808bits

Boot Manager in Microsoft Windows 8.1 Enterprise, Windows Server 2012 R2, Windows Storage Server 2012 R2, Surface Pro 3, Surface Pro 2, Surface Pro, Surface 2, Surface, Windows RT 8.1, Windows Phone 8.1, Windows Embedded 8.1 Industry Enterprise, StorSimple 8000 Series, Azure StorSimple Virtual Array Windows Server 2012 R2

FIPS 140-2 certificate #2351 · Microsoft Corporation · data as of 2026-08-28
Historical. Moved to historical list due to sunsetting. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode

Certificate

Certificate number2351
StandardFIPS 140-2
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-chip standalone
VendorMicrosoft Corporation · website
Software versions6.3.9600 and 6.3.9600.17031

Module description

The Windows system boot manager is called by the bootstrapping code that resides in the boot sector. It checks its own integrity, checks the integrity of the Windows OS Loader, and then launches it.

Security level exceptions

  • Physical Security: N/A
  • Design Assurance: Level 2

Approved algorithms

AlgorithmCAVP certificate
AES2832
HMAC1773
PBKDFvendor affirmed
RSA1494
SHS2373, 2396

Other algorithms

MD5; KDF (non-compliant); PBKDF (non-compliant)

Tested configurations

  • Azure StorSimple Virtual Array Windows Server 2012 R2 on Hyper-V 6.3 on Windows Server 2012 R2 (x64) running on a Dell Precision Tower 5810 with PAA
  • Azure StorSimple Virtual Array Windows Server 2012 R2 on VMware Workstation 12.5 on Windows Server 2012 R2 (x64) running on a Dell XPS 8700 with PAA (single-user mode)
  • Microsoft Server 2012 R2 (x64) running on a Microsoft StorSimple 8100 with PAA
  • Microsoft Server 2012 R2 (x64) running on a Microsoft StorSimple 8100 without PAA
  • Microsoft Windows 8.1 Enterprise (x64) running on a Dell Dimension E521 without PAA
  • Microsoft Windows 8.1 Enterprise (x64) running on a Dell Inspiron 660s without PAA and with PCLMULQDQ and SSSE 3
  • Microsoft Windows 8.1 Enterprise (x64) running on a Dell PowerEdge SC440 without PAA
  • Microsoft Windows 8.1 Enterprise (x64) running on a Microsoft Surface Pro 2 with PAA and with PCLMULQDQ and SSSE 3
  • Microsoft Windows 8.1 Enterprise (x64) running on an HP Compaq Pro 6305 with PAA
  • Microsoft Windows 8.1 Enterprise (x64) running on an HP Compaq Pro 6305 with PAA and with PCLMULQDQ and SSSE 3
  • Microsoft Windows 8.1 Enterprise (x64) running on an Intel Maho Bay with PAA
  • Microsoft Windows 8.1 Enterprise (x86) running on a Dell Dimension E521 without PAA
  • Microsoft Windows 8.1 Enterprise (x86) running on a Dell PowerEdge SC440 without PAA
  • Microsoft Windows 8.1 Enterprise (x86) running on an HP Compaq Pro 6305 with PAA
  • Microsoft Windows 8.1 Enterprise (x86) running on an Intel Maho Bay with PAA
  • Microsoft Windows 8.1 Pro (x64) running on an Intel i5 with PAA running on a Microsoft Surface Pro 2
  • Microsoft Windows 8.1 Pro (x64) running on an Intel i7 with PAA and PCLMULQDQ and SSSE 3 running on a Microsoft Surface Pro 3
  • Microsoft Windows 8.1 Pro (x64) running on an Intel x64 Processor with PAA running on a Microsoft Surface Pro
  • Microsoft Windows Embedded 8.1 Industry Enterprise (x64) running on a Dell Dimension E521 without PAA
  • Microsoft Windows Embedded 8.1 Industry Enterprise (x64) running on a Dell Inspiron 660s without PAA and with PCLMULQDQ and SSSE 3
  • Microsoft Windows Embedded 8.1 Industry Enterprise (x64) running on a Dell PowerEdge SC440 without PAA
  • Microsoft Windows Embedded 8.1 Industry Enterprise (x64) running on an HP Compaq Pro 6305 with PAA
  • Microsoft Windows Embedded 8.1 Industry Enterprise (x64) running on an HP Compaq Pro 6305 with PAA and with PCLMULQDQ and SSSE 3
  • Microsoft Windows Embedded 8.1 Industry Enterprise (x64) running on an Intel Maho Bay with PAA
  • Microsoft Windows Embedded 8.1 Industry Enterprise (x64) running on an Intel Maho Bay with PAA and with PCLMULQDQ and SSSE 3
  • Microsoft Windows Embedded 8.1 Industry Enterprise (x86) running on a Dell Dimension E521 without PAA
  • Microsoft Windows Embedded 8.1 Industry Enterprise (x86) running on a Dell PowerEdge SC440 without PAA
  • Microsoft Windows Embedded 8.1 Industry Enterprise (x86) running on an HP Compaq Pro 6305 with PAA
  • Microsoft Windows Embedded 8.1 Industry Enterprise (x86) running on an Intel Maho Bay with PAA
  • Microsoft Windows Phone 8.1 (ARMv7 Thumb-2) running on a Qualcomm Snapdragon 400 running on a Windows Phone 8.1
  • Microsoft Windows Phone 8.1 (ARMv7 Thumb-2) running on a Qualcomm Snapdragon 800 running on a Windows Phone 8.1
  • Microsoft Windows Phone 8.1 (ARMv7 Thumb-2) running on a Qualcomm Snapdragon S4 running on a Windows Phone 8.1
  • Microsoft Windows RT 8.1 (ARMv7 Thumb-2) running on a Microsoft Surface 2
  • Microsoft Windows RT 8.1 (ARMv7 Thumb-2) running on a Microsoft Surface RT
  • Microsoft Windows RT 8.1 (ARMv7 Thumb-2) running on a Qualcomm Tablet
  • Microsoft Windows RT 8.1 (ARMv7 Thumb-2) running on an NVIDIA Tegra 3 Tablet
  • Microsoft Windows Server 2012 R2 (x64) running on a Dell Dimension E521 without PAA
  • Microsoft Windows Server 2012 R2 (x64) running on a Dell Inspiron 660s without PAA and with PCLMULQDQ and SSSE 3
  • Microsoft Windows Server 2012 R2 (x64) running on a Dell PowerEdge SC440 without PAA
  • Microsoft Windows Server 2012 R2 (x64) running on an HP Compaq Pro 6305 with PAA
  • Microsoft Windows Server 2012 R2 (x64) running on an HP Compaq Pro 6305 with PAA and with PCLMULQDQ and SSSE 3
  • Microsoft Windows Server 2012 R2 (x64) running on an Intel Maho Bay with PAA
  • Microsoft Windows Server 2012 R2 (x64) running on an Intel Maho Bay with PAA and with PCLMULQDQ and SSSE 3
  • Microsoft Windows Storage Server 2012 R2 (x64) running on a Dell Dimension E521 without PAA
  • Microsoft Windows Storage Server 2012 R2 (x64) running on a Dell Inspiron 660s without PAA and with PCLMULQDQ and SSSE 3
  • Microsoft Windows Storage Server 2012 R2 (x64) running on a Dell PowerEdge SC440 without PAA
  • Microsoft Windows Storage Server 2012 R2 (x64) running on an HP Compaq Pro 6305 with PAA
  • Microsoft Windows Storage Server 2012 R2 (x64) running on an HP Compaq Pro 6305 with PAA and with PCLMULQDQ and SSSE 3
  • Microsoft Windows Storage Server 2012 R2 (x64) running on an Intel Maho Bay with PAA
  • Microsoft Windows Storage Server 2012 R2 (x64) running on an Intel Maho Bay with PAA and with PCLMULQDQ and SSSE 3

Validation history

DateTypeLab
2015-03-12InitialLeidos Accredited Testing & Evaluation (AT&E) Lab
2015-04-10UpdateLeidos Accredited Testing & Evaluation (AT&E) Lab
2017-05-02UpdateLeidos Accredited Testing & Evaluation (AT&E) Lab

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2015-03-12, 2015-04-10, 2017-05-02

Source documents