Cisco Desk Phone 8875 Series FIPS 140-3 Compliance Letter

To Whom It May Concern,

A compliance review of Cisco Desk Phone 8875 series with PhoneOS version 3.5 (the product) was completed and found that the Product integrates the following FIPS 140-3 approved cryptographic module:

1. Cisco FIPS Object Module 7.3a (FIPS 140-3 Cert. #4747)
   https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/4747

Cisco confirms that the cryptographic module listed above provides cryptographic services for the following as applicable:

• Image Authentication, Secure Storage, Config File Enc, TLS (HTTPs, PRT Upload, Upgrade, Profile resync, Onboard Service, Webex onboarding, SIP-TLS, 802.1x (Wired)), SIP Digest, SRTP, and SSHD

The review/testing confirmed that:

1. The cryptographic module (mentioned above) does initialize in a manner that is compliant with its Security Policy.
2. All applicable cryptographic algorithms used for session establishment are handled within the cryptographic module.
3. All applicable underlying cryptographic algorithms support each service's key derivation function.

This letter has been generated in accordance with guidance provided by the Cryptographic Module Validation Program (CMVP) (https://csrc.nist.gov/Projects/cryptographic-module-validation-program/validated-modules).

In general, a letter will not be generated for subsequent software releases unless a change has been made to the cryptographic module(s) noted in this letter.

The CMVP has not independently reviewed this analysis, testing or the results.

Any questions regarding these statements may be directed via e-mail to the Cisco Global Certification Team (GCT) at certteam@cisco.com.