# Fortinet Documents FIPS-Validated Module

NIST CMVP Certificate #5493 lists Fortinet’s FortiClient Crypto Module v1.0 as an active software cryptographic module validated to FIPS 140-3 Security Level 1, with a stated sunset date of August 16, 2031. The certificate is relevant evidence for government buyers assessing FortiClient’s cryptographic services, but it does not establish that every Fortinet VPN product, configuration, or deployment satisfies a particular solicitation or agency requirement; it also includes a caveat concerning externally loaded security parameters. No contract opportunity or pricing is identified.

- Procurement teams can use the certificate to support product-level due diligence, while verifying that the proposed product and deployment use the validated module within the certificate’s scope and caveats.
- The validation remains active through its stated sunset date; buyers should assess the certificate status and applicability against the requirements and timing of each procurement.
- Fortinet lists prodseccompliance@fortinet.com for product security and compliance inquiries, which can be used to clarify certificate scope for an evaluation.

**Jurisdictions:** federal
**Industries:** Information Technology
**Topics:** Cybersecurity, Regulatory Compliance
**Published:** October 24, 2026

### Government Entities
- National Institute of Standards and Technology (NIST)

### Vendors
- Fortinet Inc. ()

### Key Quotes
> The FortiClient Crypto Module v1.0 is a software cryptographic module that provides cryptographic services for FortiClient, Fortinet's endpoint security application.
> — Original poster

### Sources
- [Looking for FIPS 140-3 VPN Recommendation for Small Business](https://www.reddit.com/r/CMMC/comments/1xe9tam/looking_for_fips_1403_vpn_recommendation_for) - reddit-cmmc