{"_type": "sec_certs.sample.fips.FIPSCertificate", "dgst": "b8dab8a0987fac0d", "cert_id": 5315, "web_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.WebData", "module_name": "FortiAP 7.4", "validation_history": [{"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry", "date": "2026-06-08", "validation_type": "Initial", "lab": "Lightship Security, Inc."}], "vendor_url": "http://www.fortinet.com", "vendor": "Fortinet, Inc.", "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/June 2026_080726_0648.pdf", "module_type": "Firmware", "standard": "FIPS 140-3", "status": "active", "level": 1, "caveat": "When installed, initialized and configured as specified in Section 11.1 of the Security Policy.", "exceptions": ["Roles, services, and authentication: Level 2", "Non-invasive security: N/A", "Mitigation of other attacks: N/A"], "embodiment": "MultiChipStand", "description": "The FortiAP 7.4 is a firmware module that runs exclusively on Fortinet access points, enabling seamless integration with various Fortinet products across the network.", "tested_conf": null, "hw_versions": null, "fw_versions": null, "sw_versions": null, "mentioned_certs": {}, "historical_reason": null, "date_sunset": "2031-06-07", "revoked_reason": null, "revoked_link": null}, "pdf_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData", "keywords": {"fips_cert_id": {}, "fips_security_level": {"Level": {"Level 1": 4, "level 1": 1}}, "fips_certlike": {"Certlike": {"HMAC-SHA-1": 4, "HMAC SHA-1": 1, "HMAC-SHA- 1": 2, "SHA2-256": 10, "SHA2-384": 7, "SHA2- 512": 3, "SHA-1": 10, "SHA2-224": 2, "SHA2-512": 3, "SHA3-256": 6, "AES-256": 4, "AES-128": 1, "AES-192": 1, "AES (128": 1, "DRBG 256": 3}}, "vendor": {"Qualcomm": {"Qualcomm": 1}}, "eval_facility": {}, "symmetric_crypto": {"AES_competition": {"AES": {"AES-256": 4, "AES-128": 1, "AES-192": 1, "AES": 8}, "CAST": {"CAST": 34}}, "constructions": {"MAC": {"HMAC": 11}}}, "asymmetric_crypto": {"ECC": {"ECDSA": {"ECDSA": 52}}, "FF": {"DH": {"Diffie-Hellman": 3, "DHE": 1, "DH": 14}}}, "pq_crypto": {}, "hash_function": {"SHA": {"SHA1": {"SHA-1": 10}, "SHA3": {"SHA3-256": 6}}}, "crypto_scheme": {"MAC": {"MAC": 2}, "KEX": {"Key Exchange": 1}, "KA": {"Key agreement": 4, "Key Agreement": 2}}, "crypto_protocol": {"SSH": {"SSH": 41}, "TLS": {"TLS": {"TLS v1.2": 7, "TLS v1.3": 6, "TLS": 12, "TLS 1.2": 1}, "DTLS": {"DTLS": 34}}, "IKE": {"IKEv1": 12, "IKEv2": 11, "IKE": 49}, "IPsec": {"IPsec": 4}}, "randomness": {"PRNG": {"DRBG": 50}, "RNG": {"RBG": 2}}, "cipher_mode": {"GCM": {"GCM": 3}}, "ecc_curve": {"NIST": {"P-256": 20, "P-384": 10, "P-521": 14}}, "crypto_engine": {}, "tls_cipher_suite": {}, "crypto_library": {}, "vulnerability": {}, "side_channel_analysis": {}, "device_model": {}, "tee_name": {"AMD": {"PSP": 12}, "IBM": {"SSC": 2}}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"FIPS": {"FIPS 140-3": 13, "FIPS186-5": 44, "FIPS 186-5": 8, "FIPS 198-1": 4, "FIPS 180-4": 4, "FIPS 202": 1, "FIPS140-3": 2, "FIPS18": 2}, "NIST": {"SP 800-38A": 2, "SP 800-38D": 1, "SP 800-90A": 1, "SP 800-56A": 4, "SP 800-135": 5, "NIST SP 800-131A": 1, "SP 800-186": 1}, "RFC": {"RFC7627": 3, "RFC 8446": 1, "RFC762": 1}, "ISO": {"ISO/IEC 19790:2021": 1}}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {"OutOfScope": {"out of scope": 1, "fap- get-status CLI command. Any firmware version that is not shown on the module certificate is out of scope of this validation and requires a separate FIPS 140-3 validation. 2.5 Algorithms Approved": 1}}}, "policy_metadata": {"pdf_file_size_bytes": 701792, "pdf_is_encrypted": false, "pdf_number_of_pages": 52, "/Author": "Hawes, David J. (Fed)", "/ClassificationContentMarkingHeaderFontProps": "#008000,10,Aptos", "/ClassificationContentMarkingHeaderShapeIds": "10a273f6,585bdba4,fa1656", "/ClassificationContentMarkingHeaderText": "UNCLASSIFIED / NON CLASSIFI\u00c9//TLP:AMBER+STRICT", "/Comments": "", "/Company": "", "/ContentTypeId": "0x0101000AE53C6942ABA74F8BA3AE36B5D161CF", "/CreationDate": "D:20260604095014-04'00'", "/Creator": "Acrobat PDFMaker 26 for Word", "/GrammarlyDocumentId": "9229dd22b6ac7ace6f0d1e1445e9c4131f2dd3f38b62555e86b6e2342503e6f9", "/Keywords": "", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_ActionId": "db613579-6a21-400e-a75d-63e7411957bb", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_ContentBits": "1", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_Enabled": "true", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_Method": "Privileged", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_Name": "TLP-Amber_Strict", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_SetDate": "2026-06-04T13:45:04Z", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_SiteId": "da9cbe40-ec1e-4997-afb3-17d87574571a", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_Tag": "10, 0, 1, 1", "/MediaServiceImageTags": "", "/ModDate": "D:20260604095238-04'00'", "/Producer": "Adobe PDF Library 26.1.59", "/SourceModified": "D:20260604134943", "/Subject": "", "/Title": "", "pdf_hyperlinks": {"_type": "Set", "elements": ["https://www.fortinet.com/doc/legal/EULA.pdf", "https://training.fortinet.com/", "https://support.fortinet.com/", "https://www.fortinet.com/content/dam/fortinet/assets/data-sheets/fortiap-series.pdf", "https://docs.fortinet.com/document/fortimanager/7.2.4/cli-reference/23811/introduction", "https://fortiguard.com/", "https://blog.fortinet.com/", "https://www.fortinet.com/products", "https://www.fortinet.com/support-and-training/training.html", "https://www.fortinet.com/contact", "https://video.fortinet.com/", "https://csrc.nist.gov/projects/cryptographic-module-validation-program", "https://docs.fortinet.com/", "https://docs.fortinet.com/document/fortimanager/7.2.4/administration-guide/512210/setting-up-fortimanager", "https://wwww.fortiguard.com/"]}}}, "heuristics": {"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics", "algorithms": {"_type": "Set", "elements": ["KDF IKEv2A6064", "RSA KeyGen (FIPS186-5)A6064", "HMAC-SHA2-256A6064", "KDF SSHA6064", "SHA2-256A6064", "KAS-FFC-SSC Sp800-56Ar3A6064", "SHA2-512A6064", "ECDSA KeyVer (FIPS186-5)A6064", "SHA3-256A4291", "Counter DRBGA6064", "TLS v1.3 KDFA6064", "ECDSA SigVer (FIPS186-5)A6064", "RSA SigVer (FIPS186-5)A6064", "RSA SigGen (FIPS186-5)A6064", "AES-CBCA6064", "HMAC-SHA2-512A6064", "AES-GCMA6064", "AES-CTRA6064", "KAS-ECC-SSC Sp800-56Ar3A6064", "Safe Primes Key GenerationA6064", "SHA-1A6064", "Safe Primes Key VerificationA6064", "ECDSA KeyGen (FIPS186-5)A6064", "HMAC-SHA2-384A6064", "ECDSA SigGen (FIPS186-5)A6064", "HMAC-SHA-1A6064", "SHA2-384A6064", "KDF IKEv1A6064", "TLS v1.2 KDF RFC7627A6064"]}, "extracted_versions": {"_type": "Set", "elements": ["7.4"]}, "cpe_matches": {"_type": "Set", "elements": ["cpe:2.3:a:fortinet:fortiap:7.4.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiap:7.4.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiap:7.4.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiap:7.4.4:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiap:7.4.8:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiap:7.4.6:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiap:7.4.5:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiap:7.4.10:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiap:7.4.3:*:*:*:*:*:*:*"]}, "verified_cpe_matches": null, "related_cves": {"_type": "Set", "elements": ["CVE-2024-26012", "CVE-2025-53680", "CVE-2025-53870"]}, "policy_prunned_references": {"_type": "Set", "elements": []}, "module_prunned_references": {"_type": "Set", "elements": []}, "policy_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "module_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "direct_transitive_cves": null, "indirect_transitive_cves": null}, "state": {"_type": "sec_certs.sample.fips.InternalState", "module": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": null, "txt_hash": null, "json_hash": null}, "policy": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "70b1f01f9b9dca7dc68d312e3021452a5f9e6c6b2ca3bc8d6f59c407e336007c", "txt_hash": "136e46b8508f8161a6c21efadd90759a5d8217b688a7f8cbd10f8e133302ead2", "json_hash": null}}}