Ultrastar DC HC560 TCG Enterprise HDD SED, Ultrastar DC HC570 TCG Enterprise HDD SED
Western Digital Technologies, Inc. - FIPS 140 #4802
The Western Digital Ultrastar DC HC560 TCG Enterprise HDD, hereafter referred to as Ultrastar DC HC560, Cryptographic Module, cryptographic module, or CM, and the Western Digital Ultrastar DC HC570 TCG Enterprise HDD, hereafter referred to as Ultrastar DC HC570, Cryptographic Module, cryptographic module, or CM are self-encryption drives (SED) that comply in general with the specifications listed in 13.2 Trusted Computing Group Specifications and specifically with the TCG Storage Architecture Core Specification [TCG Core] with the Trusted Computing Group (TCG) Security Subsystem Class (SSC): Enterprise Specification [TCG Enterprise]. The TCG SSC Enterprise Specification defines a management interface for host application software to activate, provision, and manage encryption of user data. The specification includes data structures and their required content, and mechanisms for managing and configuring Authentication Credentials and access controls. The security architecture provides a locking mechanism by which an Authentication Credential (i.e., a password) can be set by an operator to enable control of access to user data. After an operator authenticates to the appropriate role and locks access to user data access user data is inaccessible. This implementation complies with the lock-based authentication model specified in IG 4.1.A.
Key facts
- Scheme
- FIPS 140
- Certificate
- 4802
- Standard
- FIPS 140-3
- Security level
- Level 2
- Status
- historical
- Vendor
- Western Digital Technologies, Inc.
- Module type
- Hardware
- Embodiment
- Multi-Chip Embedded
- Lab
- UL Verification Services, Inc.
- First validated
- September 16, 2024
- Versions
- WUH722020BL4205 [1, 2, 3, 4], WUH722020BL5205 [1, 2, 3, 4], WUH722222BL4205 [3, 5] , WUH722222BL5205 [3, 5]; RY07 [1], R5G4 [2], RG01 [3], VM18 [4], R7J4 [5]
- Caveat
- Interim validation. When installed, initialized and configured as specified in Section 11.1 of the Security Policy. No operator authentication is enforced for executing security services that were unlocked by an authenticated service
Algorithms
- AES-CBCAES 3580
- AES-ECBAES 3580
- AES-KWP
- AES-XTSAES 3580
- Counter DRBG
- HMAC-SHA-1HMAC 2280
- HMAC-SHA2-224HMAC 2280
- HMAC-SHA2-256HMAC 2280
- PBKDF
- RSA SigVer (FIPS186-4)
- SHA-1SHS 2942
- SHA2-224SHS 2942
- SHA2-256SHS 2942
Algorithm families of the CAVP certificates listed for this module, plus post-quantum algorithms named in its documents.
CVEs that may affect this product
sec-certs has not matched any CVE to this certificate. That is not proof the product is unaffected.
Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.
Documents and sources
Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP and the Common Criteria Portal - dataset of September 21, 2026 - synced October 15, 2026
Check certifications from your AI assistant
The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.
Add the certifications brain