FIPS 140 Certificate Support

• FIPS 140 validation is not a one-and-done proposition

• Frequent changes in FIPS 140 requirements, security vulnerabilities and other changes can trigger the need for revalidation

• Any changes to a traditional module may force revalidation. So can additional platform support or discovered vulnerabilities

• If your cryptographic module is not architected with FIPS validation in mind, ANY change to your product could require re-validation

If you don’t go through the revalidation process when you need to, NIST will flag your certificate as ‘historical’. That means it is no longer active and cannot be used for any new acquisitions by government agencies. 

MaintainCert takes over upon the delivery of RapidCert to ensure both your CryptoComply software and your FIPS certification remain in good standing with NIST. It does so by combining SafeLogic's FIPS 140 software support with our FIPS 140 certificate maintenance.

If anything happens that could potentially invalidate your certificate and/or cause NIST to declare it ‘historical’, SafeLogic will take all necessary actions to keep your certificate in active status over time. 

FIPS 140-3 and post-quantum cryptography are two excellent examples of the kinds of transitions MaintainCert covers.  SafeLogic's MaintainCert customers will get both of these critical capabilities when they become available.

While MaintainCert does include enterprise-level support for CryptoComply, don’t confuse it with a software maintenance agreement, as MaintainCert covers both your software and your certificate.

As a SafeLogic customer, there is no need to worry about the FIPS 140-3 transition because SafeLogic has you covered and will make it happen for you in a seamless fashion, all as part of our MaintainCert offering.

• SafeLogic is actively working on getting FIPS 140-3 modules validated and certificates issued

• SafeLogic will continue to keep our clients’ FIPS 140-2 certificates in active status

• When FIPS 140-3 modules and certificates are available, will migrate our clients to the new modules and certificates

• There is absolutely no rush to get to FIPS 140-3 because SafeLogic continues to maintain an active FIPS 140 certification for your company

Procurement officers do not care whether you have a FIPS 140-3 or 140-2 certificate as long as you have an active certificate in your company’s name.

• This unique, fixed-price offering eliminates future compliance risks, cost surprises, and unexpected engineering work that would pull resources from other important projects

• After 12 years, competitors are just starting to offer FIPS rebranding that SafeLogic pioneered with RapidCert. How long will it take them to catch up with MaintainCert?

• Combined with CryptoComply and RapidCert, MaintainCert delivers an unparalleled combination of software and services to expedite your entry into new markets and keep you there over time with minimal to no effort on your part