MikroTik

I would like to use MikroTik routers in applications where it's required that the router be FIPS 140-2 certified. I know that the MikroTik routers, as a complete 'unit' are not certified, but it appears that as long as a router uses a cryptographic module that is FIPS 140-2 certified, then the 'unit' can be used in such applications.

Looking at a list of "Validated FIPS 140-1 and FIPS 140-2 Cryptographic Modules", on the nist.gov website, it shows that the OpenSSL FIPS Object Module (versions from 2.0 through 2.0.10) are certified.

Does RouterOS use any of these 'modules', and if so, which one(s)?

If RouterOS does not use any of these 'modules', as a 'standard' package, has anyone ever tried to use one of them in RouterOS?

John

Anyone from MikroTik going to chime in on this ?

Anyone from MikroTik going to chime in on this ?

This has been asked before and as far as I recall Mikrotik has always been radio silent on this. I'd stay away from Mikrotik if this is a requirement. You're much safer if you use a vendor that has gone through this certification and has a FIPS mode.