Myth #1:<\/strong> Meeting FIPS certification requirements is just about filling in a checkbox.<\/span><\/p>\n

Myth #2:<\/strong> If you know the \u201cright\u201d people, you can circumvent the CMVP queue.<\/p>\n

Myth #3:<\/strong> Attaining FIPS certification validation does not provide any real competitive advantage in either the government or commercial marketplace.<\/p>\n

Myth #4:<\/strong> If you have a Common Criteria certification, then you don\u2019t need FIPS certification.<\/p>\n

Myth #5:<\/strong> A vendor should begin developing towards FIPS 140-3 now.<\/p>\n

Myth #6:<\/strong> Because FIPS certification is not an international standard; it has no applicability in other countries.<\/p>\n

Myth #7:<\/strong> Any change to my module at all means I have to go through the entire validation process again.<\/p>\n

Myth #8:<\/strong> The CMVP turns a deaf ear to the concerns of the vendor.<\/p>\n

Myth #9:<\/strong> If I\u2019m using OpenSSL to provide my crypto, then I\u2019m all set for a FIPS certification.<\/p>\n

Myth #10:<\/strong> My product is developed outside the U.S., so it doesn\u2019t qualify for a FIPS certification.<\/p>\n

During the webinar, a question regarding the basic relationship between FIPS certification, DoDIN APL and the test requirements for both was asked. We ran out of time during the live webinar, but wanted to make sure we answered every question.<\/p>\n

JITC is an Army test center, and performs testing for several programs, most notably IA and IO testing as part of UC APL listing.  Thus JITC is one Test Center of Excellence that can perform this type of testing on a vendor\u2019s product as they seek UC APL listing.  FIPS 140-2 can be a requirement for DoDIN APL listing depending on either the UCR requirements for that product type, or the UCCO and Testing Center of Excellence\u2019s chosen test plan and IA requirements.  Corsec often works with customers and the UCCO to clarify FIPS 140-2 validation requirements for DoDIN APL listing for particular requirements.<\/p>\n

Putting your product through the FIPS certification validation process can be a game changer for your company and its revenue plan. Being able to separate fact from fiction when it comes to FIPS certification can help eliminate some of the mystery that might be holding you back from pursuing your validation. With more than 300 completed certifications, Corsec can help demystify the process and guide you towards validation.<\/p>\n