Module Name
Aruba RAP-108 and RAP-109 Wireless Access Points
Validation Dates
09/22/2017
Caveat
When operated in FIPS mode with tamper evident labels installed as indicated in the Security Policy
Security Level Exceptions
- Mitigation of Other Attacks: N/A
Embodiment
Multi-Chip Stand Alone
Description
Aruba's 802.11n wired and wireless access points offer the highest performance for mobile devices. In FIPS 140-2 mode, Aruba APs in conjunction with a Mobility Controller support the IEEE 802.11i/WPA2 client standard along with optional Suite B cryptography. Aruba APs also support wireless intrusion detection/prevention services and wireless mesh topologies.
FIPS Algorithms
AES |
Certs. #2450, #2677, #2680 and #2689 |
CVL |
Certs. #150, #232 and #251 |
DRBG |
Cert. #433 |
ECDSA |
Certs. #466 and #469 |
HMAC |
Certs. #1663 and #1666 |
KBKDF |
Cert. #16 |
KTS |
AES Cert. #2677 |
KTS |
AES Cert. #2677 and HMAC Cert. #1663; key establishment methodology provides between 128 and 256 bits of encryption strength |
KTS |
Triple-DES Cert. #1605 and HMAC Cert. #1663; key establishment methodology provides 112 bits of encryption strength |
RSA |
Certs. #1376, #1379 and #2417 |
SHS |
Certs. #2246, #2249 and #3654 |
Triple-DES |
Certs. #1605 and #1607 |
Allowed Algorithms
Diffie-Hellman (key agreement; key establishment methodology provides 112 bits of encryption strength); EC Diffie-Hellman (key agreement; key establishment methodology provides 128 or 192 bits of encryption strength); NDRNG
Hardware Versions
[RAP-108-F1 (HPE SKU JW268A), RAP-108-USF1 (HPE SKU JW269A), RAP-109-F1 (HPE SKU JW274A) and RAP-109-USF1 (HPE SKU JW275A)] with FIPS kit 4011570-01
Firmware Versions
ArubaOS 6.5.1-FIPS