Module Name
VMware OpenSSL FIPS Object Module
Validation Dates
02/14/2017;02/22/2017;04/10/2018;10/31/2018
Caveat
When operated in FIPS mode. No assurance of the minimum strength of generated keys. The module generates cryptographic keys whose strengths are modified by available entropy
Security Level Exceptions
- Roles, Services, and Authentication: Level 2
- Physical Security: N/A
- Design Assurance: Level 3
- Mitigation of Other Attacks: N/A
Embodiment
Multi-Chip Stand Alone
Description
The VMware OpenSSL FIPS Object Module provides cryptographic functions to various VMware applications.
Tested Configuration(s)
- Intel Core I with PAA w/ Windows 10 (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)
- Intel Core I with PAA w/ Windows 10 on ESXi 6.0 (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)
- Intel Core I with PAA w/ Windows 7 SP1 on ESXi 6.0 (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)
- Intel Core I with PAA w/ Windows 8.1 on ESXi 6.0 (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)
- Intel Core I without PAA w/ Windows 10 (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)
- Intel Core I without PAA w/ Windows 10 on ESXi 6.0 (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)
- Intel Core I without PAA w/ Windows 7 SP1 on ESXi 6.0 (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)
- Intel Core I without PAA w/ Windows 8.1 on ESXi 6.0 (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)
- Intel Xeon with PAA w/ BLUX 4.4 on ESXi 6.5 (gcc Compiler version 5.3.0)
- Intel Xeon with PAA w/ BLUX 4.9 on ESXi 6.5 (gcc Compiler version 5.3.0)
- Intel Xeon with PAA w/ PhotonOS 1.0 on ESXi 6.0 (gcc Compiler Version 5.3.0)
- Intel Xeon with PAA w/ PhotonOS 1.0 on ESXi 6.5 (gcc Compiler Version 5.3.0)
- Intel Xeon with PAA w/ PhotonOS 1.0 on ESXi 6.7 (gcc Compiler Version 5.3.0)
- Intel Xeon with PAA w/ PhotonOS 2.0 on ESXi 6.0 (gcc Compiler Version 5.3.0)
- Intel Xeon with PAA w/ PhotonOS 2.0 on ESXi 6.5 (gcc Compiler Version 5.3.0)
- Intel Xeon with PAA w/ PhotonOS 2.0 on ESXi 6.7 (gcc Compiler Version 5.3.0)
- Intel Xeon with PAA w/ SLES 11 on ESXi 6.7 (gcc Compiler Version 5.3.0)
- Intel Xeon with PAA w/ SLES 11 SP3 on ESXi 6.0 (gcc Compiler Version 5.3.0)
- Intel Xeon with PAA w/ SLES 12 on ESXi 6.5 (gcc Compiler Version 5.3.0)
- Intel Xeon with PAA w/ Ubuntu 14.04 on ESXi 6.0 (gcc Compiler version 4.6.3)
- Intel Xeon with PAA w/ Ubuntu 14.04 on ESXi 6.5 (gcc Compiler version 4.6.3)
- Intel Xeon with PAA w/ Ubuntu 16.04 on ESXi 6.0 (gcc Compiler version 4.6.3)
- Intel Xeon with PAA w/ Ubuntu 16.04 on ESXi 6.5 (gcc Compiler version 4.6.3)
- Intel Xeon with PAA w/ Ubuntu 16.04 on ESXi 6.7 (gcc Compiler Version 4.6.3)
- Intel Xeon with PAA w/ VMware NSX Controller OS 12.04 on ESXi 6.0 (gcc Compiler Version 4.6.3)
- Intel Xeon with PAA w/ VMware NSX Edge OS 3.14 on ESXi 6.0 (gcc Compiler Version 4.6.3)
- Intel Xeon with PAA w/ VMware NSX Manager OS 3.17 on ESXi 6.0 (gcc Compiler Version 4.6.3)
- Intel Xeon with PAA w/ Windows 10 on ESXi 6.5 (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)
- Intel Xeon with PAA w/ Windows 2012 64 bit on ESXi 6.0 (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)
- Intel Xeon with PAA w/ Windows 2012 R2 on ESXi 6.0 (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)
- Intel Xeon with PAA w/ Windows 2016 on ESXi 6.0 (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)
- Intel Xeon with PAA w/ Windows Server 2008 on ESXi 6.5 (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)
- Intel Xeon with PAA w/ Windows Server 2012 on ESXi 6.5 (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)
- Intel Xeon with PAA w/ Windows Server 2016 on ESXi 6.5 (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)
- Intel Xeon with PAA w/ Windows Server 2016 on ESXi 6.7 (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)
- Intel Xeon without PAA w/ BLUX 4.4 on ESXi 6.5 (gcc Compiler version 5.3.0)
- Intel Xeon without PAA w/ BLUX 4.9 on ESXi 6.5 (gcc Compiler version 5.3.0)
- Intel Xeon without PAA w/ PhotonOS 1.0 on ESXi 6.0 (gcc Compiler Version 5.3.0)
- Intel Xeon without PAA w/ PhotonOS 1.0 on ESXi 6.5 (gcc Compiler Version 5.3.0)
- Intel Xeon without PAA w/ PhotonOS 1.0 on ESXi 6.7 (gcc Compiler Version 5.3.0)
- Intel Xeon without PAA w/ PhotonOS 2.0 on ESXi 6.0 (gcc Compiler Version 5.3.0)
- Intel Xeon without PAA w/ PhotonOS 2.0 on ESXi 6.5 (gcc Compiler Version 5.3.0)
- Intel Xeon without PAA w/ PhotonOS 2.0 on ESXi 6.7 (gcc Compiler Version 5.3.0)
- Intel Xeon without PAA w/ SLES 11 on ESXi 6.7 (gcc Compiler Version 5.3.0)
- Intel Xeon without PAA w/ SLES 11 SP3 on ESXi 6.0 (gcc Compiler Version 5.3.0)
- Intel Xeon without PAA w/ SLES 12 on ESXi 6.5 (gcc Compiler Version 5.3.0)
- Intel Xeon without PAA w/ Ubuntu 14.04 on ESXi 6.0 (gcc Compiler version 4.6.3)
- Intel Xeon without PAA w/ Ubuntu 14.04 on ESXi 6.5 (gcc Compiler version 4.6.3)
- Intel Xeon without PAA w/ Ubuntu 16.04 on ESXi 6.0 (gcc Compiler version 4.6.3)
- Intel Xeon without PAA w/ Ubuntu 16.04 on ESXi 6.5 (gcc Compiler version 4.6.3)
- Intel Xeon without PAA w/ Ubuntu 16.04 on ESXi 6.7 (gcc Compiler Version 4.6.3)
- Intel Xeon without PAA w/ VMware NSX Controller OS 12.04 on ESXi 6.0 (gcc Compiler Version 4.6.3)
- Intel Xeon without PAA w/ VMware NSX Edge OS 3.14 on ESXi 6.0 (gcc Compiler Version 4.6.3)
- Intel Xeon without PAA w/ VMware NSX Manager OS 3.17 on ESXi 6.0 (gcc Compiler Version 4.6.3)
- Intel Xeon without PAA w/ Windows 10 on ESXi 6.5 (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)
- Intel Xeon without PAA w/ Windows 2012 64 bit on ESXi 6.0 (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)
- Intel Xeon without PAA w/ Windows 2012 R2 on ESXi 6.0 (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)
- Intel Xeon without PAA w/ Windows 2016 on ESXi 6.0 (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)
- Intel Xeon without PAA w/ Windows Server 2008 on ESXi 6.5 (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)
- Intel Xeon without PAA w/ Windows Server 2012 on ESXi 6.5 (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)
- Intel Xeon without PAA w/ Windows Server 2016 on ESXi 6.5 (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)
- Intel Xeon without PAA w/ Windows Server 2016 on ESXi 6.7 (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)
- Within ESXi 6.7 on Intel Xeon 6126 with PAA
- Within ESXi 6.7 on Intel Xeon 6126 without PAA
- Within ESXi 6.7 on Intel Xeon E5-2440 with PAA
- Within ESXi 6.7 on Intel Xeon E5-2440 without PAA (single-user mode)
Other Algorithms
EC Diffie-Hellman (CVL Cert. #943, key agreement; key establishment methodology provides between 112 and 256 bits of encryption strength; non-compliant less than 112 bits of strength); RSA (key wrapping; key establishment methodology provides between 112 and 256 bits of encryption strength; non-compliant less than 112 bits of strength); Dual EC DRBG; PRNG