Module Name

Virtual SmartZone (vSZ) WLAN Controller

Standard

FIPS 140-2

Status

Active

Sunset Date

12/15/2025

Validation Dates

12/16/2020

Overall Level

1

Caveat

When operated in FIPS mode and installed, initialized and configured as specified in Sections 2 and 8 of the Security Policy. The module generates cryptographic keys whose strengths are modified by available entropy

Security Level Exceptions

• Roles, Services, and Authentication: Level 2
• Physical Security: N/A
• Mitigation of Other Attacks: N/A

Module Type

Software

Embodiment

Multi-Chip Stand Alone

Description

The Ruckus Virtual SmartZone (vSZ-E and vSZ-H hosted on a physical device) is an NFV-based WLAN controller for service providers and enterprises ready to elevate their WLAN deployment to the next level of flexibility, resiliency, and scale.

Tested Configuration(s)

• CentOS 6.8 on VMware ESXi v6.5.0 running on Dell PowerEdge R740 with Intel Xeon Platinum 8160 CPU with PAA
• CentOS 6.8 on VMware ESXi v6.5.0 running on Dell PowerEdge R740 with Intel Xeon Platinum 8160 CPU without PAA (single-user mode)

FIPS Algorithms

AES	Certs. #5098 and #C814
CVL	Cert. #C815
DRBG	Cert. #1904
DSA	Cert. #C815
ECDSA	Cert. #1323
HMAC	Certs. #3400 and #C814
KTS	AES Cert. #5098 and HMAC Cert. #3400; key establishment methodology provides between 128 and 256 bits of encryption strength
KTS	AES Cert. #5098; key establishment methodology provides 128 or 256 bits of encryption strength
RSA	Cert. #2760
SHS	Certs. #4146 and #C814

Allowed Algorithms

Diffie-Hellman (CVL Cert. #C815 with CVL Cert. #C815, key agreement; key establishment methodology provides between 112 and 128 bits of encryption strength); EC Diffie-Hellman (CVL Cert. #C815 with CVL Cert. #C815, key agreement; key establishment methodology provides 192 bits of encryption strength); EC Diffie-Hellman (CVL Cert. #C815 with CVL Cert. #C815, key agreement; key establishment methodology provides 192 bits of encryption strength); EC Diffie-Hellman (CVL Cert. #C815 with CVL Cert. #C815, key agreement; key establishment methodology provides between 128 and 256 bits of encryption strength); NDRNG

Software Versions

5.1.1.3