808bits

FortiWLM-100D and FortiWLM-1000D

FIPS 140-2 certificate #3897 · Fortinet, Inc. · data as of 2026-10-21

FortiWLM-100D and FortiWLM-1000D, from Fortinet, Inc., holds FIPS 140-2 certificate #3897 at overall level 2. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Moved to historical list due to sunsetting. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When installed, initialized and configured as specified in the FIPS 140-2 Compliant Operation Section of the Security Policy. The tamper evident seals and entropy token installed as indicated in the security policy. No assurance of the minimum strength of generated keys

Certificate

Certificate number3897
StandardFIPS 140-2
Statushistorical
Overall level2
Module typeHardware
EmbodimentMulti-Chip Stand Alone
VendorFortinet, Inc. · website
Hardware versionsFWM-100D (C1AE82) and FWM-1000D (C1AE83) with Tamper Evident Seal Kit: FIPS-SEAL-RED
Firmware versionsFortiWLM 8.5-2fips-1

Module description

Quoted from the NIST CMVP entry for this certificate.

The FortiWLM-100D and 1000D are multi-chip standalone cryptographic modules consisting of production-grade components in a physically protected enclosure conformant to FIPS 140-2 Level 2 requirements. The modules have similar appearance and functionality but have different numbers and types of network interfaces to support various network configurations: - The FortiWLM-100D has 4 network interfaces with status LEDs for each network interface (4x 10/100/1000 Base-T) - The FortiWLM-1000D has 8 network interfaces with status LEDs for each network interface (4x 10/100/1000 Base-T,4x 1GB SFP)

Security level exceptions

  • Mitigation of Other Attacks: N/A

Approved algorithms (9)

AlgorithmCAVP certificates
AESC1652, C1653
CKGvendor affirmed
CVLC1653
DRBGC1652
HMACC1653
KAS-SSCvendor affirmed
KTS
RSAC1653
SHSC1653

Allowed algorithms

RSA (key wrapping; key establishment methodology provides 112 bits of encryption strength)

Tested configurations

  • N/A

Validation history

DateTypeLab
2021-04-16InitialAcumen Security

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2021-04-16

Source documents