM300-128GB",
"operatingSystem": "Data ONTAP Select 9.14 with VMware ESXi 7, 8"
},
{
"hardwarePlatform": "FDvM300-128GB",
"operatingSystem": "Data ONTAP Select 9.15 with VMware ESXi 7, 8"
},
{
"hardwarePlatform": "FDvM300-128GB",
"operatingSystem": "Data ONTAP Select 9.16 with VMware ESXi 7, 8"
},
{
"hardwarePlatform": "FDvM300-128GB",
"operatingSystem": "Data ONTAP Select 9.17 with VMware ESXi 7, 8"
},
{
"hardwarePlatform": "FDvM300-128GB",
"operatingSystem": "Data ONTAP Select 9.17 with VMware ESXi 9"
},
{
"hardwarePlatform": "AWS EC2 Nitro",
"operatingSystem": "Amazon FSx for NetApp ONTAP 9.11"
},
{
"hardwarePlatform": "AWS EC2 Nitro",
"operatingSystem": "Amazon FSx for NetApp ONTAP 9.12"
},
{
"hardwarePlatform": "AWS EC2 Nitro",
"operatingSystem": "Amazon FSx for NetApp ONTAP 9.13"
},
{
"hardwarePlatform": "AWS EC2 Nitro",
"operatingSystem": "Amazon FSx for NetApp ONTAP 9.14"
},
{
"hardwarePlatform": "AWS EC2 Nitro",
"operatingSystem": "Amazon FSx for NetApp ONTAP 9.15"
},
{
"hardwarePlatform": "AWS EC2 Nitro",
"operatingSystem": "Amazon FSx for NetApp ONTAP 9.16"
},
{
"hardwarePlatform": "AWS EC2 Nitro",
"operatingSystem": "Amazon FSx for NetApp ONTAP 9.17"
},
{
"hardwarePlatform": "Microsoft Azure Compute",
"operatingSystem": "Cloud Volumes ONTAP 9.11"
},
{
"hardwarePlatform": "Microsoft Azure Compute",
"operatingSystem": "Cloud Volumes ONTAP 9.12"
},
{
"hardwarePlatform": "Microsoft Azure Compute",
"operatingSystem": "Cloud Volumes ONTAP 9.13"
},
{
"hardwarePlatform": "Microsoft Azure Compute",
"operatingSystem": "Cloud Volumes ONTAP 9.14"
},
{
"hardwarePlatform": "Microsoft Azure Compute",
"operatingSystem": "Cloud Volumes ONTAP 9.15"
},
{
"hardwarePlatform": "Microsoft Azure Compute",
"operatingSystem": "Cloud Volumes ONTAP 9.16"
},
{
"hardwarePlatform": "Microsoft Azure Compute",
"operatingSystem": "Cloud Volumes ONTAP 9.17"
},
{
"hardwarePlatform": "Google Compute Engine",
"operatingSystem": "Cloud Volumes ONTAP 9.11"
},
{
"hardwarePlatform": "Google Compute Engine",
"operatingSystem": "Cloud Volumes ONTAP 9.12"
},
{
"hardwarePlatform": "Google Compute Engine",
"operatingSystem": "Cloud Volumes ONTAP 9.13"
},
{
"hardwarePlatform": "Google Compute Engine",
"operatingSystem": "Cloud Volumes ONTAP 9.14"
},
{
"hardwarePlatform": "Google Compute Engine",
"operatingSystem": "Cloud Volumes ONTAP 9.15"
},
{
"hardwarePlatform": "Google Compute Engine",
"operatingSystem": "Cloud Volumes ONTAP 9.16"
},
{
"hardwarePlatform": "Google Compute Engine",
"operatingSystem": "Cloud Volumes ONTAP 9.17"
}
],
"found": true,
"section": 2,
"subsection": 2
}
},
"is_br1_format": true,
"keywords": {
"asymmetric_crypto": {},
"certification_process": {},
"cipher_mode": {
"CCM": {
"CCM": 10
},
"CTR": {
"CTR": 2
},
"GCM": {
"GCM": 10
},
"XTS": {
"XTS": 6
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {},
"crypto_protocol": {
"IPsec": {
"IPsec": 4
},
"TLS": {
"TLS": {
"TLS": 8
}
}
},
"crypto_scheme": {
"KA": {
"Key Agreement": 2
},
"MAC": {
"MAC": 8
}
},
"device_model": {},
"ecc_curve": {},
"eval_facility": {},
"fips_cert_id": {
"Cert": {
"#2": 1
}
},
"fips_certlike": {
"Certlike": {
"AES CTR (256": 1,
"AES-256": 1,
"DRBG 256": 1,
"DRBG 384": 1,
"DRBG 4096": 1,
"HMAC- SHA-1": 1,
"HMAC-SHA-1": 8,
"SHA-1": 8,
"SHA-3": 1,
"SHA2- 256": 1,
"SHA2- 512": 1,
"SHA2-256": 5,
"SHA2-512": 6,
"SHA3-256": 4
}
},
"fips_security_level": {
"Level": {
"Level 1": 3
}
},
"hash_function": {
"PBKDF": {
"PBKDF": 12
},
"SHA": {
"SHA1": {
"SHA-1": 8
},
"SHA3": {
"SHA-3": 1,
"SHA3-256": 4
}
}
},
"ic_data_group": {},
"javacard_api_const": {},
"javacard_packages": {},
"javacard_version": {},
"os_name": {},
"pq_crypto": {},
"randomness": {
"PRNG": {
"DRBG": 37
},
"RNG": {
"RBG": 2,
"RNG": 1
}
},
"side_channel_analysis": {},
"standard_id": {
"FIPS": {
"FIPS 140-3": 12,
"FIPS 180-4": 3,
"FIPS 198-1": 3,
"FIPS 202": 2
},
"NIST": {
"NIST SP 800-132": 1,
"NIST SP 800-38E": 1,
"NIST SP 800-90": 1,
"SP 800-108": 1,
"SP 800-132": 1,
"SP 800-133": 1,
"SP 800-38A": 2,
"SP 800-38B": 1,
"SP 800-38C": 1,
"SP 800-38D": 2,
"SP 800-38E": 1,
"SP 800-38F": 1,
"SP 800-90A": 1
},
"RFC": {
"RFC 4106": 1,
"RFC 5288": 1
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 54,
"AES-": 2,
"AES-256": 1
},
"CAST": {
"CAST": 36
}
},
"constructions": {
"MAC": {
"CMAC": 7,
"HMAC": 8
}
}
},
"tee_name": {},
"tls_cipher_suite": {},
"vendor": {
"Microsoft": {
"Microsoft": 7
}
},
"vulnerability": {}
},
"module_algorithms": {
"_type": "Set",
"elements": [
"AES-KWPA2640",
"AES-GMACA2640",
"HMAC-SHA2-512A2640",
"SHA2-512A2640",
"AES-XTS Testing Revision 2.0A2640",
"PBKDFA2640",
"AES-GCMA2640",
"AES-CCMA2640",
"AES-CBCA2640",
"SHA-1A2640",
"Counter DRBGA2640",
"HMAC-SHA2-256A2640",
"KDF SP800-108A2640",
"AES-ECBA2640",
"SHA2-256A2640",
"AES-CMACA2640",
"SHA3-256A2640",
"HMAC-SHA-1A2640"
]
},
"policy_algorithms": {
"_type": "Set",
"elements": [
"#A6624"
]
},
"policy_metadata": {
"/Author": "Tim Chevalier",
"/CreationDate": "D:20251202153011-05\u002700\u0027",
"/Creator": "Microsoft\u00ae Word for Microsoft 365",
"/ModDate": "D:20251202153011-05\u002700\u0027",
"/Producer": "Microsoft\u00ae Word for Microsoft 365",
"pdf_file_size_bytes": 694927,
"pdf_hyperlinks": {
"_type": "Set",
"elements": [
"https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/entropy/E1_PublicUse.pdf",
"https://docs.netapp.com/"
]
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 38
}
},
"state": {
"_type": "sec_certs.sample.fips.InternalState",
"module": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": null,
"txt_hash": null
},
"policy": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": "a24743f1212ea498911ab96981bfb9126458b3e8761b6771b4730a1fbd08f1da",
"source_hash": "43d786dab23203ed8f016d6362606ebf9290193fb556c1df7df0a3e9cf3ab964",
"txt_hash": "d30be3fab02e1f26b4b697860a202a40b92447ab2b2a620bde520deac0ee65ab"
}
},
"web_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
"caveat": "Interim validation. When installed, initialized and configured as specified in section 11 of the Security Policy",
"certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/July 2024_010824_1146.pdf",
"date_sunset": null,
"description": "NetApp CryptoMod is a software cryptographic module whose purpose is to provide encryption/decryption services for NetApp\u2019s ONTAP Operating System (OS) kernel. The CryptoMod module makes use of the AES-NI instruction set in Intel\uf0e2 processors. Since CryptoMod can support non-PAA implementations as well as PAA implementations of the pertinent cryptographic algorithms, CryptoMod is designated as a software-only cryptographic module.",
"embodiment": "Multi-Chip Stand Alone",
"exceptions": [
"Physical security: N/A",
"Mitigation of other attacks: N/A"
],
"fw_versions": null,
"historical_reason": "Replaced by certificate #5271",
"hw_versions": null,
"level": 1,
"mentioned_certs": {},
"module_name": "NetApp CryptoMod",
"module_type": "Software",
"revoked_link": null,
"revoked_reason": null,
"standard": "FIPS 140-3",
"status": "historical",
"sw_versions": "3.0",
"tested_conf": [
"ONTAP 9.11.1 running on AFF A250 system with an Intel Xeon D-2164IT with PAA",
"ONTAP 9.11.1 running on AFF A250 system with an Intel Xeon D-2164IT without PAA",
"ONTAP 9.11.1 running on AFF A400 system with an Intel Xeon Silver 4210 with PAA",
"ONTAP 9.11.1 running on AFF A400 system with an Intel Xeon Silver 4210 without PAA",
"ONTAP 9.11.1 running on AFF A900 system with an Intel Xeon Platinum 8352Y with PAA",
"ONTAP 9.11.1 running on AFF A900 system with an Intel Xeon Platinum 8352Y without PAA"
],
"validation_history": [
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2024-07-19",
"lab": "Lightship Security, Inc.",
"validation_type": "Initial"
},
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2026-03-06",
"lab": "Lightship Security, Inc.",
"validation_type": "Update"
}
],
"vendor": "NetApp, Inc.",
"vendor_url": "http://www.netapp.com"
}
}