The traditional FIPS validation process can take as long as 16 months from start to certificate issuance. The validation phases are:
- Implementation under test – evidence and module has been submitted to the CMT lab and testing is underway.
- Review pending – testing has been completed and the lab report has been submitted to CMVP awaiting review.
In review – A member of CMVP has been assigned and has begun the review of the lab report.
- Coordination – Questions from CMVP have been sent back to the CMT lab. Responses from the lab are then sent back to CMVP.
- Finalization – All questions have been satisfactorily addressed and the FIPS certificate is prepared for issuance.
In contrast, SafeLogic’s RapidCert service accelerates and simplifies FIPS 140 validations, yielding completion in less than 8 weeks!