Attachmate Products with FIPS 140-2 Validated Crypto Modules

Attachmate and Micro Focus Products and FIPS Mode

To meet FIPS 140-2 standards, Attachmate products must be run in FIPS mode and use specific FIPS-validated cryptographic modules. When running in FIPS mode the module’s security policy (the definition of what the module has been certified to do) is used for secure connections. To view the detailed cryptographic module security policy, click the certificate link below for the specific certificate number.

Note: Contact your Chief Information Security Officer for information about the implications and applicability of using FIPS 140-2 validated cryptography on all of your systems.

Refer to the tables below to verify that your Attachmate products contains a FIPS 140-2 validated crypto module.

Cryptographic Library version 3

The following products use Attachmate Cryptographic Library version 3. This module includes the OpenSSL FIPS Object Module version 2.0.2, which has been validated by the National Institute of Standards and Technology (NIST), certificate #1747: http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/1401val2012.htm#1747.

Note: On AIX POWER 64-bit only, library version 3.3.x includes the OpenSSL FIPS Object Module 2.0.11. OpenSSL FIPS Object Module version 2.0.11 has been validated by the National Institute of Standards and Technology (NIST), certificate #2398: http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/1401val2015.htm#2398.

Cryptographic Library version 2.0.40

Attachmate cryptographic library version 2.0.40 is used in the following products when operated in FIPS mode and has been validated by the National Institute of Standards and Technology (NIST), certificate #1027: http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/1401val2008.htm#1027

* Applies to EXTRA! 9.2 or higher connections configured to use Security Type "Attachmate SSL v3.0," "Attachmate TLS v1.0," or "Attachmate FIPS 140-2," and to EXTRA! 9.1 connections configured to "Use Attachmate Security" with "SSL/TLS" or "FIPS 140-2" selected as the Level of Encryption.

Cryptographic Library version 1.0.170

Attachmate cryptographic library version 1.0.170 is used in the following products when operated in FIPS mode and has been validated by the National Institute of Standards and Technology (NIST), certificate #766: http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/1401val2007.htm#766

Applies to EXTRA! connections that are configured to "Use Attachmate Security" with "SSL/TLS" or "FIPS 140-2" selected as the Level of Encryption.

RSA BSAFE Crypto-J JSAFE and JCE Module version 6.2.1

RSA BSAFE Crypto-J JSAFE and JCE software module version 6.2.1 is used in the following Micro Focus products when operated in FIPS mode. This version has been validated by the National Institute of Standards and Technology (NIST), certificate #2468: http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/1401val2015.htm#2468.

To upgrade to RSA BSAFE Crypto-J JSAFE and JCE Module version 6.2.1, contact Technical Support to obtain a hotfix.

Attachmate Security Component for Java version 1.32

Attachmate Security Component for Java cryptographic library version 1.32 is used in the following products for TLS connections when operated in FIPS mode.

* Apply a hotfix for your product to use RSA BSAFE Crypto-J JSAFE and JCE Module version 6.2.1, which has been validated by the National Institute of Standards and Technology (NIST). Contact Technical Support to obtain the hotfix.

RSA BSAFE Crypto-J JSAFE and JCE Module version 6.1

RSA BSAFE Crypto-J JSAFE and JCE software module version 6.1 is used in the following Attachmate product when operated in FIPS mode. This version has been validated by the National Institute of Standards and Technology (NIST), certificate #2058: http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/1401val2013.htm#2058.

* For information about installing the cryptographic module in Luminet, see https://download.attachmate.com/fileinfo.aspx?filename=luminet-1-2-fips-module-installation-guide.pdf (login required).

RSA BSAFE Crypto-J JCE Provider Module version 5.1

RSA BSAFE Crypto-J JCE Provider software module version 5.0 is used in the following Attachmate products when operated in FIPS mode.

* Apply a hotfix for your product to use RSA BSAFE Crypto-J JSAFE and JCE Module version 6.2.1, which has been validated by the National Institute of Standards and Technology (NIST). Contact Technical Support to obtain the hotfix.

RSA BSAFE Crypto-J JCE Provider Module version 4.1

RSA BSAFE Crypto-J JCE Provider software module version 4.1 is used in the following Attachmate products when operated in FIPS mode and has been validated by the National Institute of Standards and Technology (NIST), certificate #1291: http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/1401val2010.htm#1291

* For information about installing the cryptographic module in Luminet, see https://download.attachmate.com/fileinfo.aspx?filename=luminet-1-1-fips-module-installation-guide.pdf (login required).

RSA BSAFE Crypto-J JCE Provider Module version 4.0

RSA BSAFE Crypto-J JCE Provider software module version 4.0 is used in the following Attachmate products when operated in FIPS mode and has been validated by the National Institute of Standards and Technology (NIST), certificate #1048: http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/1401val2008.htm#1048

RSA BSAFE Crypto-J JCE Provider Module version 3.6

RSA BSAFE Crypto-J JCE Provider software module version 3.6 is used in the following Attachmate product for SSH and SFTP connections when operated in FIPS mode and has been validated by the National Institute of Standards and Technology (NIST), certificate #820: http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/1401val2007.htm#820

To review security update information for Attachmate products, see https://support.microfocus.com/security.

Notice: This technical note is updated from time to time and is provided for informational purposes only. Attachmate makes no representation or warranty that the functions contained in our software products will meet your requirements or that the operation of our software products will be interruption or error free. Attachmate EXPRESSLY DISCLAIMS ALL WARRANTIES REGARDING OUR SOFTWARE INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.

Legacy KB ID