XenMobile Server

FIPS 140-2 compliance

January 10, 2024

Contributed by:

K K C

The Federal Information Processing Standard (FIPS) is issued by the US National Institute of Standards and Technologies (NIST). FIPS specifies the security requirements for cryptographic modules used in security systems. FIPS 140-2 is the second version of this standard. For more information about NIST-validated FIPS 140 modules, see the NIST Computer Security Resource Center.

Important:

You can enable XenMobile FIPS mode only during initial installation.

XenMobile mobile device management-only, XenMobile mobile app management-only, and XenMobile MDM+MAM are all FIPS compliant if no HDX apps are used.

All data-at-rest and data-in-transit cryptographic operations on iOS use FIPS-validated cryptographic modules provided by Citrix and Apple. On Android, all data-at-rest cryptographic operations use FIPS-validated cryptographic modules provided by the platform’s crypto modules provided by the device manufacturer. Contact your Citrix representative for more information on the device manufacturer’s modules.

All data-at-rest and data-in-transit cryptographic operations for Mobile Device Management (MDM) on supported Windows devices use FIPS-validated cryptographic modules.

All data-at-rest and data-in-transit cryptographic operations for XenMobile MDM use FIPS-validated cryptographic modules. All data-at-rest and data-in-transit for MDM flows use FIPS-compliant cryptographic modules end-to-end. That security includes the cryptographic operations described earlier for mobile devices, plus the cryptographic operations between mobile devices and Citrix Gateway.

The MDX Vault encrypts MDX-wrapped apps and associated data-at-rest on both iOS and Android devices using FIPS-validated cryptographic modules.

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Was this helpful

FIPS 140-2 compliance

January 10, 2024

Contributed by:

K K C

January 10, 2024

Contributed by:

K K C

FIPS 140-2 compliance

In this article