KIOXIA NVMe SSD Cryptographic Module Achieves FIPS 140-3 Level 2 Validation

KIOXIA CM7 Series Enterprise SSD Controller Cryptographic Module Meets Latest Security Requirements of NIST Cryptographic Module Validation Program

TOKYO--(BUSINESS WIRE)--Kioxia Corporation, a world leader in memory solutions, today announced that the cryptographic module used in KIOXIA CM7 Series PCIe^® 5.0 NVMe™ Enterprise SSDs has been validated to meet Federal Information Processing Standard (FIPS) 140-3, Level 2 for cryptographic modules.

The FIPS 140-3 standard specifies a set of security requirements of the Cryptographic Module Validation Program administered by the National Institute of Standards and Technology (NIST), used as a security metric for federal agencies to procure validated IT equipment. Companies and federal agencies may prefer or may now be required to deploy newer, more stringent government standards – which SSDs validated to FIPS 140-3 requirements would meet. Compared to the previous FIPS 140-2 requirements, 140-3 provides higher standards for SSDs, including a stronger authentication method and updated implementation guidance.

Kioxia brought PCIe 5.0 technology to server and storage applications with the KIOXIA CM7 Series NVMe SSD. Targeted at enterprise applications and use cases – including artificial intelligence, high-performance computing, online transaction processing database, and data warehousing – KIOXIA CM7 Series drives bring enterprise performance, reliability and security to data center servers and storage.

KIOXIA CM7 Series SSD Key Features include:

• PCIe 5.0 compliant NVMe SSDs in 2.5-inch⁽¹⁾ and E3.S SSD form factors
• Dual and single-port support
• Read-intensive and mixed-use endurances
• Capacities from 1.6 terabytes (TB) to 30.72 TB (15.36 TB in E3.S form factor)
• Security options include: sanitize instant erase (SIE) ⁽²⁾, TCG Opal self-encrypting drive (SED) ⁽³⁾ and SED utilizing FIPS 140-3 Level 2 module

Notes:
(1)	"2.5-inch" indicates the form factor of the SSD. It does not indicate the drive's physical size.
(2)	SIE optional model supports Crypto Erase, which is a standardized feature defined by the technical committees (SCSI) of INCITS (the InterNational Committee for Information Technology Standards).
(3)	SED optional model supports TCG Opal and Ruby SSCs. It does not support some features of TCG Opal SSC.
*	Definition of capacity: Kioxia Corporation defines a megabyte (MB) as 1,000,000 bytes, a gigabyte (GB) as 1,000,000,000 bytes and a terabyte (TB) as 1,000,000,000,000 bytes. A computer operating system, however, reports storage capacity using powers of 2 for the definition of 1GB = 2^30 bytes = 1,073,741,824 bytes and 1TB = 2^40 bytes = 1,099,511,627,776 bytes and therefore shows less storage capacity. Available storage capacity (including examples of various media files) will vary based on file size, formatting, settings, software and operating system, and/or pre-installed software applications, or media content. Actual formatted capacity may vary.
*	Security optional models are not available in all countries due to export and local regulations.
*	PCIe is a registered trademark of PCI-SIG.
*	NVMe is a registered or unregistered trademark of NVM Express, Inc. in the United States and other countries.
*	All other company names, product names and service names may be trademarks of third-party companies.

About Kioxia

Kioxia is a world leader in memory solutions, dedicated to the development, production and sale of flash memory and solid-state drives (SSDs). In April 2017, its predecessor Toshiba Memory was spun off from Toshiba Corporation, the company that invented NAND flash memory in 1987. Kioxia is committed to uplifting the world with “memory” by offering products, services and systems that create choice for customers and memory-based value for society. Kioxia's innovative 3D flash memory technology, BiCS FLASH™, is shaping the future of storage in high-density applications, including advanced smartphones, PCs, SSDs, automotive and data centers.

*Information in this document, including product prices and specifications, content of services and contact information, is correct on the date of the announcement but is subject to change without prior notice.