Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Cryptographic Module Validation Program CMVP

Certificate #4443

Details

Module Name
FortiOS 6.4/7.0
Standard
FIPS 140-2
Status
Active
Sunset Date
9/21/2026
Overall Level
1
Caveat
When operated in FIPS mode. Authentication at level 3 is only applicable when identity-based authentication is enforced for the User role.
Security Level Exceptions
  • Roles, Services, and Authentication: Level 3
  • Design Assurance: Level 2
Module Type
Firmware
Embodiment
Multi-Chip Stand Alone
Description
The FortiOS 6.4/7.0 is a firmware based operating system that runs exclusively on Fortinet's FortiGate/FortiWiFi product family. The FortiOS provides integrated firewall, VPN, antivirus, antispam, intrusion prevention, content filtering and traffic shaping and HA capabilities.
Tested Configuration(s)
  • FortiGate-61F with SoC4 (ARMv8) Processor
Approved Algorithms
AES Certs. #A2225, #A2229, #A2242, #A2269 and #A2270
CVL Certs. #A2269 and #A2270
DRBG Certs. #A2225 and #A2229
ECDSA Certs. #A2242, #A2269 and #A2270
ENT P
HMAC Certs. #A2225, #A2229, #A2242, #A2269 and #A2270
KAS KAS-SSC Certs. #A2269 and #A2270, CVL Certs. #A2269 and #A2270
KAS-SSC Certs. #A2269 and #A2270
KTS AES Certs. #A2269 and #A2270 and HMAC Certs. #A2269 and #A2270; key establishment methodology provides 128 or 256 bits of encryption strength
KTS AES Certs. #A2269 and #A2270; key establishment methodology provides 128 or 256 bits of encryption strength
RSA Certs. #A2242, #A2269 and #A2270
SHS Certs. #A2225, #A2229, #A2242, #A2269 and #A2270
Allowed Algorithms
N/A
Firmware Versions
FortiOS 6.4 (FIPS-CC-64-5) and FortiOS 7.0 (FIPS-CC-70-6)

Vendor

Fortinet, Inc.
16 Fitzgerald Road
Ottawa, ON K2H 8R6
Canada

Alan Kaye
akaye@fortinet.com
Phone: 613-225-9381 x87416
Fax: 613-225-2951

Validation History

Date Type Lab
2/23/2023 Initial Lightship Security, Inc.