FIPS140 Software Validated Oracle Products

 

 The following Oracle Software Products have been FIPS140 validated.


Oracle Advanced Security

Product Version FIPS140
Level
Cert No.  
Security Policy Certificate
 Oracle Advanced Security Release 8.1.6 FIPS140-1
Level 2
 90  Security-policy-90  Certificate-90 (FIPS 140-1)


Oracle Solaris Cryptographic Framework

Product Version Module FIPS140
Level
Cert No.  
Security Policy Certificate Affirmation
Oracle Solaris Userland Cryptographic Framework
  Software Versions: 1.0 and 1.1 (Oracle Solaris 11.1 SRU3 and Oracle Solaris 11.1 SRU5.5) Software FIPS140-1
Level 1
2077  Security-policy-2077  Consolidated Certificate list 38 Note: Tested on the SPARC Enterprise M3000 Server and the Sun Server X3-2 (formerly the Sun Fire X4170 M3).
 Oracle Solaris Userland Cryptographic Framework
Hardware Versions: 527-1437-01 and 7043165; Software Versions: 1.0 and 1.1 (Oracle Solaris 11.1 SRU3 and Oracle Solaris 11.1 SRU5.5) Software-Hybrid FIPS140-1
Level 1
 2076  Security-policy-2076  Consolidated Certificate list 38 Tested on the SPARC T4-1 Server. Oracle affirms that the FIPS 140-2 module will function the same way and provide the same security services on any of the Oracle-produced SPARC T4 processors. This includes the SPARC T4-1B Server, the SPARC T4-2 Server, and the SPARC T4-4 Server. Oracle Solaris Userland Cryptographic Framework running Oracle Solaris 11.1 SRU3 and Oracle Solaris 11.1 SRU5.5 was also tested on the SPARC T5-2 Server. Oracle affirms that the FIPS 140-2 module will function the same way and provide the same security services on any of the Oracle-produced SPARC T5 and M5 processors. This includes the SPARC T5-1B Server, the SPARC T5-4 Server, the SPARC T5-8 Server, and the SPARC M5-32 Server.
Oracle Solaris Kernel Cryptographic Framework
  Software Versions: 1.0 and 1.1 (Oracle Solaris 11.1 SRU3 and
Oracle Solaris 11.1 SRU5.5)
Software FIPS140-1
Level 1
2061  Security-policy-2061  Consolidated Certificate list 36 Note: Tested on the SPARC Enterprise M3000 Server and the Sun Server X3-2 (formerly the Sun Fire X4170 M3).
 Oracle Solaris Kernel Cryptographic Framework with SPARC T4 and SPARC T5
Hardware Versions: 527-1437-01 and 7043165; Software Versions: 1.0 and 1.1 (Oracle Solaris 11.1 SRU3 and Oracle Solaris 11.1 SRU5.5) Software-Hybrid FIPS140-1
Level 1
 2060  Security-policy-2060 Consolidated Certificate list 36 Oracle Solaris Kernel Cryptographic Framework was tested on the SPARC T4-1 Server. Oracle affirms that the FIPS 140-2 module will function the same way and provide the same security services on any of the Oracle-produced SPARC T4 processors. This includes the SPARC T4-1B Server, the SPARC T4-2 Server, and the SPARC T4-4 Server. Oracle Solaris Kernel Cryptographic Framework was also tested on the SPARC T5-2 Server. Oracle affirms that the FIPS 140-2 module will function the same way and provide the same security services on any of the Oracle-produced SPARC T5 and M5 processors. This includes the SPARC T5-1B Server, the SPARC T5-4 Server, the SPARC T5-8 Server, and the SPARC M5-32 Server.


Network Security Services

Product Version FIPS140
Level
Cert No.  
Security Policy Certificate
 Network Security Services (NSS) Cryptographic Module
Software Version: 3.12.4  FIPS140-2
Level 2
 1280  Security-policy-1280  Certificate-1280 (FIPS140-2)
 Network Security Services (NSS) Cryptographic Module (Extend ECC) Software Version: 3.12.4  FIPS140-2
Level 2
 1279  Security-policy-1279  Certificate-1279 (FIPS140-2)
 Network Security Services (NSS) Cryptographic Module (Basic ECC) Software Version: 3.12.4  FIPS140-2 Level 2  1278  Security-policy-1278  Certificate-1278 (FIPS140-2)
 Network Security Services

Tested as meeting Level 2 with Solaris v8.0 with AdminSuite 3.0.1 as specified in UK IT SEC CC Report No. P148 EAL4 on a SUN SPARC Ultra-1
Software Version:
3.2.2
 FIPS140-1
Level 2
 248  Security-policy-248  Certificate-248 (FIPS140-2)
 Network Security Services

Tested as meeting Level 1 with Windows 98 (single user mode)
Software Version:
3.2.2
 FIPS140-1
Level 1
 247  Security-policy-247  Certificate-247 (FIPS140-2)


Oracle Phaos Crypto

Product Version FIPS140
Level
Cert No.  
Security Policy Certificate
 Oracle Phaos Crypto Versions 3.0 and 3.0.1  FIPS140-2
Level 1
 337  Security-policy-337  Certificate-337 (FIPS140-2)


SSL Libraries

Product Version FIPS140
Level
Cert No.  
Security Policy Certificate
OpenSSL FIPS Object Module
Software Version: 2.0 or 2.0.1
FIPS140-2 
Level 1
1747 Security-policy-1747 Certificate-1747(Fips140-2)
Oracle Cryptographic Libraries for SSL 10g
10.1.0 FIPS140-2
Level 2
861 Security-policy-861 Certificate-861(Fips140-2)
 Oracle Cryptographic Libraries for SSL 10g 9.0.4 FIPS140-2 Level 2  447  Security-policy-447  Certifcate-447 (FIPS140-2)