Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Cryptographic Module Validation Program CMVP

Certificate #5485

Details

Module Name
Microsoft HSM Cryptographic Module
Standard
FIPS 140-3
Status
Active
Sunset Date
8/13/2031
Overall Level
3
Caveat
When operated in approved mode. No assurance of minimum security of SSPs (e.g. keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.
Security Level Exceptions
  • Operational environment: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A
Module Type
Hardware
Embodiment
SingleChip
Description
Microsoft HSM Cryptographic Module is a hardware module that provides cryptographic functionality.
Approved Algorithms
AES-CBC
AES-ECB
AES-ECB
AES-ECB
AES-GCM
AES-KWP
AES-KWP
AES-XTS Testing Revision 2.0
AES-XTS Testing Revision 2.0
ECDSA KeyGen (FIPS186-5)
ECDSA KeyGen (FIPS186-5)
ECDSA KeyGen (FIPS186-5)
ECDSA KeyGen (FIPS186-5)
ECDSA KeyGen (FIPS186-5)
ECDSA KeyGen (FIPS186-5)
ECDSA KeyGen (FIPS186-5)
ECDSA KeyGen (FIPS186-5)
ECDSA KeyGen (FIPS186-5)
ECDSA KeyGen (FIPS186-5)
ECDSA KeyGen (FIPS186-5)
ECDSA KeyGen (FIPS186-5)
ECDSA KeyGen (FIPS186-5)
ECDSA KeyGen (FIPS186-5)
ECDSA KeyGen (FIPS186-5)
ECDSA KeyGen (FIPS186-5)
ECDSA KeyGen (FIPS186-5)
ECDSA SigGen (FIPS186-5)
ECDSA SigGen (FIPS186-5)
ECDSA SigGen (FIPS186-5)
ECDSA SigGen (FIPS186-5)
ECDSA SigGen (FIPS186-5)
ECDSA SigGen (FIPS186-5)
ECDSA SigGen (FIPS186-5)
ECDSA SigGen (FIPS186-5)
ECDSA SigGen (FIPS186-5)
ECDSA SigGen (FIPS186-5)
ECDSA SigGen (FIPS186-5)
ECDSA SigGen (FIPS186-5)
ECDSA SigGen (FIPS186-5)
ECDSA SigGen (FIPS186-5)
ECDSA SigGen (FIPS186-5)
ECDSA SigGen (FIPS186-5)
ECDSA SigGen (FIPS186-5)
ECDSA SigGen (FIPS186-5)
ECDSA SigVer (FIPS186-5)
ECDSA SigVer (FIPS186-5)
ECDSA SigVer (FIPS186-5)
HMAC DRBG
HMAC-SHA2-256
HMAC-SHA2-256
HMAC-SHA2-256
HMAC-SHA2-384
HMAC-SHA2-384
HMAC-SHA2-384
HMAC-SHA2-512
HMAC-SHA2-512
HMAC-SHA2-512
KAS-ECC-SSC Sp800-56Ar3
KAS-ECC-SSC Sp800-56Ar3
KAS-ECC-SSC Sp800-56Ar3
KAS-ECC-SSC Sp800-56Ar3
KAS-ECC-SSC Sp800-56Ar3
KAS-ECC-SSC Sp800-56Ar3
KAS-ECC-SSC Sp800-56Ar3
KAS-ECC-SSC Sp800-56Ar3
KAS-ECC-SSC Sp800-56Ar3
KAS-ECC-SSC Sp800-56Ar3
KAS-ECC-SSC Sp800-56Ar3
KAS-ECC-SSC Sp800-56Ar3
KAS-ECC-SSC Sp800-56Ar3
KAS-ECC-SSC Sp800-56Ar3
KAS-ECC-SSC Sp800-56Ar3
KAS-ECC-SSC Sp800-56Ar3
KAS-ECC-SSC Sp800-56Ar3
KDA HKDF SP800-56Cr2
KDA HKDF SP800-56Cr2
KDF SP800-108
KDF SP800-108
KTS-IFC
KTS-IFC
KTS-IFC
KTS-IFC
KTS-IFC
KTS-IFC
KTS-IFC
KTS-IFC
KTS-IFC
KTS-IFC
KTS-IFC
KTS-IFC
KTS-IFC
KTS-IFC
KTS-IFC
KTS-IFC
RSA Decryption Primitive Sp800-56Br2
RSA Decryption Primitive Sp800-56Br2
RSA Decryption Primitive Sp800-56Br2
RSA Decryption Primitive Sp800-56Br2
RSA Decryption Primitive Sp800-56Br2
RSA Decryption Primitive Sp800-56Br2
RSA Decryption Primitive Sp800-56Br2
RSA Decryption Primitive Sp800-56Br2
RSA Decryption Primitive Sp800-56Br2
RSA Decryption Primitive Sp800-56Br2
RSA Decryption Primitive Sp800-56Br2
RSA Decryption Primitive Sp800-56Br2
RSA Decryption Primitive Sp800-56Br2
RSA Decryption Primitive Sp800-56Br2
RSA Decryption Primitive Sp800-56Br2
RSA Decryption Primitive Sp800-56Br2
RSA Decryption Primitive Sp800-56Br2
RSA Decryption Primitive Sp800-56Br2
RSA Decryption Primitive Sp800-56Br2
RSA Decryption Primitive Sp800-56Br2
RSA Decryption Primitive Sp800-56Br2
RSA Decryption Primitive Sp800-56Br2
RSA Decryption Primitive Sp800-56Br2
RSA Decryption Primitive Sp800-56Br2
RSA Decryption Primitive Sp800-56Br2
RSA Decryption Primitive Sp800-56Br2
RSA Decryption Primitive Sp800-56Br2
RSA Decryption Primitive Sp800-56Br2
RSA Decryption Primitive Sp800-56Br2
RSA Decryption Primitive Sp800-56Br2
RSA Decryption Primitive Sp800-56Br2
RSA Decryption Primitive Sp800-56Br2
RSA KeyGen (FIPS186-5)
RSA Signature Primitive
RSA Signature Primitive
RSA Signature Primitive
RSA Signature Primitive
RSA Signature Primitive
RSA Signature Primitive
RSA Signature Primitive
RSA Signature Primitive
RSA Signature Primitive
RSA Signature Primitive
RSA Signature Primitive
RSA Signature Primitive
RSA Signature Primitive
RSA Signature Primitive
RSA Signature Primitive
RSA Signature Primitive
RSA Signature Primitive
RSA Signature Primitive
RSA Signature Primitive
RSA Signature Primitive
RSA Signature Primitive
RSA Signature Primitive
RSA Signature Primitive
RSA Signature Primitive
RSA Signature Primitive
RSA Signature Primitive
RSA Signature Primitive
RSA Signature Primitive
RSA Signature Primitive
RSA Signature Primitive
RSA Signature Primitive
RSA Signature Primitive
SHA2-256
SHA2-256
SHA2-256
SHA2-384
SHA2-384
SHA2-384
SHA2-512
SHA2-512
SHA2-512

Vendor

Microsoft Corporation
One Microsoft Way
Redmond, WA 98052
USA

Christian Piccini
[email protected]
Phone: 8006427676

Validation History

Date Type Lab
8/14/2026 Initial atsec information security corporation