Fortinet FortiToken 210

A time-based OATH one-time-password token with a push-button LCD, IP68 casing and up to five years of battery — validated by the FortiGate itself.

OATH TOTPIP68 water-resistantUp to 5-year batteryPerpetual licenceTamper-evident

Time-based one-time passwords to the OATH TOTP standard
Code appears only when the button is pressed, not continuously
Up to five years of battery, or roughly 14,000 passwords
IP68 water-resistant, in a tamper-evident moulded ABS case
Validated by the FortiGate — no external authentication server

Request a Quote Hardware & Subscriptions

Ordering information

Hardware & subscription options

Every orderable Fortinet part number for this appliance, grouped by licensing tier. Pick the line you need and we will quote it — hardware, licence term and support in one place.

Hardware Tokens

The physical token, supplied in packs, with a perpetual licence and no annual subscription on the hardware.

Fortinet Hardware Tokens

Fortinet FortiToken 210 — 5-token pack FortiToken-210 Five pieces one-time password token, time based password generator. Perpetual license, Compatible with FortiGate, FortiAuthenticator and FortiToken Cloud. Encrypted seed file is available via customer support request. #FTK-210-5
Get a Quote
Fortinet FortiToken 210 — 20-token pack FortiToken-210 Twenty pieces one-time password token, time based password generator. Perpetual license, Compatible with FortiGate, FortiAuthenticator and FortiToken Cloud. Encrypted seed file is available via customer support request. #FTK-210-20
Get a Quote
Fortinet FortiToken 210 — 100-token pack FortiToken-210 One hundred pieces one-time password token, time based password generator. Perpetual license, Compatible with FortiGate, FortiAuthenticator and FortiToken Cloud. Encrypted seed file is available via customer support request. #FTK-210-100
Get a Quote
Fortinet FortiToken 210 — 500-token pack FortiToken-210 Five hundred pieces one-time password token, time based password generator. Perpetual license, Compatible with FortiGate, FortiAuthenticator and FortiToken Cloud. Encrypted seed file is available via customer support request. #FTK-210-500
Get a Quote
Fortinet FortiToken 210 — 1,000-token pack FortiToken-210 One thousand pieces one-time password token, time based password generator. Perpetual license, Compatible with FortiGate, FortiAuthenticator and FortiToken Cloud. Encrypted seed file is available via customer support request. #FTK-210-1000
Get a Quote

Licensing

What each FortiCare and FortiGuard option includes

Fortinet licensing separates the hardware, the support contract and the security services. These are the combinations you will see in the part numbers above.

Hardware plus FortiCare Premium and FortiGuard Enterprise Protection

Hardware unit, FortiCare Premium ticket handling, advanced hardware replacement (NBD), firmware and general upgrades, and the Enterprise services bundle - IPS, AI-based inline malware prevention, advanced malware protection, inline CASB database, data loss prevention, application control, URL, DNS and video filtering, antispam, attack surface security, and FortiConverter Service - for the term of the contract.

Hardware plus FortiCare Premium and FortiGuard Unified Threat Protection (UTP)

Hardware unit, FortiCare Premium ticket handling, advanced hardware replacement (NBD), firmware and general upgrades, and the UTP services bundle - IPS, AV, botnet IP and domain, mobile malware, FortiGate Cloud Sandbox including virus outbreak and content disarm and reconstruct, application control, URL, DNS and video filtering, and antispam - for the term of the contract.

Enterprise Protection

FortiCare Premium ticket handling, advanced hardware replacement (NBD), firmware and general upgrades, and the Enterprise services bundle: IPS, AI-based inline malware prevention, advanced malware protection, inline CASB database, data loss prevention, application control, URL, DNS and video filtering, antispam, attack surface security, and FortiConverter Service.

Unified Threat Protection (UTP)

FortiCare Premium ticket handling, advanced hardware replacement (NBD), firmware and general upgrades, and the UTP services bundle: IPS, AV, botnet IP and domain, mobile malware, FortiGate Cloud Sandbox including virus outbreak and content disarm and reconstruct, application control, URL, DNS and video filtering, and antispam.

Advanced Threat Protection (ATP)

FortiCare Premium ticket handling, advanced hardware replacement (NBD), firmware and general upgrades, and the Advanced Threat Protection bundle: IPS, AV, botnet IP and domain, mobile malware, FortiGate Cloud Sandbox including virus outbreak and content disarm and reconstruct, and application control.

FortiCare Essential Support

FortiCare Essential ticket handling, hardware replacement, firmware and general upgrades, and application control.

FortiCare Premium Support

FortiCare Premium ticket handling, advanced hardware replacement (NBD), firmware and general upgrades, and application control.

FortiCare Elite Support

FortiCare Premium support with FortiCare Elite ticket handling.

Fortinet Licensing Explained — how the appliance, the support contract and the security services fit together.

Notes

Some services are sold on annual contracts only, with no multi-year part number available. We confirm the available terms when we quote.

Upgrading or extending an existing FortiCare contract is quoted separately - send us the serial number and we will price the upgrade.

Technical specifications

Fortinet FortiToken 210 Specifications

Fortinet published maximums, measured under the test conditions noted below.

Token

FortiToken 210 — Token specifications
Embedded Security Algorithm	OATH TOTP (time-based)
Components	Built-in button, 6-character LCD screen, globally unique serial number
Secure Storage Medium	Static random access memory (RAM)
Casing	Hard moulded plastic (ABS), tamper-evident and tamper-resistant

Power and Environment

FortiToken 210 — Power and Environment specifications
Battery Type	Standard lithium battery
Battery Lifetime	Up to 5 years / up to 14,000 dynamic passwords
Operating Temperature	-10°C to 50°C
Storage Temperature	-20°C to 70°C
Water Resistance	IP68 ingress protection

Compliance and Certifications

FortiToken 210 — Compliance and Certifications specifications
Hardware	RoHS compliant

Notes

Token hardware ships with a perpetual licence — there is no annual subscription on the token itself.

A FortiGate or FortiAuthenticator validates the token, so no separate authentication server is required.

Specifications are as published by Fortinet and may change without notice. Confirm the current revision before ordering.

Overview

FortiToken 210

A time-based OATH one-time-password token with a push-button LCD, IP68 casing and up to five years of battery — validated by the FortiGate itself.

A second factor that does not need a server

The FortiToken 210 adds a one-time password to a static password, which on its own is vulnerable to theft, guessing and brute-force attack. The token covers both remote and on-premise users and helps meet compliance requirements such as HIPAA, PCI and FFIEC. Because a FortiGate can act as the authentication server itself, there is no external server to buy, build or maintain — the token overlays the FortiGate deployment you already run.

Seeds handled by FortiGuard

Token seeds are managed by FortiGuard and distributed to the FortiGate, so the seed material never has to be handled manually. The token works with IPsec VPN, SSL VPN, the Wi-Fi captive portal and FortiGate administrator login, and complies with the OATH standards. An encrypted seed file is available on request through customer support where a deployment needs one.

Perpetual licensing

The token carries a perpetual licence. There is no annual subscription on the hardware and the token does not expire, which is the main commercial difference from subscription-based OTP tokens that have to be replaced on a fixed cycle.

Interested in the Fortinet FortiToken 210?

Simply tell us your deployment needs and we will confirm availability, lead time and licence type, then get back to you with a quote.

Request a Quote