deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-12 13:27:23 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

Fit and finish edits

Browse Source
This commit is contained in:
MSRobertD 2024-01-03 18:44:43 -08:00
parent 3febc8c329
commit 1cc026aca5
9 changed files with 8 additions and 40 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
windows/security/security-foundations/certification/fips-140-validation.md
View File

@ -9,11 +9,11 @@ ms.reviewer: paoloma
ms.collection: tier3 ms.collection: tier3
--- ---
# Windows FIPS 140 validations # Windows FIPS 140 validation overview
The Federal Information Processing Standard (FIPS) Publication 140 is a U.S. government standard that defines the minimum-security requirements for cryptographic modules in IT products. This topic introduces the FIPS 140 validation process for the Windows cryptographic modules, algorithms, and entropy source. The Federal Information Processing Standard (FIPS) Publication 140 is a U.S. government standard that defines the minimum-security requirements for cryptographic modules in IT products. This topic introduces the FIPS 140 validation process for the Windows cryptographic modules, algorithms, and entropy source.
The Windows cryptographic modules are used across different Microsoft products, including Windows client operating systems, Windows Server, and Azure cloud services. For a current listing of FIPS 140 validated cryptographic modules, select a product from the drop-down menus below. The Windows cryptographic modules are used across different Microsoft products, including Windows client operating systems, Windows Server operating systems, and Azure cloud services. For a current listing of FIPS 140 validated cryptographic modules, select a product from the drop-down menus below.
[!INCLUDE [validation-selector](./includes/validation-selector.md)] [!INCLUDE [validation-selector](./includes/validation-selector.md)]
@ -25,7 +25,7 @@ Microsoft currently certifies Windows FIPS 140 compliance under the three valida
- **Algorithm validation:** The set of FIPS-Approved cryptographic algorithms used by the modules are validated under the [Cryptographic Algorithm Validation Program (CAVP)](https://csrc.nist.gov/Projects/cryptographic-algorithm-validation-program) - **Algorithm validation:** The set of FIPS-Approved cryptographic algorithms used by the modules are validated under the [Cryptographic Algorithm Validation Program (CAVP)](https://csrc.nist.gov/Projects/cryptographic-algorithm-validation-program)
- **Entropy source validation:** Starting in 2023, the Windows entropy source used by the modules is validated under the CMVP [Entropy Validation program](https://csrc.nist.gov/projects/cryptographic-module-validation-program/entropy-validations) - **Entropy source validation:** Starting in 2023, the Windows entropy source used by the modules is validated under the CMVP [Entropy Validation program](https://csrc.nist.gov/projects/cryptographic-module-validation-program/entropy-validations)
Microsoft begins validation of cryptographic modules after each major feature release of Windows and Windows Server. The duration of each evaluation varies, depending on many factors. In between major releases, Microsoft seeks to minimize the changes to the cryptographic modules. After completing validation, the module, algorithm, or entropy source is added to the NIST validation list, which identifies the following: Microsoft begins validation of cryptographic modules after each major feature release of Windows and Windows Server. The duration of each evaluation varies and depends on many factors. In between major releases, Microsoft seeks to minimize the changes to the cryptographic modules. After completing validation, the module, algorithm, or entropy source is added to the NIST validation list published at the program websites above, which identifies the following:
- Vendor and implementation details - Vendor and implementation details
- Operational environment - Operational environment
@ -36,13 +36,11 @@ When a module validation label includes the note *When operated in FIPS mode*, s
## Determine if a Windows service or application is FIPS 140 compliant ## Determine if a Windows service or application is FIPS 140 compliant
Microsoft validates the cryptographic modules used in Windows and other products, not individual Windows services or applications. Contact the vendor of the service or application for information on whether it calls a validated Windows cryptographic module in a FIPS compliant manner.\ Microsoft validates the cryptographic modules used in Windows and other products, not individual Windows services or applications. Contact the vendor of the service or application for information on whether it calls a validated Windows cryptographic module in a FIPS compliant manner. *FIPS 140 validated* signifies that the cryptographic module, or a product that embeds the module, has been validated by the CMVP as meeting the FIPS 140 requirements. *FIPS 140 compliant* is a different industry term for IT products that rely on FIPS 140 validated modules for cryptographic functionality. A compliant solution calls FIPS 140 validated cryptography, and is configured according to the defined FIPS approved mode of operation.
*FIPS 140 validated* signifies that the cryptographic module, or a product that embeds the module, has been validated by the CMVP as meeting the FIPS 140 requirements.\
*FIPS 140 compliant* is a different industry term for IT products that rely on FIPS 140 validated modules for cryptographic functionality. A compliant solution calls FIPS 140 validated cryptography, and is configured according to the defined FIPS approved mode of operation.
## FIPS 140 and the Commercial National Security Algorithm Suite ## FIPS 140 and the Commercial National Security Algorithm Suite
The *Commercial National Security Algorithm* (CNSA) suite, is a set of cryptographic algorithms promulgated by the National Security Agency as a replacement for NSA Suite B cryptographic algorithms. Many CNSA cryptographic algorithms are also approved under the FIPS 140 standard. To determine whether a CNSA algorithm was included in the scope of CAVP validated algorithms used in a Microsoft product, choose a product from the drop-down menus at the top of this topic and reference the algorithm scope listed for each validated module. The *Commercial National Security Algorithm* (CNSA) suite is a set of cryptographic algorithms promulgated by the National Security Agency as a replacement for NSA Suite B cryptographic algorithms. Many CNSA cryptographic algorithms are also approved under the FIPS 140 standard. To determine whether a CNSA algorithm was included in the scope of CAVP validated algorithms used in a Microsoft product, choose a product from the drop-down menus at the top of this topic and reference the algorithm scope listed for each validated module.
## FIPS 140 and Common Criteria certifications ## FIPS 140 and Common Criteria certifications

3
windows/security/security-foundations/certification/includes/validation-selector.md
View File

@ -4,5 +4,6 @@
> - [(Windows | Previous versions)](../validations/fips-140-windows-previous.md) > - [(Windows | Previous versions)](../validations/fips-140-windows-previous.md)
> - [(Windows Server | Windows Server 2019)](../validations/fips-140-windows-server-2019.md) > - [(Windows Server | Windows Server 2019)](../validations/fips-140-windows-server-2019.md)
> - [(Windows Server | Windows Server 2016)](../validations/fips-140-windows-server-2016.md) > - [(Windows Server | Windows Server 2016)](../validations/fips-140-windows-server-2016.md)
> - [(Windows Server | Windows Server Semi-Annual Releases)](../validations/fips-140-windows-server-semi-annual.md) > - [(Windows Server | Windows Server semi-annual releases)](../validations/fips-140-windows-server-semi-annual.md)
> - [(Windows Server | Previous versions)](../validations/fips-140-windows-server-previous.md) > - [(Windows Server | Previous versions)](../validations/fips-140-windows-server-previous.md)
> - [(Other products | All releases)](../validations/fips-140-other-products.md)

5
windows/security/security-foundations/certification/validations/fips-140-windows-previous.md
View File

@ -15,7 +15,6 @@ The following tables list the completed FIPS 140 validations of cryptographic mo
## Windows 8.1 ## Windows 8.1
Validated Editions: RT, Pro, Enterprise, Phone, Embedded Validated Editions: RT, Pro, Enterprise, Phone, Embedded
|Cryptographic Module|Version (link to Security Policy)|CMVP Certificate #| |Cryptographic Module|Version (link to Security Policy)|CMVP Certificate #|
|--- |--- |--- | |--- |--- |--- |
|BitLocker Dump Filter (dumpfve.sys)|[6.3.9600 6.3.9600.17031][sp-2354]|[#2354][certificate-2354]| |BitLocker Dump Filter (dumpfve.sys)|[6.3.9600 6.3.9600.17031][sp-2354]|[#2354][certificate-2354]|
@ -29,7 +28,6 @@ Validated Editions: RT, Pro, Enterprise, Phone, Embedded
## Windows 8 ## Windows 8
Validated Editions: RT, Home, Pro, Enterprise, Phone Validated Editions: RT, Home, Pro, Enterprise, Phone
|Cryptographic Module|Version (link to Security Policy)|CMVP Certificate #| |Cryptographic Module|Version (link to Security Policy)|CMVP Certificate #|
|--- |--- |--- | |--- |--- |--- |
|BitLocker Dump Filter (DUMPFVE.SYS)|[6.2.9200][sp-1899]|[#1899][sp-1899]| |BitLocker Dump Filter (DUMPFVE.SYS)|[6.2.9200][sp-1899]|[#1899][sp-1899]|
@ -45,7 +43,6 @@ Validated Editions: RT, Home, Pro, Enterprise, Phone
## Windows 7 ## Windows 7
Validated Editions: Windows 7, Windows 7 SP1 Validated Editions: Windows 7, Windows 7 SP1
|Cryptographic Module|Version (link to Security Policy)|CMVP Certificate #| |Cryptographic Module|Version (link to Security Policy)|CMVP Certificate #|
|--- |--- |--- | |--- |--- |--- |
|BitLocker Drive Encryption|[6.1.7600.16385, 6.1.7600.16429, 6.1.7600.16757, 6.1.7600.20536, 6.1.7600.20873, 6.1.7600.20897, 6.1.7600.20916, 6.1.7601.17514, 6.1.7601.17556, 6.1.7601.21634, 6.1.7601.21655, and 6.1.7601.21675][sp-1332]|[1332][certificate-1332]| |BitLocker Drive Encryption|[6.1.7600.16385, 6.1.7600.16429, 6.1.7600.16757, 6.1.7600.20536, 6.1.7600.20873, 6.1.7600.20897, 6.1.7600.20916, 6.1.7601.17514, 6.1.7601.17556, 6.1.7601.21634, 6.1.7601.21655, and 6.1.7601.21675][sp-1332]|[1332][certificate-1332]|
@ -60,7 +57,6 @@ Validated Editions: Windows 7, Windows 7 SP1
## Windows Vista SP1 ## Windows Vista SP1
Validated Editions: Ultimate Edition Validated Editions: Ultimate Edition
|Cryptographic Module|Version (link to Security Policy)|CMVP Certificate #| |Cryptographic Module|Version (link to Security Policy)|CMVP Certificate #|
|--- |--- |--- | |--- |--- |--- |
|Boot Manager (bootmgr)|[6.0.6001.18000 and 6.0.6002.18005][sp-978]|[978][certificate-978]| |Boot Manager (bootmgr)|[6.0.6001.18000 and 6.0.6002.18005][sp-978]|[978][certificate-978]|
@ -74,7 +70,6 @@ Validated Editions: Ultimate Edition
## Windows Vista ## Windows Vista
Validated Editions: Ultimate Edition Validated Editions: Ultimate Edition
|Cryptographic Module|Version (link to Security Policy)|CMVP Certificate #| |Cryptographic Module|Version (link to Security Policy)|CMVP Certificate #|
|--- |--- |--- | |--- |--- |--- |
|BitLocker Drive Encryption|[6.0.6000.16386][sp-947]|[947][certificate-947]| |BitLocker Drive Encryption|[6.0.6000.16386][sp-947]|[947][certificate-947]|

2
windows/security/security-foundations/certification/validations/fips-140-windows-server-2016.md
View File

@ -15,7 +15,6 @@ The following tables list the completed FIPS 140 validations of cryptographic mo
## Windows Server 2016, build 10.0.14393.1770 ## Windows Server 2016, build 10.0.14393.1770
Validated Editions: Standard, Datacenter, Storage Server Validated Editions: Standard, Datacenter, Storage Server
|Cryptographic Module (linked to Security Policy document)|CMVP Certificate #|Validated Algorithms| |Cryptographic Module (linked to Security Policy document)|CMVP Certificate #|Validated Algorithms|
|--- |--- |--- | |--- |--- |--- |
|[BitLocker Windows OS Loader][sp-3502] (winload)|[#3502][certificate-3502]|FIPS Approved: AES, RSA, and SHS; Other Allowed: NDRNG| |[BitLocker Windows OS Loader][sp-3502] (winload)|[#3502][certificate-3502]|FIPS Approved: AES, RSA, and SHS; Other Allowed: NDRNG|
@ -27,7 +26,6 @@ Validated Editions: Standard, Datacenter, Storage Server
## Windows Server 2016, build 10.0.14393 ## Windows Server 2016, build 10.0.14393
Validated Editions: Standard, Datacenter, Storage Server Validated Editions: Standard, Datacenter, Storage Server
|Cryptographic Module (linked to Security Policy document)|CMVP Certificate #|Validated Algorithms| |Cryptographic Module (linked to Security Policy document)|CMVP Certificate #|Validated Algorithms|
|--- |--- |--- | |--- |--- |--- |
|[BitLocker Dump Filter][sp-2934] (dumpfve.sys)|[#2934][certificate-2934]|FIPS Approved: AES| |[BitLocker Dump Filter][sp-2934] (dumpfve.sys)|[#2934][certificate-2934]|FIPS Approved: AES|

4
windows/security/security-foundations/certification/validations/fips-140-windows-server-2019.md
View File

@ -15,7 +15,6 @@ The following tables list the completed FIPS 140 validations of cryptographic mo
## Windows Server 2019, builds 10.0.17763.10021 and 10.0.17763.10127 ## Windows Server 2019, builds 10.0.17763.10021 and 10.0.17763.10127
Validated Edition: Datacenter Core Validated Edition: Datacenter Core
|Cryptographic Module (linked to Security Policy document)|CMVP Certificate #|Validated Algorithms| |Cryptographic Module (linked to Security Policy document)|CMVP Certificate #|Validated Algorithms|
|--- |--- |--- | |--- |--- |--- |
|[BitLocker Dump Filter]|Pending [(in process)][in-process]|| |[BitLocker Dump Filter]|Pending [(in process)][in-process]||
@ -29,8 +28,7 @@ Validated Edition: Datacenter Core
## Windows Server 2019, build 10.0.17763.107 ## Windows Server 2019, build 10.0.17763.107
Validated Editions: Standard, Datacenter Validated Editions: Standard Core, Datacenter Core
|Cryptographic Module (linked to Security Policy document)|Version|CMVP Certificate #|Validated Algorithms| |Cryptographic Module (linked to Security Policy document)|Version|CMVP Certificate #|Validated Algorithms|
|--- |--- |--- |--- | |--- |--- |--- |--- |
|[BitLocker Dump Filter][sp-3092]|10.0.17763|[#3092][certificate-3092]|FIPS Approved: AES, RSA, and SHS| |[BitLocker Dump Filter][sp-3092]|10.0.17763|[#3092][certificate-3092]|FIPS Approved: AES, RSA, and SHS|

2
windows/security/security-foundations/certification/validations/fips-140-windows-server-previous.md
View File

@ -16,7 +16,6 @@ The following tables list the completed FIPS 140 validations of cryptographic mo
## Windows Server 2012 R2 ## Windows Server 2012 R2
Validated Editions: Server, Storage Server, StorSimple 8000 Series, Azure StorSimple Virtual Array Windows Server 2012 R2 Validated Editions: Server, Storage Server, StorSimple 8000 Series, Azure StorSimple Virtual Array Windows Server 2012 R2
|Cryptographic Module|Version (link to Security Policy)|CMVP Certificate #| |Cryptographic Module|Version (link to Security Policy)|CMVP Certificate #|
|--- |--- |--- | |--- |--- |--- |
|BitLocker Dump Filter (dumpfve.sys) <br>*Doesn't apply to Azure StorSimple Virtual Array Windows Server 2012 R2*|[6.3.9600 6.3.9600.17031][sp-2354]|[2354][certificate-2354]| |BitLocker Dump Filter (dumpfve.sys) <br>*Doesn't apply to Azure StorSimple Virtual Array Windows Server 2012 R2*|[6.3.9600 6.3.9600.17031][sp-2354]|[2354][certificate-2354]|
@ -30,7 +29,6 @@ Validated Editions: Server, Storage Server, StorSimple 8000 Series, Azure StorSi
## Windows Server 2012 ## Windows Server 2012
Validated Editions: Server, Storage Server Validated Editions: Server, Storage Server
|Cryptographic Module|Version (link to Security Policy)|CMVP Certificate #| |Cryptographic Module|Version (link to Security Policy)|CMVP Certificate #|
|--- |--- |--- | |--- |--- |--- |
|BitLocker Dump Filter (DUMPFVE.SYS)|[6.2.9200][sp-1899]|[1899][sp-1899]| |BitLocker Dump Filter (DUMPFVE.SYS)|[6.2.9200][sp-1899]|[1899][sp-1899]|

6
windows/security/security-foundations/certification/validations/fips-140-windows-server-semi-annual.md
View File

@ -16,7 +16,6 @@ The following tables list the completed FIPS 140 validations of cryptographic mo
## Windows Server, version 2004 (May 2020 Update), build 10.0.19041 ## Windows Server, version 2004 (May 2020 Update), build 10.0.19041
Validated Editions: Standard Core, Datacenter Core Validated Editions: Standard Core, Datacenter Core
|Cryptographic Module (linked to Security Policy document)|CMVP Certificate #|Validated Algorithms| |Cryptographic Module (linked to Security Policy document)|CMVP Certificate #|Validated Algorithms|
|--- |--- |--- | |--- |--- |--- |
|[BitLocker Dump Filter][sp-4538]|[#4538][certificate-4538]|FIPS Approved: AES, RSA, and SHS| |[BitLocker Dump Filter][sp-4538]|[#4538][certificate-4538]|FIPS Approved: AES, RSA, and SHS|
@ -31,7 +30,6 @@ Validated Editions: Standard Core, Datacenter Core
## Windows Server, version 1909 (November 2019 Update), build 10.0.18363 ## Windows Server, version 1909 (November 2019 Update), build 10.0.18363
Validated Editions: Standard Core, Datacenter Core Validated Editions: Standard Core, Datacenter Core
|Cryptographic Module (linked to Security Policy document)|CMVP Certificate #|Validated Algorithms| |Cryptographic Module (linked to Security Policy document)|CMVP Certificate #|Validated Algorithms|
|--- |--- |--- | |--- |--- |--- |
|[BitLocker Dump Filter][sp-4538]|[#4538][certificate-4538]|FIPS Approved: AES, RSA, and SHS| |[BitLocker Dump Filter][sp-4538]|[#4538][certificate-4538]|FIPS Approved: AES, RSA, and SHS|
@ -46,7 +44,6 @@ Validated Editions: Standard Core, Datacenter Core
## Windows Server, version 1903 (May 2019 Update), build 10.0.18362 ## Windows Server, version 1903 (May 2019 Update), build 10.0.18362
Validated Editions: Standard Core, Datacenter Core Validated Editions: Standard Core, Datacenter Core
|Cryptographic Module (linked to Security Policy document)|CMVP Certificate #|Validated Algorithms| |Cryptographic Module (linked to Security Policy document)|CMVP Certificate #|Validated Algorithms|
|--- |--- |--- | |--- |--- |--- |
|[BitLocker Dump Filter][sp-4538]|[#4538][certificate-4538]|FIPS Approved: AES, RSA, and SHS| |[BitLocker Dump Filter][sp-4538]|[#4538][certificate-4538]|FIPS Approved: AES, RSA, and SHS|
@ -63,7 +60,6 @@ Validated Editions: Standard Core, Datacenter Core
*Note: this release of Windows Server is also known as Windows Server 2019, build 10.0.17763.* *Note: this release of Windows Server is also known as Windows Server 2019, build 10.0.17763.*
Validated Editions: Standard Core, Datacenter Core Validated Editions: Standard Core, Datacenter Core
|Cryptographic Module (linked to Security Policy document)|CMVP Certificate #|Validated Algorithms| |Cryptographic Module (linked to Security Policy document)|CMVP Certificate #|Validated Algorithms|
|--- |--- |--- | |--- |--- |--- |
|[BitLocker Dump Filter][sp-3092]|[#3092][certificate-3092]|FIPS Approved: AES, RSA, and SHS| |[BitLocker Dump Filter][sp-3092]|[#3092][certificate-3092]|FIPS Approved: AES, RSA, and SHS|
@ -78,7 +74,6 @@ Validated Editions: Standard Core, Datacenter Core
## Windows Server, version 1803, build 10.0.17134 ## Windows Server, version 1803, build 10.0.17134
Validated Editions: Standard Core, Datacenter Core Validated Editions: Standard Core, Datacenter Core
|Cryptographic Module (linked to Security Policy document)|CMVP Certificate #|Validated Algorithms| |Cryptographic Module (linked to Security Policy document)|CMVP Certificate #|Validated Algorithms|
|--- |--- |--- | |--- |--- |--- |
|[BitLocker Dump Filter][sp-3092]|[#3092][certificate-3092]|FIPS Approved: AES, RSA, and SHS| |[BitLocker Dump Filter][sp-3092]|[#3092][certificate-3092]|FIPS Approved: AES, RSA, and SHS|
@ -92,7 +87,6 @@ Validated Editions: Standard Core, Datacenter Core
## Windows Server, version 1709, build 10.0.16299 ## Windows Server, version 1709, build 10.0.16299
Validated Editions: Standard Core, Datacenter Core Validated Editions: Standard Core, Datacenter Core
|Cryptographic Module (linked to Security Policy document)|CMVP Certificate #|Validated Algorithms| |Cryptographic Module (linked to Security Policy document)|CMVP Certificate #|Validated Algorithms|
|--- |--- |--- | |--- |--- |--- |
|[BitLocker Dump Filter][sp-3092]|[#3092][certificate-3092]|FIPS Approved: AES, RSA, and SHS| |[BitLocker Dump Filter][sp-3092]|[#3092][certificate-3092]|FIPS Approved: AES, RSA, and SHS|

13
windows/security/security-foundations/certification/validations/fips-140-windows10.md
View File

@ -16,7 +16,6 @@ The following tables list the completed FIPS 140 validations of cryptographic mo
## Windows 10, version 2004 (May 2020 Update), build 10.0.19041 ## Windows 10, version 2004 (May 2020 Update), build 10.0.19041
Validated Editions: Home, Pro, Enterprise, Education Validated Editions: Home, Pro, Enterprise, Education
|Cryptographic Module (linked to Security Policy document)|CMVP Certificate #|Validated Algorithms| |Cryptographic Module (linked to Security Policy document)|CMVP Certificate #|Validated Algorithms|
|--- |--- |--- | |--- |--- |--- |
|[BitLocker Dump Filter][sp-4538]|[#4538][certificate-4538]|FIPS Approved: AES, RSA, and SHS| |[BitLocker Dump Filter][sp-4538]|[#4538][certificate-4538]|FIPS Approved: AES, RSA, and SHS|
@ -33,7 +32,6 @@ Validated Editions: Home, Pro, Enterprise, Education
## Windows 10, version 1909 (November 2019 Update), build 10.0.18363 ## Windows 10, version 1909 (November 2019 Update), build 10.0.18363
Validated Editions: Home, Pro, Enterprise, Education Validated Editions: Home, Pro, Enterprise, Education
|Cryptographic Module (linked to Security Policy document)|CMVP Certificate #|Validated Algorithms| |Cryptographic Module (linked to Security Policy document)|CMVP Certificate #|Validated Algorithms|
|--- |--- |--- | |--- |--- |--- |
|[BitLocker Dump Filter][sp-4538]|[#4538][certificate-4538]|FIPS Approved: AES, RSA, and SHS| |[BitLocker Dump Filter][sp-4538]|[#4538][certificate-4538]|FIPS Approved: AES, RSA, and SHS|
@ -50,7 +48,6 @@ Validated Editions: Home, Pro, Enterprise, Education
## Windows 10, version 1903 (May 2019 Update), build 10.0.18362 ## Windows 10, version 1903 (May 2019 Update), build 10.0.18362
Validated Editions: Home, Pro, Enterprise, Education Validated Editions: Home, Pro, Enterprise, Education
|Cryptographic Module (linked to Security Policy document)|CMVP Certificate #|Validated Algorithms| |Cryptographic Module (linked to Security Policy document)|CMVP Certificate #|Validated Algorithms|
|--- |--- |--- | |--- |--- |--- |
|[BitLocker Dump Filter][sp-4538]|[#4538][certificate-4538]|FIPS Approved: AES, RSA, and SHS| |[BitLocker Dump Filter][sp-4538]|[#4538][certificate-4538]|FIPS Approved: AES, RSA, and SHS|
@ -66,7 +63,6 @@ Validated Editions: Home, Pro, Enterprise, Education
## Windows 10, version 1809 (October 2018 Update), build 10.0.17763 ## Windows 10, version 1809 (October 2018 Update), build 10.0.17763
Validated Editions: Home, Pro, Enterprise, Education Validated Editions: Home, Pro, Enterprise, Education
|Cryptographic Module (linked to Security Policy document)|CMVP Certificate #|Validated Algorithms| |Cryptographic Module (linked to Security Policy document)|CMVP Certificate #|Validated Algorithms|
|--- |--- |--- | |--- |--- |--- |
|[BitLocker Dump Filter][sp-3092]|[#3092][certificate-3092]|FIPS Approved: AES, RSA, and SHS| |[BitLocker Dump Filter][sp-3092]|[#3092][certificate-3092]|FIPS Approved: AES, RSA, and SHS|
@ -81,7 +77,6 @@ Validated Editions: Home, Pro, Enterprise, Education
## Windows 10, version 1803 (April 2018 Update), build 10.0.17134 ## Windows 10, version 1803 (April 2018 Update), build 10.0.17134
Validated Editions: Home, Pro, Enterprise, Education Validated Editions: Home, Pro, Enterprise, Education
|Cryptographic Module (linked to Security Policy document)|CMVP Certificate #|Validated Algorithms| |Cryptographic Module (linked to Security Policy document)|CMVP Certificate #|Validated Algorithms|
|--- |--- |--- | |--- |--- |--- |
|[BitLocker Dump Filter][sp-3092]|[#3092][certificate-3092]|FIPS Approved: AES, RSA, and SHS| |[BitLocker Dump Filter][sp-3092]|[#3092][certificate-3092]|FIPS Approved: AES, RSA, and SHS|
@ -95,7 +90,6 @@ Validated Editions: Home, Pro, Enterprise, Education
## Windows 10, version 1709 (Fall Creators Update), build 10.0.16299 ## Windows 10, version 1709 (Fall Creators Update), build 10.0.16299
Validated Editions: Home, Pro, Enterprise, Education, S, Surface Hub, Mobile Validated Editions: Home, Pro, Enterprise, Education, S, Surface Hub, Mobile
|Cryptographic Module (linked to Security Policy document)|CMVP Certificate #|Validated Algorithms| |Cryptographic Module (linked to Security Policy document)|CMVP Certificate #|Validated Algorithms|
|--- |--- |--- | |--- |--- |--- |
|[BitLocker Dump Filter][sp-3092]|[#3092][certificate-3092]|FIPS Approved: AES, RSA, and SHS| |[BitLocker Dump Filter][sp-3092]|[#3092][certificate-3092]|FIPS Approved: AES, RSA, and SHS|
@ -110,7 +104,6 @@ Validated Editions: Home, Pro, Enterprise, Education, S, Surface Hub, Mobile
## Windows 10, version 1703 (Creators Update), build 10.0.15063 ## Windows 10, version 1703 (Creators Update), build 10.0.15063
Validated Editions: Home, Pro, Enterprise, Education, S, Surface Hub, Mobile Validated Editions: Home, Pro, Enterprise, Education, S, Surface Hub, Mobile
|Cryptographic Module (linked to Security Policy document)|CMVP Certificate #|Validated Algorithms| |Cryptographic Module (linked to Security Policy document)|CMVP Certificate #|Validated Algorithms|
|--- |--- |--- | |--- |--- |--- |
|[BitLocker Dump Filter][sp-3092] <br>*Applies only to Pro, Enterprise, Education, S, Mobile, and Surface Hub Editions.*|[#3092][certificate-3092]|FIPS Approved: AES, RSA, and SHS| |[BitLocker Dump Filter][sp-3092] <br>*Applies only to Pro, Enterprise, Education, S, Mobile, and Surface Hub Editions.*|[#3092][certificate-3092]|FIPS Approved: AES, RSA, and SHS|
@ -125,7 +118,6 @@ Validated Editions: Home, Pro, Enterprise, Education, S, Surface Hub, Mobile
## Windows 10, version 1607 (Anniversary Update), build 10.0.14393.1770 ## Windows 10, version 1607 (Anniversary Update), build 10.0.14393.1770
Validated Editions: Windows 10 (Home/Consumer), Pro, Enterprise, Enterprise LTSB, Mobile Validated Editions: Windows 10 (Home/Consumer), Pro, Enterprise, Enterprise LTSB, Mobile
|Cryptographic Module (linked to Security Policy document)|CMVP Certificate #|Validated Algorithms| |Cryptographic Module (linked to Security Policy document)|CMVP Certificate #|Validated Algorithms|
|--- |--- |--- | |--- |--- |--- |
|[BitLocker Windows OS Loader][sp-3502] (winload)|[#3502][certificate-3502]|FIPS Approved: AES, RSA, and SHS; Other Allowed: NDRNG| |[BitLocker Windows OS Loader][sp-3502] (winload)|[#3502][certificate-3502]|FIPS Approved: AES, RSA, and SHS; Other Allowed: NDRNG|
@ -137,7 +129,6 @@ Validated Editions: Windows 10 (Home/Consumer), Pro, Enterprise, Enterprise LTSB
## Windows 10, version 1607 (Anniversary Update), build 10.0.14393 ## Windows 10, version 1607 (Anniversary Update), build 10.0.14393
Validated Editions: Windows 10 (Home/Consumer), Pro, Enterprise, Enterprise LTSB, Mobile Validated Editions: Windows 10 (Home/Consumer), Pro, Enterprise, Enterprise LTSB, Mobile
|Cryptographic Module (linked to Security Policy document)|CMVP Certificate #|Validated Algorithms| |Cryptographic Module (linked to Security Policy document)|CMVP Certificate #|Validated Algorithms|
|--- |--- |--- | |--- |--- |--- |
|[BitLocker Dump Filter][sp-2934] (dumpfve.sys) <br>*Applies only to Pro, Enterprise, Enterprise LTSB, and Mobile Editions.*|[#2934][certificate-2934]|FIPS Approved: AES| |[BitLocker Dump Filter][sp-2934] (dumpfve.sys) <br>*Applies only to Pro, Enterprise, Enterprise LTSB, and Mobile Editions.*|[#2934][certificate-2934]|FIPS Approved: AES|
@ -152,7 +143,6 @@ Validated Editions: Windows 10 (Home/Consumer), Pro, Enterprise, Enterprise LTSB
## Windows 10, version 1511 (November Update), build 10.0.10586.1176 ## Windows 10, version 1511 (November Update), build 10.0.10586.1176
Validated Editions: Home, Pro, Enterprise, Enterprise LTSB, Mobile, Surface Hub Validated Editions: Home, Pro, Enterprise, Enterprise LTSB, Mobile, Surface Hub
|Cryptographic Module (linked to Security Policy document)|CMVP Certificate #|Validated Algorithms| |Cryptographic Module (linked to Security Policy document)|CMVP Certificate #|Validated Algorithms|
|--- |--- |--- | |--- |--- |--- |
|[BitLocker Windows OS Loader][sp-3451] (winload)|[#3451][certificate-3451]|FIPS Approved: AES, RSA, and SHS| |[BitLocker Windows OS Loader][sp-3451] (winload)|[#3451][certificate-3451]|FIPS Approved: AES, RSA, and SHS|
@ -163,7 +153,6 @@ Validated Editions: Home, Pro, Enterprise, Enterprise LTSB, Mobile, Surface Hub
## Windows 10, version 1511 (November Update), build 10.0.10586 ## Windows 10, version 1511 (November Update), build 10.0.10586
Validated Editions: Home, Pro, Enterprise, Enterprise LTSB, Mobile, Surface Hub Validated Editions: Home, Pro, Enterprise, Enterprise LTSB, Mobile, Surface Hub
|Cryptographic Module (linked to Security Policy document)|CMVP Certificate #|Validated Algorithms| |Cryptographic Module (linked to Security Policy document)|CMVP Certificate #|Validated Algorithms|
|--- |--- |--- | |--- |--- |--- |
|[BitLocker Dump Filter][sp-2703] (dumpfve.sys) <br>*Applies only to Pro, Enterprise, Mobile, and Surface Hub Editions.*|[#2703][certificate-2703]|FIPS Approved: AES| |[BitLocker Dump Filter][sp-2703] (dumpfve.sys) <br>*Applies only to Pro, Enterprise, Mobile, and Surface Hub Editions.*|[#2703][certificate-2703]|FIPS Approved: AES|
@ -178,7 +167,6 @@ Validated Editions: Home, Pro, Enterprise, Enterprise LTSB, Mobile, Surface Hub
## Windows 10, version 1507, build 10.0.10240.17643 ## Windows 10, version 1507, build 10.0.10240.17643
Validated Editions: Enterprise LTSB Validated Editions: Enterprise LTSB
|Cryptographic Module (linked to Security Policy document)|CMVP Certificate #|Validated Algorithms| |Cryptographic Module (linked to Security Policy document)|CMVP Certificate #|Validated Algorithms|
|--- |--- |--- | |--- |--- |--- |
|[BitLocker Windows OS Loader][sp-3427] (winload)|[#3427][certificate-3427]|FIPS Approved: AES, RSA, and SHS; Other Allowed: NDRNG| |[BitLocker Windows OS Loader][sp-3427] (winload)|[#3427][certificate-3427]|FIPS Approved: AES, RSA, and SHS; Other Allowed: NDRNG|
@ -189,7 +177,6 @@ Validated Editions: Enterprise LTSB
## Windows 10, version 1507, build 10.0.10240 ## Windows 10, version 1507, build 10.0.10240
Validated Editions: Home, Pro, Enterprise, Enterprise LTSB, Mobile, and Surface Hub Validated Editions: Home, Pro, Enterprise, Enterprise LTSB, Mobile, and Surface Hub
|Cryptographic Module (linked to Security Policy document)|CMVP Certificate #|Validated Algorithms| |Cryptographic Module (linked to Security Policy document)|CMVP Certificate #|Validated Algorithms|
|--- |--- |--- | |--- |--- |--- |
|[BitLocker Dump Filter][sp-2603] (dumpfve.sys) <br>*Applies only to Pro, Enterprise, and Enterprise LTSB Editions.*|[#2603][certificate-2603]|FIPS Approved: AES| |[BitLocker Dump Filter][sp-2603] (dumpfve.sys) <br>*Applies only to Pro, Enterprise, and Enterprise LTSB Editions.*|[#2603][certificate-2603]|FIPS Approved: AES|

1
windows/security/security-foundations/certification/validations/fips-140-windows11.md
View File

@ -16,7 +16,6 @@ The following tables list the completed FIPS 140 validations of cryptographic mo
## Windows 11, version 21H2, build 10.0.22000 ## Windows 11, version 21H2, build 10.0.22000
Validated Edition: Windows 11 Validated Edition: Windows 11
|Cryptographic Module (linked to Security Policy document)|CMVP Certificate #|Validated Algorithms| |Cryptographic Module (linked to Security Policy document)|CMVP Certificate #|Validated Algorithms|
|--- |--- |--- | |--- |--- |--- |
|[Boot Manager][sp-4546]|[#3089][certificate-4546]|FIPS Approved: AES, CKG, HMAC, PBKDF, RSA, and SHS| |[Boot Manager][sp-4546]|[#3089][certificate-4546]|FIPS Approved: AES, CKG, HMAC, PBKDF, RSA, and SHS|