Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Cryptographic Module Validation Program CMVP

Certificate #5481

Details

Module Name
FortiGate 7.2 and 7.4
Standard
FIPS 140-3
Status
Active
Sunset Date
8/11/2031
Overall Level
2
Caveat
When installed, initialized and configured as specified in Sections 2 and 11 of the Security Policy, and the tamper evident seals are installed/applied as indicated in the Security Policy.
Security Level Exceptions
  • Roles, services, and authentication: Level 3
  • Operational environment: N/A
  • Non-invasive security: N/A
Module Type
Hardware
Embodiment
MultiChipStand
Description
The FortiGate Next-Generation Firewalls with FortiOS 7.2/7.4 are multiple chip, standalone cryptographic modules consisting of production grade components contained in a physically protected enclosure in accordance with FIPS 140-3 Level 2 requirements.
Approved Algorithms
AES-CBC
AES-CBC
AES-CBC
AES-CBC
AES-CBC
AES-CBC
AES-CBC
AES-CBC
AES-CBC
AES-GCM
AES-GCM
AES-GCM
AES-GCM
AES-GCM
Counter DRBG
Counter DRBG
ECDSA KeyGen (FIPS186-5)
ECDSA KeyGen (FIPS186-5)
ECDSA SigGen (FIPS186-5)
ECDSA SigGen (FIPS186-5)
ECDSA SigVer (FIPS186-5)
ECDSA SigVer (FIPS186-5)
HMAC-SHA-1
HMAC-SHA-1
HMAC-SHA-1
HMAC-SHA-1
HMAC-SHA-1
HMAC-SHA-1
HMAC-SHA-1
HMAC-SHA2-224
HMAC-SHA2-224
HMAC-SHA2-256
HMAC-SHA2-256
HMAC-SHA2-256
HMAC-SHA2-256
HMAC-SHA2-384
HMAC-SHA2-384
HMAC-SHA2-384
HMAC-SHA2-384
HMAC-SHA2-512
HMAC-SHA2-512
HMAC-SHA2-512
HMAC-SHA2-512
KAS-ECC-SSC Sp800-56Ar3
KAS-ECC-SSC Sp800-56Ar3
KAS-FFC-SSC Sp800-56Ar3
KAS-FFC-SSC Sp800-56Ar3
KDF IKEv1
KDF IKEv1
KDF IKEv2
KDF IKEv2
KDF SSH
KDF SSH
RSA KeyGen (FIPS186-5)
RSA KeyGen (FIPS186-5)
RSA SigGen (FIPS186-5)
RSA SigGen (FIPS186-5)
RSA SigVer (FIPS186-5)
RSA SigVer (FIPS186-5)
Safe Primes Key Generation
Safe Primes Key Generation
SHA-1
SHA-1
SHA-1
SHA-1
SHA-1
SHA-1
SHA-1
SHA2-224
SHA2-224
SHA2-256
SHA2-256
SHA2-256
SHA2-256
SHA2-384
SHA2-384
SHA2-384
SHA2-384
SHA2-512
SHA2-512
SHA2-512
SHA2-512
SHA3-256
TLS v1.2 KDF RFC7627
TLS v1.2 KDF RFC7627
TLS v1.3 KDF
TLS v1.3 KDF

Vendor

Fortinet, Inc.
16 Fitzgerald Road
Ottawa, ON K2H 8R6
Canada

Marc Boire
[email protected]
Phone: 613-225-9381
Fax: 613-225-2951

Related Files

Validation History

Date Type Lab
8/12/2026 Initial Lightship Security, Inc.