- Authorized Reseller
- Free Shipping in Canada Restrictions may apply
- Get the Best Price
Fortinet FortiToken 310
A driverless USB smart-card token that acts as a hardware security module for PKI certificates, with onboard RSA, AES and a random number generator.
- Driverless USB device using the CCID class — no client driver to deploy
- 16-bit smart card processor with 64 KB of memory
- Onboard RSA, DES, 3DES, AES and SHA, plus a random number generator
- Supports MS-CAPI and PKCS#11 on Windows, Linux and macOS
- Data retention of at least 10 years and 500,000 rewrite cycles
Hardware & subscription options
Every orderable Fortinet part number for this appliance, grouped by licensing tier. Pick the line you need and we will quote it — hardware, licence term and support in one place.
Hardware Tokens
The physical token, supplied in packs, with a perpetual licence and no annual subscription on the hardware.
Fortinet Hardware Tokens
-
Fortinet FortiToken 310 — 5-token pack FortiToken-310 5 USB tokens for PKI certificate and client software. Perpetual license. #FTK-310-5Get a Quote
-
Fortinet FortiToken 310 — 20-token pack FortiToken-310 20 USB tokens for PKI certificate and client software. Perpetual license #FTK-310-20Get a Quote
-
Fortinet FortiToken 310 — 100-token pack FortiToken-310 100 USB tokens for PKI certificate and client software. Perpetual license #FTK-310-100Get a Quote
What each FortiCare and FortiGuard option includes
Fortinet licensing separates the hardware, the support contract and the security services. These are the combinations you will see in the part numbers above.
Hardware plus FortiCare Premium and FortiGuard Enterprise Protection
Hardware unit, FortiCare Premium ticket handling, advanced hardware replacement (NBD), firmware and general upgrades, and the Enterprise services bundle - IPS, AI-based inline malware prevention, advanced malware protection, inline CASB database, data loss prevention, application control, URL, DNS and video filtering, antispam, attack surface security, and FortiConverter Service - for the term of the contract.
Hardware plus FortiCare Premium and FortiGuard Unified Threat Protection (UTP)
Hardware unit, FortiCare Premium ticket handling, advanced hardware replacement (NBD), firmware and general upgrades, and the UTP services bundle - IPS, AV, botnet IP and domain, mobile malware, FortiGate Cloud Sandbox including virus outbreak and content disarm and reconstruct, application control, URL, DNS and video filtering, and antispam - for the term of the contract.
Enterprise Protection
FortiCare Premium ticket handling, advanced hardware replacement (NBD), firmware and general upgrades, and the Enterprise services bundle: IPS, AI-based inline malware prevention, advanced malware protection, inline CASB database, data loss prevention, application control, URL, DNS and video filtering, antispam, attack surface security, and FortiConverter Service.
Unified Threat Protection (UTP)
FortiCare Premium ticket handling, advanced hardware replacement (NBD), firmware and general upgrades, and the UTP services bundle: IPS, AV, botnet IP and domain, mobile malware, FortiGate Cloud Sandbox including virus outbreak and content disarm and reconstruct, application control, URL, DNS and video filtering, and antispam.
Advanced Threat Protection (ATP)
FortiCare Premium ticket handling, advanced hardware replacement (NBD), firmware and general upgrades, and the Advanced Threat Protection bundle: IPS, AV, botnet IP and domain, mobile malware, FortiGate Cloud Sandbox including virus outbreak and content disarm and reconstruct, and application control.
FortiCare Essential Support
FortiCare Essential ticket handling, hardware replacement, firmware and general upgrades, and application control.
FortiCare Premium Support
FortiCare Premium ticket handling, advanced hardware replacement (NBD), firmware and general upgrades, and application control.
FortiCare Elite Support
FortiCare Premium support with FortiCare Elite ticket handling.
Fortinet Licensing Explained — how the appliance, the support contract and the security services fit together.
Some services are sold on annual contracts only, with no multi-year part number available. We confirm the available terms when we quote.
Upgrading or extending an existing FortiCare contract is quoted separately - send us the serial number and we will price the upgrade.
Fortinet FortiToken 310 Specifications
Fortinet published maximums, measured under the test conditions noted below.
Technical
| Interface and Device Protocol | USB — CCID driverless device |
|---|---|
| Smart Card Platform | 16-bit smart card processor, 64 KB memory |
| Cryptographic Algorithms | Asymmetric key: RSA up to 2048-bit, ECDSA 256 / 192-bit. Symmetric key: DES, 3DES 168 / 112-bit, AES 256 / 192 / 128-bit. Hash: SHA-1, SHA-2, HMAC-SHA1 |
| Data Retention | 10 years minimum |
| Data Rewrite Cycles | 500,000 rewrites minimum |
| Case | A1+ blue, 53.3 x 16.5 x 8.5 mm |
Power and Environment
| Power | 5 V, under 250 mW |
|---|---|
| Operating Temperature | 0°C to 70°C (32°F to 158°F) |
| Storage Temperature | -20°C to 85°C (-4°F to 185°F) |
| Humidity | 0–100%, non-condensing |
Token hardware ships with a perpetual licence — there is no annual subscription on the token itself.
A FortiGate or FortiAuthenticator validates the token, so no separate authentication server is required.
Specifications are as published by Fortinet and may change without notice. Confirm the current revision before ordering.
FortiToken 310
A driverless USB smart-card token that acts as a hardware security module for PKI certificates, with onboard RSA, AES and a random number generator.
A hardware security module on a USB stick
The FortiToken 310 is a USB token built around a smart card chip and its own chip operating system, paired with a security client application written for this token. Each token behaves as a hardware security module, performing authentication and cryptographic operations on the chip itself rather than on the host, and exposing them through the Microsoft CAPI and PKCS#11 interfaces that PKI-aware applications already use.
PKI certificate storage
The token is intended as a low-cost PKI authenticator: the private key is generated and held on the chip, so it is never exposed to the operating system. It is FIPS-140 compliant and carries a perpetual licence, with no annual subscription on the hardware.
Interested in the Fortinet FortiToken 310?
Simply tell us your deployment needs and we will confirm availability, lead time and licence type, then get back to you with a quote.
Request a Quote