Problem:

VBE: Is VBE SSL FIPS 140-2 Certified?

Resolution:

Problem Description:

Product: VBE

Platform: All

JDK version: N/A

Compiler version: N/A

Component: SSL

Question: Is VBE SSL FIPS 140-2 Certified?

Resolution:

The current Certicom libraries used by VisiBroker C does not allow us to claim FIPS 140-2 compliance. We could add this with a modest amount of work and redistributing a very slightly different Certicom library.

For VisiBroker Java, we redistribute the JDK (or rely on HP"s or IBM"s JDK being present). Security in Java is pluggable. Customer could add their own FIPS 140-2 security for VisiBroker Java.

Reference:

http://csrc.nist.gov/cryptval/140-2.htm