Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

    Projects Cryptographic Module Validation Program Validated Modules Search

Cryptographic Module Validation Program CMVP

Certificate #5405

Details

Module Name
Windows OS Loader
Standard
FIPS 140-3
Status
Active
Sunset Date
8/30/2031
Overall Level
1
Caveat
When installed, initialized and configured as specified in Section 11.1 of the Security Policy. When operated in approved mode with module Boot Manager validated to FIPS 140-3 under Cert. #5404 operating in approved mode. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs. No assurance of FIPS 140-3 requirements met for the components of the RBG construct that are external to the module boundary (e.g., DRBG, ESV) except for SP 800-90C compliance and security strength of the provided random bits
Security Level Exceptions
  • Non-invasive security: N/A
Module Type
Software-hybrid
Embodiment
MultiChipStand
Description
The Windows OS Loader (the "module") is the component that loads the operating system kernel (ntoskrnl.exe) and other boot stage binary image files. The module is a part of BitLocker Drive Encryption, which is a data protection feature of the Windows operating system that encrypts data on a storage volume.
Approved Algorithms
AES-CBC
A4008
AES-CBC
A4009
AES-CCM
A4008
AES-CCM
A4009
AES-GCM
A4008
AES-GCM
A4009
AES-XTS Testing Revision 2.0
A4008
AES-XTS Testing Revision 2.0
A4009
Counter DRBG
A4008
Counter DRBG
A4009
RSA SigVer (FIPS186-4)
A3767
RSA SigVer (FIPS186-4)
A3768
SHA-1
A4008
SHA-1
A4009
SHA2-256
A4008
SHA2-256
A4009
SHA2-384
A4008
SHA2-384
A4009
SHA2-512
A4008
SHA2-512
A4009

Vendor

Microsoft Corporation
One Microsoft Way
Redmond, WA 98052-6399
USA

Mike Grimm
[email protected]
Phone: 800-642-767638

Related Files

Security Policy
Consolidated Certificate

Validation History

Date Type Lab
8/31/2026 Initial Leidos Accredited Testing & Evaluation (AT&E) Lab