Fortanix DSM Appliance
Fortanix DSM Appliance, from Fortanix, Inc., holds FIPS 140-3 certificate #5555 at overall level 3. The validation is active, with a sunset date of 2031-10-18. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: When utilizing a Trusted Channel as specified in the Security Policy. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.
Certificate
| Certificate number | 5555 |
|---|---|
| Standard | FIPS 140-3 |
| Status | active |
| Sunset date | 2031-10-18 |
| Overall level | 3 |
| Module type | Hardware |
| Embodiment | MultiChipStand |
| Vendor | Fortanix, Inc. · website |
Module description
Quoted from the NIST CMVP entry for this certificate.
Fortanix DSM Appliance is the ideal building block for implementing Fortanix DSM in a private cloud or as a managed service. With DSM, you can securely generate, store, and use cryptographic keys and certificates, as well as secrets, such as passwords, API keys, tokens, or any blob of data.
Security level exceptions
- Operational environment: N/A
- Non-invasive security: N/A
- Mitigation of other attacks: N/A
Approved algorithms (54)
| Algorithm | CAVP certificates |
|---|---|
| AES-CBC | A5344 |
| AES-CCM | A5344 |
| AES-CFB128 | A5344 |
| AES-CMAC | A5344 |
| AES-CTR | A5344 |
| AES-ECB | A5244, A5245, A5344 |
| AES-FF1 | A5344 |
| AES-GCM | A5344 |
| AES-KW | A5344 |
| AES-KWP | A5344 |
| AES-OFB | A5344 |
| Conditioning Component AES-CBC-MAC SP800-90B | A5244, A5245 |
| Counter DRBG | A5344 |
| ECDSA KeyGen (FIPS186-5) | A5344 |
| ECDSA KeyVer (FIPS186-5) | A5344 |
| ECDSA SigGen (FIPS186-5) | A5344 |
| ECDSA SigVer (FIPS186-5) | A5344 |
| EDDSA KeyGen | A5344 |
| EDDSA SigGen | A5344 |
| EDDSA SigVer | A5344 |
| HMAC-SHA-1 | A5344 |
| HMAC-SHA2-224 | A5344 |
| HMAC-SHA2-256 | A5344 |
| HMAC-SHA2-384 | A5344 |
| HMAC-SHA2-512 | A5344 |
| KAS-ECC-SSC Sp800-56Ar3 | A5344 |
| KAS-FFC-SSC Sp800-56Ar3 | A5344 |
| KDF SP800-108 | A5344 |
| KTS-IFC | A5344 |
| LMS KeyGen | A5344 |
| LMS SigGen | A5344 |
| LMS SigVer | A5344 |
| PBKDF | A5344 |
| RSA Decryption Primitive Sp800-56Br2 | A5344 |
| RSA KeyGen (FIPS186-5) | A5344 |
| RSA SigGen (FIPS186-5) | A5344 |
| RSA Signature Primitive | A5344 |
| RSA SigVer (FIPS186-2) | A5344 |
| RSA SigVer (FIPS186-5) | A5344 |
| Safe Primes Key Generation | A5344 |
| Safe Primes Key Verification | A5344 |
| SHA-1 | A5344 |
| SHA2-224 | A5344 |
| SHA2-256 | A5344, A5345 |
| SHA2-384 | A5344 |
| SHA2-512 | A5344 |
| SHA3-224 | A5344 |
| SHA3-256 | A5344 |
| SHA3-384 | A5344 |
| SHA3-512 | A5344 |
| SHAKE-128 | A5344 |
| SHAKE-256 | A5344 |
| TLS v1.2 KDF RFC7627 | A5344 |
| TLS v1.3 KDF | A5344 |
Validation history
| Date | Type | Lab |
|---|---|---|
| 2026-10-19 | Initial | Acumen Security |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-10-21: first observed by this tracker, status active
- Validation dates on record: 2026-10-19