FIPS 140-2 · Section 508 · DoD 5220.22-M

PowerArchiver for Government

FIPS 140-2 compliant data protection for files at rest, in storage, and in transit. Section 508 certified. Used by federal agencies, defense contractors, and state / local governments since 1998.
Compliance

Three certifications procurement looks for

PowerArchiver Enterprise carries the validated paperwork for federal data-protection and accessibility requirements that procurement teams check first — FIPS 140-2, HIPAA, DFARS, Section 508. Business / Professional / Toolbox ship the same AES-256 engine, but the formal validation documentation lives at Enterprise. Documentation supplied for your compliance package on request.
FIPS 140-2

Validated cryptography

Encryption uses Microsoft CryptoAPI's Enhanced Cryptographic Provider — a FIPS 140-2 validated cryptographic module. Files at rest are protected with FIPS-validated ZIP AES-256; files in transit via Secure FTP use FIPS-validated SSL.
See validation certificates →
Section 508

Accessibility compliant

Every version of PowerArchiver is Section 508 compliant. We publish a current VPAT (Voluntary Product Accessibility Template) so your accessibility-review team has the documentation up front.
Download VPAT (PDF) →
DoD 5220.22-M

Sanitized file wipe

Built-in File Wipe uses DoD 5220.22-M-suggested methods for clearing and sanitizing writable media. Choose 1, 3, or 7 passes per your security policy. Useful for end-of-life decommissioning and classified-handling workflows.
More security features →
Security stack

Data protected at rest, in storage, and in transit

Encryption coverage that satisfies federal data-handling requirements end-to-end. Administrators can force any combination of these settings on the user fleet.

ZIP AES encryption

Full support for ZIP AES at 128 / 192 / 256 bits. Compatible with PKZip 5.1, Secure Zip 8.0, and WinZip 9.0 (AE-1 + AE-2). Files encrypted by PowerArchiver open in any standards-compliant ZIP utility.

PowerArchiver Secure FTP

Send-To-Secure-FTP feature for SFTP and FTP-over-SSL. Uses the FIPS 140-2 validated OpenSSL library — satisfies the U.S. Government data-transport requirement out of the box.

PACL command-line tool (Toolbox / Enterprise)

Standalone CLI for scriptable, scheduled, and CI/CD use. Supports ZIP, ZIPX, 7-ZIP, CAB, PA, JAR, TAR, TAR.GZ, TAR.BZ2, yENC, Base64, CAB SFX. FIPS 140-2 certified across all modes. Included in Toolbox and Enterprise editions.

Password policies

Force minimum password length and required character classes (lower, upper, numeric, symbol — independently). Stops weak password use across the fleet at policy level.

Password profiles

Pre-configured password profiles available via dropdown for both encryption and decryption. Reduces helpdesk volume for shared-archive workflows.

Outlook plug-in

Compress + encrypt attachments inside Outlook. ZIP / ZIPX / 7-Zip / CAB / TAR.GZ formats with 256-bit AES, FIPS-validated. Configurable rules per administrator policy.

Deploy via existing IT

MSI · GPO · forced policies · five-minute fleet rollout

PowerArchiver has been deployed by federal IT teams for 16+ years. Single registration key for all users. Silent install. Any setting can be forced or locked by administrator policy.
  • Windows Installer (MSI) — push via SCCM, Intune, GPO, PDQ Deploy, or any standard MSI tool. 64-bit and 32-bit packages available.
  • Single-key registration — deploy via GPO or regsvr32 registry merge before or after installation. No per-machine activation overhead.
  • Force settings on users — forbid online features, enforce ZIP AES 256 + FIPS 140-2 mode, require minimum password policies, disable any major feature individually (FTP, Backup, Encryption Suite, Data Burner), or simplify the interface globally.
  • Silent install — invoke with /qn for fully unattended deploy. No first-run wizard, no nag screens, no user interaction required.
  • Interface lockdown — hide UI elements per deployment so users only see the features your security policy permits.
  • Air-gap deployment supported — license activation works via dedicated registry-merge path for disconnected / classified environments. No telemetry beyond the license check.
  • Business Volume Pricing

    Per-seat licenses scale with quantity

    Volume discounts apply to Business, Professional, Professional Toolbox, and Enterprise per-seat licenses. The more you buy, the lower the per-license price. At ~500–1,000 seats consider Enterprise ($59.95 with volume rates) or Enterprise Unlimited for org-wide flat-fee deployment with FIPS / HIPAA / DFARS compliance built in.

    Business

    QuantityPer licenseSave
    1$22.95
    2–9$16.0030%
    25–49$11.0052%
    50–99$8.5063%
    200–499$5.0078%
    500–999$3.5085%
    1000+$2.9087%

    Professional Toolbox

    QuantityPer licenseSave
    1$49.95
    2–9$35.0030%
    25–49$22.0056%
    50–99$17.0066%
    200–499$10.5079%
    500–999$7.0086%
    1000+$5.5089%

    Enterprise

    QuantityPer licenseSave
    1$59.95
    2–9$45.5024%
    25–49$28.5052%
    50–99$20.5066%
    200–499$13.5077%
    500–999$9.0085%
    1000+$7.0088%

    When to switch to Enterprise: if you need FIPS 140-2, HIPAA / DFARS validation, audit logging, or centralized IT-control features, jump to Enterprise at $59.95 per-seat (volume rates available) — those compliance + IT features aren't in Business / Professional / Professional Toolbox. For org-wide deploys at high seat counts, Enterprise Unlimited (from $4,995) is typically more cost-effective than per-seat math above ~500 seats. Talk to sales for an Enterprise volume or Unlimited quote.

    Prices shown in your region's currency (USD by default; £ on the UK variant). Volume orders billed via PO with NET-30 available for established companies. Request a formal volume quote →
    FIPS 140-2 validation

    NIST CMVP certificates by Windows version

    PowerArchiver uses Microsoft CryptoAPI's Enhanced Cryptographic Provider — a Windows-OS-level component validated against FIPS 140-2 at the certificate numbers below.
    Windows version CMVP certificate
    Windows 10 / Server 2016Cert. #2937
    Windows 8 / Server 2012Cert. #1894
    Windows 7Cert. #1330
    Windows Server 2008 R2Cert. #1337
    Windows Server 2008Cert. #1010
    Windows VistaCert. #1002
    Windows Server 2003Cert. #1012
    Windows XP SP3Cert. #989
    If your security team needs SHA-256 installer checksums, the VPAT, or an updated list of validation certificates, contact us — we'll bundle whatever your accreditation package requires.
    Procurement

    Talk to us about your agency or contract

    GSA / SEWP / preferred-vendor channels supported. Direct response from sales engineering. We'll model multivolume vs. Enterprise Unlimited side-by-side so you procure at the right tier.
  • Email: ordering@conexware.com
  • Phone: 1-888-302-8800
  • Office: ConeXware, Inc. · 11654 Plaza America Dr. #350 · Reston, VA 20190 · USA
  • Need help?

    Get unstuck

    🛟

    Support

    Installation issues, license activation, registration recovery — submit a ticket through the support form and we'll respond within one business day.
    Open the support form →
    📚

    Wiki

    Feature documentation, command-line reference (PACL), MSI deployment notes, FAQ archives, and configuration guides for IT.
    Browse the Wiki →
    🔑

    Order Recovery

    Lost your license key, need to re-download an old purchase, or want to update billing details? Manage everything from your ConeXware account.
    Recover an order →