BitLocker® Dump Filter (dumpfve.sys) in Microsoft Windows 10 Pro, Windows 10 Enterprise, Windows 10 Enterprise LTSB
Caveat: When operated in FIPS mode with the module Code Integrity (ci.dll) in Microsoft Windows 10, Windows 10 Pro, Windows 10 Enterprise, Windows 10 Enterprise LTSB under Cert. #2604 operating in FIPS mode
Certificate
| Certificate number | 2603 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | Microsoft Corporation · website |
| Software versions | 10.0.10240 |
Module description
The BitLocker® Dump Filter (dumpfve.sys) is the full volume encryption filter that resides in the system dump stack. Whenever the dump stack is called (in the event of a system crash or for hibernation), this filter ensures that all data is encrypted before it gets written to the disk as a dump file or hibernation file.
Security level exceptions
- Physical Security: N/A
- Design Assurance: Level 2
Approved algorithms
Tested configurations
- Windows 10 Enterprise (x64) running on a HP Compaq Pro 6305 with PAA
- Windows 10 Enterprise (x64) running on a Microsoft Surface 3 with PAA
- Windows 10 Enterprise (x64) running on a Microsoft Surface Pro 2 with PAA
- Windows 10 Enterprise (x64) running on a Microsoft Surface Pro 3 with PAA
- Windows 10 Enterprise (x64) running on a Microsoft Surface Pro with PAA
- Windows 10 Enterprise (x86) running on a Dell Inspiron 660s without PAA
- Windows 10 Enterprise LTSB (x64) running on a Dell XPS 8700 with PAA (single-user mode)
- Windows 10 Enterprise LTSB (x64) running on a HP Compaq Pro 6305 with PAA
- Windows 10 Enterprise LTSB (x86) running on a Dell Inspiron without PAA
- Windows 10 Pro (x64) running on a HP Compaq Pro 6305 with PAA
- Windows 10 Pro (x64) running on a Microsoft Surface Pro 2 with PAA
- Windows 10 Pro (x64) running on a Microsoft Surface Pro 3 with PAA
- Windows 10 Pro (x64) running on a Microsoft Surface Pro with PAA
- Windows 10 Pro (x86) running on a Dell Inspiron 660s without PAA
Validation history
| Date | Type | Lab |
|---|---|---|
| 2016-06-02 | Initial | Leidos Accredited Testing & Evaluation (AT&E) Lab |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2016-06-02