NSA CSfC Listed And Common Criteria Certified SSDs

1-888-576-9668
Login

eStore Login

*

*

Keep me logged in Forgot Password

For your best experience, our Product Configurator requires that you Register now to enable your selections on the next page to take effect. Just click below for our quick registration, otherwise you may Skip to Product Info.

Log In Register Now

Order By Part Number

All Products
Boards & Cards
Compact Computers
Displays & Monitors
I/O Devices & Communication
Industry Solutions
IoT Gateways
1. Embedded IoT Gateways
2. Automation IoT Gateways & Devices
Panel PCs
Peripherals & Modules
Rackmount Systems
POS Terminals
Self-Service Kiosks
Tablet PCs
Software
See All Products
Solutions
Digital Signage
Edge Intelligence & AI
Embedded Boards & Services
Embedded Kiosks
Environmental & Facility
Gaming & Entertainment
In-Vehicle Computing
SSD Solutions
IoT Gateway & Solutions
Machine Automation
Machine Vision
Medical Computing Solutions
Mining Solutions
Network Computing & Communications
Production Automation
Retail and Hospitality
Robotics
Surveillance Solutions
Test and Measurement
Transportation
Services
Credit Return Policy
Download Center
Evaluation Program
Microsoft Azure
Microsoft Licensing
Net Term Application
RMA Request Form
RMA Status
Warranty Policy
Certified Peripherals
Data Storage
SSDs

FIPS 140-2
Validated
- Advantech’s SQFlash SSD meets FIPS 140-2 Level 2 certification, verified by NIST. Its design undergoes rigorous review to meet strict security standards, reducing data leakage risks and protecting user data effectively.
NSA CSfC
Listed
- CSfC, part of NSA's cybersecurity strategy, uses commercial technologies to rapidly deliver secure solutions. It relies on layered configurations to adequately protect classified data across diverse applications.
Common Criteria Certified
- Common Criteria allows users to specify security requirements (SFRs and SARs) in a Security Target (ST), drawn from Protection Profiles (PPs). Vendors can then implement security attributes, with testing labs evaluating if products meet these claims.
NIAP
Tested
- NIAP oversees U.S. implementation of Common Criteria, including the CCEVS validation body. It develops Protection Profiles and evaluation policies to establish clear, repeatable security requirements. In collaboration with NIST, NIAP approves labs for conducting evaluations in U.S. private sector operations.

Advantages of the Advantech and CipherDriveOne
Secure SSD Product Combination

Key Certifications &
Listings
- • NIAP Tested and Verified
- • Common Criteria Certified
- • NSA CSfC-listed
- • Complies Presidential executive orders
Quantum Resistant
Encryption
- • FIPS 140-2 validated algorithms
- • NIST AES 256-bit encryption
- • Secure Erase
- • Pre-boot authentication for decryption
Multi-factor
Authentication
- • Username/password
- • Smart Cards using PIV
- • Supports Yubico Yubikey USB tokens
- • All NIST CAC smart card profiles supported

Learn More about CipherDriveOne

Common Criteria Certified Drives

SQF-2040-512ECM
NVMe M.2 2280
- • 512GB
- • FIPS140-2 and CC certified
- • Supports AES256 and OPAL
- • Operational temperature 32~158°F (0~70℃ )
Buy Online
SQF-2040-1TECM
NVMe M.2 2280
- • 1TB
- • FIPS140-2 and CC certified
- • Supports AES256 and OPAL
- • Operational temperature 32~158°F (0~70℃ )
Buy Online
SQF-2020-1TSCB
2.5" SATA
- • 1TB
- • FIPS140-2 and CC certified
- • Supports AES256 and OPAL
- • Operational temperature 32~158°F (0~70℃ )
Buy Online
SQF-2020-2TSCB
2.5" SATA
- • 2TB
- • FIPS140-2 and CC certified
- • Supports AES256 and OPAL
- • Operational temperature 32~158°F (0~70℃ )
Buy Online

Special Features of Advantech & CipherDriveOne NSA CSfC Solutions

Standard SSDs
(Non FIPS 140-2 Certified)

Advantech SQF +
CipherDriveOne Software
FIPS 140-2 Algorithms

No

Yes
Common Criteria Certified

No

Yes
NSA CSfC Listing

No

Yes
Layer 2 Protective Coating

No

Yes
Pre-boot Authentication

No

Yes
User Roles

No

Yes
Multi-Factor Authentication

No

Yes
Customizable Disclaimer

No

Yes
Type 1 & 2 Chain Boot

No

Yes
Log Event Files

No

Yes

FAQs: Certifications and Listings

1. Overview of certifications and listings?

a. FIPS 140-2 Validated.
For more information, visit: https://csrc.nist.gov/publications/detail/fips/140/2/final

b. NSA CSfC Listed.
For more information, visit:https://www.nsa.gov/Resources/Commercial-Solutions-for-Classified-Program/Overview/

c. Common Criteria Certified.
For more information, visit:https://www.niap-ccevs.org/products/11453

d. NIAP Tested.
For more information, visit:https://www.niap-ccevs.org/products/11453
2. What is FIPS 140-2?

Federal Information Processing Standard 140-2 is the benchmark for validating the effectiveness of cryptographic hardware. This specifies the security requirements that will be satisfied by a cryptographic module. This applies not only to Cryptographic hardware components such as SSD’s but also software and firmware modules as well. For more information, visit https://csrc.nist.gov/publications/detail/fips/140/2/final.

The U.S. government maintains a list of FIPS 140-2 Validated SEDs on the NIST website. To see this list, visit http://csrc.nist.gov/groups/STM/cmvp/validation.html.
3. What is the NSA CSfC Program?

The National Security Agency’s Commercial Solutions for Classified program office publishes Capability Packages that contain the requirements for using commercial technology to secure classified National Security Systems.
For more information, visithttps://www.nsa.gov/Resources/Commercial-Solutions-for-Classified-Program/Overview/
4. What is NIAP and Common Criteria?

The National Information Assurance Partnership (NIAP) is responsible for U.S. implementation of the Common Criteria, including management of the NIAP Common Criteria Evaluation and Validation Scheme (CCEVS) validation body. NIAP manages a national program for developing Protection Profiles, evaluation methodologies, and policies that will ensure achievable, repeatable, and testable requirements. In partnership with NIST, NIAP also approves Common Criteria Testing Laboratories to conduct these security evaluations in private sector operations across the U.S.
For more information, visit https://www.niap-ccevs.org/products/11453.

FAQs: Encryption and Security

1. What is meant by a FIPS 140-2 Level 2 Validation?

FIPS 140-2 Level 2 Validation is typical for data storage devices. Advantech SQFF840 and SQFF920 SSD have met Level 2 requirements. The FIPS 140-2 Level 2 requirements help ensure that the SSD encryption algorithms follow predefined and accepted standards. FIPS 140-2 describes role-based user authentication, boot time firmware identity attestation, and provisions for tamper-evident seals or labels. For more details, please refer to the Advantech’s SQFF series product sheet.
Within the framework of FIPS 140-2, there are four levels, with cumulative requirements:
Level 1: Certification of encryption engine and associated firmware
Level 2: Tamper-evident seals to protect access; role-based authentication requirements
Level 3: Tamper-resistant casing (tamper response may include zeroing of all critical security parameters [CSP]); identity-based authentication requirements
Level 4: Robust tamper resistance and intrusion response; compulsory zeroing of CSPs on intrusion detection; hardened casing for unanticipated environmental conditions
2. Is FIPS 140-2 required by my application?

Previously, actual policy requirements for FIPS 140-2 validated SEDs are limited to government owned or government-controlled compute and data storage systems, mostly within the U.S. and Canada. However, many private firms in healthcare, financial services and other industries that manage sensitive or confidential data are finding it beneficial to add FIPS 140-2 validated data storage devices to their system requirements as an added and documented way to ensure compliance with federal regulations on data security and customer privacy.
3. What is AES-256 Bit Encryption?

The Advanced Encryption Standard is a symmetric block cipher that the U.S. government selects to protect classified data. It uses a 256-bit key length to encrypt as well as decrypt a block of messages.
4. What is Pre-boot Authentication?

Pre-boot authentication or power-on authentication serves as an extension of the BIOS, UEFI or boot firmware and guarantees a secure, tamper-proof environment external to the operating system as a trusted authentication layer.
5. What is Authorization Acquisition?

Authorization Acquisition purpose is to gather user input and provide the Encryption Engine with a value that can be used to make the data encryption key available for encryption/decryption functions.
6. What is the Encryption Engine?

The encryption engine is located on the storage management level, with the keys usually held by the CSP. The engine encrypts data written to the storage and decrypts it when exiting the storage.
7. What is the purpose of having Dual Layer Encryption?

The purpose of Dual Layer Encryption is that it provides an extra layer of protection against cyberattacks, such as brute-force attacks. If an attacker obtains the encrypted data, they will need to break through two encryption layers instead of just one, making it more difficult and time consuming.

FAQs: Software with CipherDrive One

1. What is Secure Erase?

CipherDriveOne Secure Erase deletes the authentication (AK) and encryption keys (DEK) from the SSD following TCG OPAL 2.0 specifications. Once CipherDriveOne Secure Erase is executed, it is permanent. All data is left encrypted with AES-256-bit encryption and there is no way to recover the key or retrieve the data. AES-256 encryption is quantum-resistant.
2. Does CipherDriveOne Support Smart Cards?

Yes, CipherDriveOne supports Smart Cards as one form of authentication. This can include CAC, PIV, and Yubikey, smartcards or tokens.
3. What Forms of authentication does CipherDriveOne use?

CipherDriveOne allows the management of users to use custom username/passwords, smartcards for 2-factor authentication (PIV, CIV, CAC, SIPRNET cards, and Yubikeys) and multi-factor authentication.

About Us

Customer Service

Get Involved

1-888-576-9668

8 am- 8 pm (EST) Mon-Fri

Live Chat