Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

    Projects Cryptographic Module Validation Program Validated Modules Search

Cryptographic Module Validation Program CMVP

Certificate #5406

Details

Module Name
Code Integrity
Standard
FIPS 140-3
Status
Active
Sunset Date
8/19/2031
Overall Level
1
Caveat
When installed, initialized and configured as specified in Section 11.1 of the Security Policy. When operated in approved mode with module Windows OS Loader validated to FIPS 140-3 under Cert. #5405 operating in approved mode. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs
Security Level Exceptions
  • Physical security: N/A
  • Non-invasive security: N/A
Module Type
Software
Embodiment
MultiChipStand
Description
The Code Integrity module is a multi-chip standalone software cryptographic module that verifies the integrity of Windows executable files as they are loaded into memory from storage.
Approved Algorithms
RSA SigVer (FIPS186-4)
A3767
RSA SigVer (FIPS186-4)
A3768
RSA SigVer (FIPS186-4)
A4008
RSA SigVer (FIPS186-4)
A4009
SHA-1
A4008
SHA-1
A4009
SHA2-256
A4008
SHA2-256
A4009
SHA2-384
A4008
SHA2-384
A4009
SHA2-512
A4008
SHA2-512
A4009

Vendor

Microsoft Corporation
One Microsoft Way
Redmond, WA 98052-6399
USA

Mike Grimm
[email protected]
Phone: 800-642-767638

Related Files

Security Policy
Consolidated Certificate

Validation History

Date Type Lab
8/20/2026 Initial Leidos Accredited Testing & Evaluation (AT&E) Lab
9/17/2026 Update Leidos Accredited Testing & Evaluation (AT&E) Lab