Axway Security Kernel
Axway Inc. - FIPS 140 #2225
The Axway Security Kernel is a software module that provides all security functionalities for several Axway products including the Axway Validation Authority Suite which is a collection of products that provide flexible and robust OCSP/SCVP certificate validation solution for standard and custom desktop and server applications. The suite supports established security standards and technologies and can be used together or integrated with existing solutions.
Key facts
- Scheme
- FIPS 140
- Certificate
- 2225
- Standard
- FIPS 140-2
- Security level
- Level 1
- Status
- historical
- Status reason
- 186-2 transition
- Vendor
- Axway Inc.
- Module type
- Software
- Embodiment
- Multi-Chip Stand Alone
- Lab
- UL Verification Services, Inc.
- First validated
- August 14, 2014
- Versions
- 3.0 and 3.0.1
- Caveat
- When operated in FIPS mode. The module generates cryptographic keys whose strengths are modified by available entropy. No assurance of the minimum strength of generated keys
- Level exceptions
- Mitigation of Other Attacks: N/A; Physical Security: N/A
Algorithms
- AES
- CVL
- DSA
- ECDSA
- HMAC
- RSA
- SHS
- Triple-DES
Algorithm families of the CAVP certificates listed for this module, plus post-quantum algorithms named in its documents.
CAVP algorithm certificates (16)
- AES 2446
- AES 3215
- CVL 439
- CVL 76
- DSA 760
- DSA 918
- ECDSA 402
- ECDSA 594
- HMAC 1510
- HMAC 2028
- RSA 1257
- RSA 1638
- SHS 2080
- SHS 2663
- Triple-DES 1511
- Triple-DES 1830
Each approved algorithm in a FIPS 140-3 module needs its own NIST CAVP certificate. Older numeric certificates link to their NIST page; ACVP certificates (A1234) can be looked up in the CAVP validation search.
Tested environments
- Microsoft Windows 2012 64-bit running on Dell PowerEdge R620 Server
- RHEL 6.3 64-bit running on Dell PowerEdge R620 Server
- Solaris 10 64-bit running on Sun Blade T6300 Server (single-user mode)
Operational environments the module was tested on, as listed by NIST CMVP.
CVEs that may affect this product
sec-certs has not matched any CVE to this certificate. That is not proof the product is unaffected.
Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.
Documents and sources
Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP, the Common Criteria Portal and ENISA (EUCC) - dataset of September 21, 2026 - synced October 17, 2026
Check certifications from your AI assistant
The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.
Add the certifications brain