Over 1,500 FIPS 140-2 validated products will be facing archival by CMVP by\u00a02017.<\/span><\/p>\n Recently, CMVP, the governing body which oversees FIPS 140-2 validations, laid out guidelines and new regulations<\/a><\/span> for validations in two distinct areas:<\/span><\/p>\n If your validation took place prior to January 1st<\/sup> 2012, then CMVP could soon place your product on an unprocurable solutions list which ultimately\u00a0will need to revalidate.\u00a0<\/span><\/p>\n Additionally, all certifications that use Random Number Generators (RNG), as well as certifications that use both the NIST 800-90A DRBG and RNG will be required to re-validate, otherwise, they will be placed on an unprocurable products list which mandates reaffirmation with CMVP that you can meet the new standards.<\/span><\/p>\n In addition to this guidance, there are a number of other regulations that CMVP laid out during the most recent ICMC.\u00a0<\/span><\/p>\nSunsetting of products validated prior to 2012<\/span><\/span><\/strong><\/h4>\n
De-listing of products using RNGs<\/span><\/strong><\/span><\/h4>\n