Thales Luna HSMs First Hardware Security Module to be FIPS 140-3 Level 3 Validated

We are excited to announce that the Luna 7 family of HSMs (all models of Network and PCIe) are now FIPS 140-3 Level 3 validated. The Luna 7 line of HSMs is the first in the industry to receive this validation. 

FIPS 140-3 is the latest iteration of the benchmark industry leading security certification, replacing FIPS 140-2 as of Sept 2021. It demonstrates compliance to an internationally recognized set of security requirements for cryptographic modules defined by United States National Institute of Standards and Technology (NIST). The certification involves both functional testing alongside structured code review by a nationally accredited laboratory to confirm the product complies with its claimed level of security.

FIPS 140-2 has been in use since 1998, and the goal of FIPS 140-3 is to be more closely aligned to international standards, evolving requirements such as PQC and better suited to today’s technologies.

Key Details

  • The Luna Network and PCIe HSMs are listed under “Luna K7 Cryptographic Module” and all the models in both the A and S series are validated.
  • Customers simply need to download the latest firmware from our Customer Support Portal to review the security policy to maintain compliance with this validation.
  • All FIPS 140-2 certificates will be moved to the Historical List as of Sept. 21, 2026.

Quick Links

Please contact your Thales Representative if you have any questions.