This page was not yet optimized for use on mobile devices.

Cisco Catalyst 9200 Series Switches

Certificate #3835

Webpage information ?

Status	historical
Historical reason	SP 800-56Arev3 transition - replaced by certificate #4556
Validation dates	03.03.2021 , 25.08.2021
Standard	FIPS 140-2
Security level	1
Type	Hardware
Embodiment	Multi-Chip Stand Alone
Caveat	When operated in FIPS mode, installed, initialized and configured as specified in Section 3 of the Security Policy. This module contains the embedded module 'ACT2Lite Cryptographic Module' validated to FIPS 140-2 under Cert. #3637 operating in FIPS mode
Exceptions	Roles, Services, and Authentication: Level 3 Design Assurance: Level 2 Mitigation of Other Attacks: N/A
Description	With full PoE+ capability, power and fan redundancy, stacking bandwidth up to 160 Gbps, modular uplinks, Layer 3 feature support, and cold patching, Catalyst 9200 Series switches are the industry’s unparalleled solution with differentiated resiliency and progressive architecture for cost-effective branch-office access. The switches meet FIPS 140-2 overall Level 1 requirements as multi-chip standalone modules. Advanced security feature supports IOS-XE software, MACsec encryption, hardware anchored secure boot, Secure Unique Device Identification (SUDI) support.
Version (Hardware)	Cisco Catalyst C9200-24T, Cisco Catalyst C9200-48T, Cisco Catalyst C9200-24P, Cisco Catalyst C9200-48P, Cisco Catalyst C9200-24P8X and Cisco Catalyst C9200-48P8X with components C9200-NM-4G, C9200-NM-4X, C9200-NM-2Y and C9200-NM-2Q
Version (Firmware)	Cisco IOS-XE 16.12 and Cisco IOS-XE 17.3
Vendor	Cisco Systems, Inc.
References	This certificate's webpage directly references 1 certificates, transitively this expands into 1 certificates.

Certificate

Webpage

Security policy ?

Security target PDF TXT

Symmetric Algorithms

AES, RC4, DES, Triple-DES, HMAC, CMAC

Asymmetric Algorithms

RSA 2048, ECDH, ECDSA, ECC, DH, Diffie-Hellman

Hash functions

SHA-1, SHA1, SHA-256, SHA-384, SHA-512, MD5

Protocols

SSH, TLS, TLSv1.2, IKE, IKEv1, IKEv2, IPsec, VPN

Randomness

DRBG

Elliptic Curves

P-256, P-384

Block cipher modes

ECB, CBC, CTR, GCM

Vendor

Cisco Systems, Inc, Cisco, Cisco Systems

Security level

Level 1, level 1

Standards

FIPS 140-2, FIPS PUB 140-2, FIPS 140, FIPS 186-4, SP 800-52, SP 800-38D, SP 800-90A, SP 800-90, PKCS 1, PKCS#1, RFC 5288, RFC 7296, RFC 5246, RFC 4253, RFC 6071

File metadata

Author	[email protected]
Creation date	D:20210824105449-04'00'
Modification date	D:20210824105449-04'00'
Pages	25
Creator	Microsoft® Word for Microsoft 365
Producer	Microsoft® Word for Microsoft 365

References

Outgoing

3637 - active - ACT2Lite Cryptographic Module

Heuristics ?

CPE matches

cpe:2.3:h:cisco:catalyst_9200:-:*:*:*:*:*:*:*

References ?

Updates ?

21.08.2023 The certificate data changed.
Certificate changed

The web extraction data was updated.
- The status property was set to historical.
- The historical_reason property was set to SP 800-56Arev3 transition - replaced by certificate #4556.
- The date_sunset property was set to None.
09.02.2023 The certificate data changed.
Certificate changed

The cert_id was updated.
- The new value is 3835.
The web extraction data was updated.
- The following values were inserted: {'validation_history': [{'_type': 'sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry', 'date': '2021-03-03', 'validation_type': 'Initial', 'lab': 'ACUMEN SECURITY, LLC'}, {'_type': 'sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry', 'date': '2021-08-25', 'validation_type': 'Update', 'lab': 'ACUMEN SECURITY, LLC'}], 'vendor_url': 'http://www.cisco.com', 'certificate_pdf_url': 'https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/March 2021_010421_0724_signed.pdf', 'hw_versions': 'Cisco Catalyst C9200-24T, Cisco Catalyst C9200-48T, Cisco Catalyst C9200-24P, Cisco Catalyst C9200-48P, Cisco Catalyst C9200-24P8X and Cisco Catalyst C9200-48P8X with components C9200-NM-4G, C9200-NM-4X, C9200-NM-2Y and C9200-NM-2Q', 'fw_versions': 'Cisco IOS-XE 16.12 and Cisco IOS-XE 17.3'}.
- The standard property was set to FIPS 140-2.
- The status property was set to active.
- The level property was set to 1.
- The embodiment property was set to Multi-Chip Stand Alone.
- The tested_conf property was set to None.
- The description property was set to With full PoE+ capability, power and fan redundancy, stacking bandwidth up to 160 Gbps, modular uplinks, Layer 3 feature support, and cold patching, Catalyst 9200 Series switches are the industry’s unparalleled solution with differentiated resiliency and progressive architecture for cost-effective branch-office access. The switches meet FIPS 140-2 overall Level 1 requirements as multi-chip standalone modules. Advanced security feature supports IOS-XE software, MACsec encryption, hardware anchored secure boot, Secure Unique Device Identification (SUDI) support..
- The mentioned_certs property was updated, with the {'3637': 1} data.
- The following properties were deleted: ['date_validation', 'algorithms', 'vendor_www', 'lab', 'lab_nvlap', 'security_policy_www', 'certificate_www', 'hw_version', 'fw_version', 'product_url'].
The PDF extraction data was updated.
- The following values were inserted: {'policy_metadata': {'pdf_file_size_bytes': 669474, 'pdf_is_encrypted': False, 'pdf_number_of_pages': 25, '/Author': '[email protected]', '/Creator': 'Microsoft® Word for Microsoft 365', '/CreationDate': "D:20210824105449-04'00'", '/ModDate': "D:20210824105449-04'00'", '/Producer': 'Microsoft® Word for Microsoft 365', 'pdf_hyperlinks': {'_type': 'Set', 'elements': ['https://csrc.nist.gov/Projects/Cryptographic-Module-Validation-Program', 'http://www.cisco.com/']}}}.
- The following properties were deleted: ['cert_id', 'algorithms', 'clean_cert_ids', 'st_metadata'].
The computed heuristics were updated.
- The following values were inserted: {'policy_prunned_references': {'_type': 'Set', 'elements': ['3637']}, 'module_prunned_references': {'_type': 'Set', 'elements': ['3637']}, 'policy_processed_references': {'_type': 'sec_certs.sample.certificate.References', 'directly_referenced_by': None, 'indirectly_referenced_by': None, 'directly_referencing': {'_type': 'Set', 'elements': ['3637']}, 'indirectly_referencing': {'_type': 'Set', 'elements': ['3637']}}, 'module_processed_references': {'_type': 'sec_certs.sample.certificate.References', 'directly_referenced_by': None, 'indirectly_referenced_by': None, 'directly_referencing': {'_type': 'Set', 'elements': ['3637']}, 'indirectly_referencing': {'_type': 'Set', 'elements': ['3637']}}, 'direct_transitive_cves': None, 'indirect_transitive_cves': None}.
- The algorithms property was set to {'_type': 'Set', 'elements': ['AES#C462', 'SHS#C462', 'DRBG#C462', 'RSA#C462', 'SHS#C1301', 'KTS#C462', 'HMAC#C462', 'RSA#C1301', 'ECDSA#C462', 'KBKDF#C462', 'CVL#C462', 'Triple-DES#C462', 'AES#4769']}.
- The following properties were deleted: ['keywords', 'unmatched_algs', 'clean_cert_ids', 'st_references', 'web_references'].
The state was updated.
- The following values were inserted: {'module_download_ok': True, 'policy_download_ok': True, 'policy_convert_garbage': False, 'policy_convert_ok': True, 'module_extract_ok': True, 'policy_extract_ok': True, 'policy_pdf_hash': '0af74076c65edb5fe9a56e5927bedab93e743a23c57c3560762145c516f53a43', 'policy_txt_hash': 'f6add6f29000da0e3f24f0d67f2279492b684dce7daae6a10c092125a3310d15'}.
- The following properties were deleted: ['sp_path', 'html_path', 'tables_done', 'file_status', 'txt_state'].
07.12.2022 The certificate data changed.
Certificate changed

The computed heuristics were updated.
- The clean_cert_ids property was set to {'#3637': 2}.
- The st_references property was updated, with the {'directly_referencing': {'_type': 'Set', 'elements': ['3637']}, 'indirectly_referencing': {'_type': 'Set', 'elements': ['3637']}} data.
05.11.2022 The certificate data changed.
Certificate changed

The web extraction data was updated.
- The algorithms property was set to {'_type': 'Set', 'elements': []}.
The computed heuristics were updated.
- The algorithms property was updated, with the {'_type': 'Set', 'elements': [{'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#C462', 'algorithm_type': 'RSA', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#C462', 'algorithm_type': 'KTS', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#C462', 'algorithm_type': 'ECDSA', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#C462', 'algorithm_type': 'Triple-DES', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#C462', 'algorithm_type': 'SHS', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#4769', 'algorithm_type': 'AES', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#C462', 'algorithm_type': 'KBKDF', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#C462', 'algorithm_type': 'AES', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#C462', 'algorithm_type': 'DRBG', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#C1301', 'algorithm_type': 'RSA', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#C462', 'algorithm_type': 'CVL', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#C1301', 'algorithm_type': 'SHS', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#C462', 'algorithm_type': 'HMAC', 'vendor': None, 'implementation': None, 'date': None}]} values discarded.
01.11.2022 The certificate data changed.
Certificate changed

The computed heuristics were updated.
- The clean_cert_ids property was set to {}.
- The st_references property was updated, with the {'directly_referencing': None, 'indirectly_referencing': None} data.
29.10.2022 The certificate data changed.
Certificate changed

The computed heuristics were updated.
- The clean_cert_ids property was set to {'#3637': 2}.
- The st_references property was updated, with the {'directly_referencing': {'_type': 'Set', 'elements': ['3637']}, 'indirectly_referencing': {'_type': 'Set', 'elements': ['3637']}} data.
28.10.2022 The certificate data changed.
Certificate changed

The computed heuristics were updated.
- The clean_cert_ids property was set to {}.
- The st_references property was updated, with the {'directly_referencing': None, 'indirectly_referencing': None} data.
25.10.2022 The certificate data changed.
Certificate changed

The PDF extraction data was updated.
- The keywords property was updated, with the {'fips_cert_id': {'__update__': {'Cert': {'__update__': {'#1': 1}, '__delete__': ['#4769']}}}, 'fips_certlike': {'__update__': {'Certlike': {'__update__': {'SHA-1': 3, 'SHA1': 1, 'RSA 2048': 1, 'AES 128': 2}, '__delete__': ['HMAC SHA2', 'HMAC 160', 'SHA 256', 'AES (256', 'AES 168', 'AES-GCM 128', 'AES-CMAC 128', 'DRBG 128', 'DRBG 256']}}}, 'vendor': {'__update__': {'Cisco': {'__update__': {'Cisco': 21}}}, '__delete__': ['STMicroelectronics']}, 'symmetric_crypto': {'__update__': {'AES_competition': {'__update__': {'AES': {'__update__': {'AES': 13}, '__delete__': ['AES-']}}}, 'DES': {'__update__': {'DES': {'__update__': {'DES': 5}}}}, 'constructions': {'__update__': {'MAC': {'__update__': {'HMAC': 7, 'CMAC': 1}}}}}, '__delete__': ['miscellaneous']}, 'asymmetric_crypto': {'__update__': {'RSA': {'__update__': {'RSA 2048': 1}}, 'ECC': {'__update__': {'ECDSA': {'__update__': {'ECDSA': 5}}, 'ECC': {'__update__': {'ECC': 1}}}}, 'FF': {'__update__': {'DH': {'__update__': {'DH': 15}}}, '__delete__': ['DSA']}}}, 'hash_function': {'__update__': {'SHA': {'__update__': {'SHA1': {'__update__': {'SHA-1': 3, 'SHA1': 3}}, 'SHA2': {'__delete__': ['SHA-2', 'SHA2']}}, '__delete__': ['SHA3']}, 'MD': {'__update__': {'MD5': {'__update__': {'MD5': 7}}}}}}, 'crypto_scheme': {}, 'crypto_protocol': {'__update__': {'SSH': {'__update__': {'SSH': 20}}, 'TLS': {'__update__': {'TLS': {'__update__': {'TLS': 26}}}}, 'IKE': {'__update__': {'IKE': 16, 'IKEv1': 1, 'IKEv2': 3}}}}, 'randomness': {'__update__': {'PRNG': {'__update__': {'DRBG': 25}}}, '__delete__': ['RNG']}, 'cipher_mode': {'__update__': {'ECB': {'__update__': {'ECB': 2}}, 'CBC': {'__update__': {'CBC': 3}}, 'CTR': {'__update__': {'CTR': 1}}, 'GCM': {'__update__': {'GCM': 9}}}, '__delete__': ['CFB']}, 'ecc_curve': {'__update__': {'NIST': {'__update__': {'P-256': 12, 'P-384': 14}}}}, 'tee_name': {}, 'standard_id': {'__update__': {'FIPS': {'__update__': {'FIPS 140-2': 20}}, 'NIST': {'SP 800-52': 1, 'SP 800-38D': 1, 'SP 800-90A': 7, 'SP 800-90': 1}, 'RFC': {'RFC 5288': 1, 'RFC 7296': 2, 'RFC 5246': 1, 'RFC 4253': 1, 'RFC 6071': 1}}}} data.
- The algorithms property was set to {'_type': 'Set', 'elements': [{'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '100', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': ' 800', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': ' 5', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': ' 4', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '160', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '2', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': ' 140', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '45', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '1000', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': ' 256', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '10', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': ' 0', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': ' 128', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': ' 3', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '90', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': ' 0', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': ' 2', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': ' 1', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': ' 48', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': ' 10', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}]}.
The computed heuristics were updated.
- The algorithms property was updated, with the {'_type': 'Set', 'elements': [{'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '100', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': ' 800', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': ' 5', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': ' 4', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '160', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '2', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': ' 140', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '45', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '1000', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': ' 256', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '10', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': ' 0', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': ' 128', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': ' 3', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '90', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': ' 0', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': ' 2', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': ' 1', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': ' 48', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': ' 10', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}]} values added.
- The clean_cert_ids property was set to {'#3637': 2}.
- The st_references property was updated, with the {'directly_referencing': {'_type': 'Set', 'elements': ['3637']}, 'indirectly_referencing': {'_type': 'Set', 'elements': ['3637']}} data.
- The web_references property was updated, with the {'directly_referencing': {'_type': 'Set', 'elements': ['3637']}, 'indirectly_referencing': {'_type': 'Set', 'elements': ['3637']}} data.
The state was updated.
- The tables_done property was set to True.
08.10.2022 The certificate data changed.
Certificate changed

The PDF extraction data was updated.
- The keywords property was updated, with the {'vendor': {'__insert__': {'Cisco': {'Cisco Systems, Inc': 2, 'Cisco': 22, 'Cisco Systems': 4}}}, 'crypto_protocol': {'__insert__': {'VPN': {'VPN': 2}}}} data.
The computed heuristics were updated.
- The web_references property was updated, with the {'directly_referencing': None, 'indirectly_referencing': None} data.
17.07.2022 The certificate data changed.
Certificate changed

The _type was updated.
- The new value is sec_certs.sample.fips.FIPSCertificate.
The computed heuristics were updated.
- The following values were inserted: {'clean_cert_ids': {}}.
- The _type property was set to sec_certs.sample.fips.FIPSCertificate.Heuristics.
- The keywords property was set to {}.
- The algorithms property was set to {'_type': 'Set', 'elements': [{'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#C462', 'algorithm_type': 'RSA', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#C462', 'algorithm_type': 'ECDSA', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#C462', 'algorithm_type': 'KTS', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#C462', 'algorithm_type': 'Triple-DES', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#C462', 'algorithm_type': 'SHS', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#4769', 'algorithm_type': 'AES', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#C462', 'algorithm_type': 'KBKDF', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#C462', 'algorithm_type': 'AES', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#C1301', 'algorithm_type': 'RSA', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#C1301', 'algorithm_type': 'SHS', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#C462', 'algorithm_type': 'CVL', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#C462', 'algorithm_type': 'DRBG', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#C462', 'algorithm_type': 'HMAC', 'vendor': None, 'implementation': None, 'date': None}]}.
- The st_references property was updated, with the {'_type': 'sec_certs.sample.certificate.References'} data.
- The web_references property was updated, with the {'_type': 'sec_certs.sample.certificate.References'} data.
The state was updated.
- The _type property was set to sec_certs.sample.fips.FIPSCertificate.InternalState.
- The following properties were deleted: ['fragment_path'].
29.06.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The algorithms property was updated.
The computed heuristics were updated.
- The algorithms property was updated.
25.06.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The algorithms property was updated.
The computed heuristics were updated.
- The algorithms property was updated.
21.06.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The algorithms property was updated.
The computed heuristics were updated.
- The algorithms property was updated.
14.06.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The algorithms property was updated.
The pdf_scan was updated.
- The keywords property was updated, with the {'rules_cert_id': {}, 'rules_standard_id': {'__update__': {'FIPS ?(?:PUB )?[0-9]+-[0-9]+?': {'__update__': {'FIPS 140-2': {'__update__': {'count': 1}}}, '__delete__': ['FIPS 186-4']}, 'TLS[ ]*v[0-9\\.]+': {'__update__': {'TLSv1.2': {'__update__': {'count': 1}}}}, 'RFC[ ]*[0-9]+?': {'__delete__': ['RFC 5288', 'RFC 7296', 'RFC 5246', 'RFC 4253']}, 'RFC [0-9]+': {'__delete__': ['RFC 5288', 'RFC 7296', 'RFC 5246', 'RFC 4253']}}}, 'rules_block_cipher_modes': {'__update__': {'ECB': {'__update__': {'ECB': {'__update__': {'count': 1}}}}, 'CBC': {'__update__': {'CBC': {'__update__': {'count': 1}}}}, 'GCM': {'__update__': {'GCM': {'__update__': {'count': 1}}}}}}, 'rules_ecc_curves': {'__insert__': {'(NIST)? ?[PBK]-[0-9]{3}': {'P-256': {'count': 1}}}, '__update__': {'(?:Curve |curve |)P-(192|224|256|384|521)': {'__update__': {'P-256': {'__update__': {'count': 1}}}, '__delete__': ['P-384']}}}} data.
The computed heuristics were updated.
- The keywords property was updated, with the {'rules_cert_id': {'__delete__': ['(?:#[^\\S\\r\\n]?|Cert\\.?(?!.\\s)[^\\S\\r\\n]?|Certificate[^\\S\\r\\n]?)(?P<id>\\d{4})(?!\\d)']}, 'rules_standard_id': {'__update__': {'FIPS ?(?:PUB )?[0-9]+-[0-9]+?': {'__update__': {'FIPS 140-2': {'__update__': {'count': 1}}}, '__delete__': ['FIPS 186-4']}, 'TLS[ ]*v[0-9\\.]+': {'__update__': {'TLSv1.2': {'__update__': {'count': 1}}}}, 'RFC[ ]*[0-9]+?': {'__delete__': ['RFC 5288', 'RFC 7296', 'RFC 5246', 'RFC 4253']}, 'RFC [0-9]+': {'__delete__': ['RFC 5288', 'RFC 7296', 'RFC 5246', 'RFC 4253']}}}, 'rules_block_cipher_modes': {'__update__': {'ECB': {'__update__': {'ECB': {'__update__': {'count': 1}}}}, 'CBC': {'__update__': {'CBC': {'__update__': {'count': 1}}}}, 'GCM': {'__update__': {'GCM': {'__update__': {'count': 1}}}}}}, 'rules_ecc_curves': {'__insert__': {'(NIST)? ?[PBK]-[0-9]{3}': {'P-256': {'count': 1}}}, '__update__': {'(?:Curve |curve |)P-(192|224|256|384|521)': {'__update__': {'P-256': {'__update__': {'count': 1}}}, '__delete__': ['P-384']}}}} data.
- The algorithms property was updated.
24.05.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The algorithms property was updated.
The computed heuristics were updated.
- The algorithms property was updated.
22.05.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The algorithms property was updated.
The computed heuristics were updated.
- The algorithms property was updated.
20.05.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The algorithms property was updated.
The computed heuristics were updated.
- The algorithms property was updated.
19.05.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The algorithms property was updated.
The computed heuristics were updated.
- The algorithms property was updated.
13.05.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The algorithms property was updated.
The computed heuristics were updated.
- The algorithms property was updated.
18.04.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The algorithms property was updated.
The computed heuristics were updated.
- The algorithms property was updated.
08.03.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The algorithms property was updated.
- The following properties were deleted: ['connections'].
The pdf_scan was updated.
- The following properties were deleted: ['connections'].
The computed heuristics were updated.
- The following values were inserted: {'st_references': {'_type': 'References', 'directly_referenced_by': None, 'indirectly_referenced_by': None, 'directly_referencing': None, 'indirectly_referencing': None}, 'web_references': {'_type': 'References', 'directly_referenced_by': None, 'indirectly_referenced_by': None, 'directly_referencing': {'_type': 'Set', 'elements': ['3637']}, 'indirectly_referencing': {'_type': 'Set', 'elements': ['3637']}}}.
- The algorithms property was updated.
- The following properties were deleted: ['connections', 'directly_affected_by', 'indirectly_affected_by', 'directly_affecting', 'indirectly_affecting'].
23.02.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The algorithms property was updated.
The computed heuristics were updated.
- The algorithms property was updated.
18.02.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The algorithms property was updated.
The computed heuristics were updated.
- The algorithms property was updated.
- The extracted_versions property was set to {'_type': 'Set', 'elements': ['16.12', '17.3']}.
- The cpe_matches property was set to {'_type': 'Set', 'elements': ['cpe:2.3:h:cisco:catalyst_9200:-:*:*:*:*:*:*:*']}.
12.02.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The algorithms property was updated.
The computed heuristics were updated.
- The algorithms property was updated.
11.02.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The algorithms property was updated.
The computed heuristics were updated.
- The algorithms property was updated.
03.02.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The algorithms property was updated.
The computed heuristics were updated.
- The algorithms property was updated.
02.02.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The module_type property was set to Hardware.
- The algorithms property was updated.
The computed heuristics were updated.
- The algorithms property was updated.
31.01.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The algorithms property was updated.
The computed heuristics were updated.
- The algorithms property was updated.
30.01.2022 The certificate was first processed.

New certificate

A new FIPS 140 certificate with the product name was processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 3835,
  "dgst": "bbc0ac0c3f912b40",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "RSA#C462",
        "AES#C462",
        "Triple-DES#C462",
        "SHS#C462",
        "ECDSA#C462",
        "HMAC#C462",
        "CVL#C462",
        "KTS#C462",
        "SHS#C1301",
        "AES#4769",
        "RSA#C1301",
        "DRBG#C462",
        "KBKDF#C462"
      ]
    },
    "cpe_matches": {
      "_type": "Set",
      "elements": [
        "cpe:2.3:h:cisco:catalyst_9200:-:*:*:*:*:*:*:*"
      ]
    },
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "16.12",
        "17.3"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": {
        "_type": "Set",
        "elements": [
          "3637"
        ]
      },
      "indirectly_referenced_by": null,
      "indirectly_referencing": {
        "_type": "Set",
        "elements": [
          "3637"
        ]
      }
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": [
        "3637"
      ]
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": {
        "_type": "Set",
        "elements": [
          "3637"
        ]
      },
      "indirectly_referenced_by": null,
      "indirectly_referencing": {
        "_type": "Set",
        "elements": [
          "3637"
        ]
      }
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": [
        "3637"
      ]
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 1
          },
          "ECDH": {
            "ECDH": 3
          },
          "ECDSA": {
            "ECDSA": 5
          }
        },
        "FF": {
          "DH": {
            "DH": 15,
            "Diffie-Hellman": 6
          }
        },
        "RSA": {
          "RSA 2048": 1
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 3
        },
        "CTR": {
          "CTR": 1
        },
        "ECB": {
          "ECB": 2
        },
        "GCM": {
          "GCM": 9
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "IKE": {
          "IKE": 16,
          "IKEv1": 1,
          "IKEv2": 3
        },
        "IPsec": {
          "IPsec": 7
        },
        "SSH": {
          "SSH": 20
        },
        "TLS": {
          "TLS": {
            "TLS": 26,
            "TLSv1.2": 1
          }
        },
        "VPN": {
          "VPN": 2
        }
      },
      "crypto_scheme": {},
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-256": 12,
          "P-384": 14
        }
      },
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "#1": 1,
          "#3637": 2
        }
      },
      "fips_certlike": {
        "Certlike": {
          "AES 128": 2,
          "AES CBC (128": 1,
          "DES 2": 2,
          "DRBG (256": 1,
          "HMAC SHA-1": 1,
          "HMAC- SHA1": 1,
          "HMAC- SHA1 160": 2,
          "HMAC-SHA 256/384": 2,
          "HMAC-SHA-1": 4,
          "HMAC-SHA1": 4,
          "PKCS 1": 6,
          "PKCS#1": 1,
          "RSA 2048": 1,
          "RSA PKCS#1": 1,
          "SHA-1": 3,
          "SHA-256": 2,
          "SHA-384": 1,
          "SHA-512": 3,
          "SHA1": 1,
          "SHA1 160": 2,
          "SHA2-256": 2,
          "SHA2-384": 2,
          "SHA2-512": 2
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 3,
          "level 1": 3
        }
      },
      "hash_function": {
        "MD": {
          "MD5": {
            "MD5": 7
          }
        },
        "SHA": {
          "SHA1": {
            "SHA-1": 3,
            "SHA1": 3
          },
          "SHA2": {
            "SHA-256": 2,
            "SHA-384": 1,
            "SHA-512": 3
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 25
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140": 1,
          "FIPS 140-2": 20,
          "FIPS 186-4": 3,
          "FIPS PUB 140-2": 1
        },
        "NIST": {
          "SP 800-38D": 1,
          "SP 800-52": 1,
          "SP 800-90": 1,
          "SP 800-90A": 7
        },
        "PKCS": {
          "PKCS 1": 3,
          "PKCS#1": 1
        },
        "RFC": {
          "RFC 4253": 1,
          "RFC 5246": 1,
          "RFC 5288": 1,
          "RFC 6071": 1,
          "RFC 7296": 2
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 13
          },
          "RC": {
            "RC4": 3
          }
        },
        "DES": {
          "3DES": {
            "Triple-DES": 4
          },
          "DES": {
            "DES": 5
          }
        },
        "constructions": {
          "MAC": {
            "CMAC": 1,
            "HMAC": 7
          }
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {
        "Cisco": {
          "Cisco": 21,
          "Cisco Systems": 4,
          "Cisco Systems, Inc": 2
        }
      },
      "vulnerability": {}
    },
    "policy_metadata": {
      "/Author": "[email protected]",
      "/CreationDate": "D:20210824105449-04\u002700\u0027",
      "/Creator": "Microsoft\u00ae Word for Microsoft 365",
      "/ModDate": "D:20210824105449-04\u002700\u0027",
      "/Producer": "Microsoft\u00ae Word for Microsoft 365",
      "pdf_file_size_bytes": 669474,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "http://www.cisco.com/",
          "https://csrc.nist.gov/Projects/Cryptographic-Module-Validation-Program"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 25
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.InternalState",
    "module_download_ok": true,
    "module_extract_ok": true,
    "policy_convert_garbage": false,
    "policy_convert_ok": true,
    "policy_download_ok": true,
    "policy_extract_ok": true,
    "policy_pdf_hash": "0af74076c65edb5fe9a56e5927bedab93e743a23c57c3560762145c516f53a43",
    "policy_txt_hash": "f6add6f29000da0e3f24f0d67f2279492b684dce7daae6a10c092125a3310d15"
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When operated in FIPS mode, installed, initialized and configured as specified in Section 3 of the Security Policy. This module contains the embedded module \u0027ACT2Lite Cryptographic Module\u0027 validated to FIPS 140-2 under Cert. #3637 operating in FIPS mode",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/March 2021_010421_0724_signed.pdf",
    "date_sunset": null,
    "description": "With full PoE+ capability, power and fan redundancy, stacking bandwidth up to 160 Gbps, modular uplinks, Layer 3 feature support, and cold patching, Catalyst 9200 Series switches are the industry\u2019s unparalleled solution with differentiated resiliency and progressive architecture for cost-effective branch-office access. The switches meet FIPS 140-2 overall Level 1 requirements as multi-chip standalone modules. Advanced security feature supports IOS-XE software, MACsec encryption, hardware anchored secure boot, Secure Unique Device Identification (SUDI) support.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": [
      "Roles, Services, and Authentication: Level 3",
      "Design Assurance: Level 2",
      "Mitigation of Other Attacks: N/A"
    ],
    "fw_versions": "Cisco IOS-XE 16.12 and Cisco IOS-XE 17.3",
    "historical_reason": "SP 800-56Arev3 transition - replaced by certificate #4556",
    "hw_versions": "Cisco Catalyst C9200-24T, Cisco Catalyst C9200-48T, Cisco Catalyst C9200-24P, Cisco Catalyst C9200-48P, Cisco Catalyst C9200-24P8X and Cisco Catalyst C9200-48P8X with components C9200-NM-4G, C9200-NM-4X, C9200-NM-2Y and C9200-NM-2Q",
    "level": 1,
    "mentioned_certs": {
      "3637": 1
    },
    "module_name": "Cisco Catalyst 9200 Series Switches",
    "module_type": "Hardware",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-2",
    "status": "historical",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2021-03-03",
        "lab": "ACUMEN SECURITY, LLC",
        "validation_type": "Initial"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2021-08-25",
        "lab": "ACUMEN SECURITY, LLC",
        "validation_type": "Update"
      }
    ],
    "vendor": "Cisco Systems, Inc.",
    "vendor_url": "http://www.cisco.com"
  }
}

Cisco Catalyst 9200 Series Switches

Certificate #3835

Webpage information ?

Security policy ?

Cryptography

Symmetric Algorithms

Asymmetric Algorithms

Hash functions

Protocols

Randomness

Elliptic Curves

Block cipher modes

Device

Vendor

Security

Security level

Other

Standards

File metadata

References

Heuristics ?

CPE matches

References ?

Updates ?

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

New certificate

Raw data