Yubico Secures FIPS 140-3 Validation for YubiHSM 2 FIPS, Bolstering Critical Infrastructure Security

Event summary

  • Yubico's YubiHSM 2 FIPS achieved FIPS 140-3 validation with Certificate #5302 from NIST CMVP.
  • The validation reinforces Yubico’s commitment to high-assurance cryptographic security for critical infrastructure.
  • YubiHSM 2 FIPS is designed to protect cryptographic keys and perform secure operations within a tamper-resistant HSM.
  • The validation aligns with NIST SP 800-207 Zero Trust principles and CISA’s Zero Trust Maturity Model.
  • YubiHSM 2 FIPS meets Overall Level 3 security requirements under FIPS 140-3 and ISO/IEC 19790 standards.

The big picture

Yubico’s FIPS 140-3 validation for YubiHSM 2 FIPS comes at a time when cyberattacks are increasingly targeting cryptographic keys and machine identities. This milestone strengthens Yubico’s position in the market for high-assurance cryptographic security, aligning with broader industry shifts towards Zero Trust architectures and the need for robust hardware-backed security solutions. The validation also underscores the growing importance of securing AI-driven workflows, as highlighted by recent developments in Zero Trust frameworks for AI agents.

What we're watching

Zero Trust Adoption
How the FIPS 140-3 validation will accelerate Yubico’s position in the Zero Trust market, particularly among U.S. government agencies and regulated enterprises.
AI Security Integration
Whether Yubico can leverage this validation to strengthen its offerings for AI agent workflows, as highlighted by Anthropic’s Zero Trust for AI agents paper.
Competitive Differentiation
The pace at which Yubico can differentiate itself from competitors in the hardware security module space with this validation.

Related topics

Technology