BitLocker® Windows OS Loader (winload) in Microsoft Windows 10, Windows 10 Pro, Windows 10 Enterprise, Windows 10 Mobile, Windows 10 for Surface Hub
BitLocker® Windows OS Loader (winload) in Microsoft Windows 10, Windows 10 Pro, Windows 10 Enterprise, Windows 10 Mobile, Windows 10 for Surface Hub, from Microsoft Corporation, holds FIPS 140-2 certificate #2701 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: When operated in FIPS mode with module Boot Manager in Microsoft Windows 10, Windows 10 Pro, Windows 10 Enterprise, Windows 10 Mobile, Windows 10 for Surface Hub validated to FIPS 140-2 under Cert. #2700 operating in FIPS mode
Certificate
| Certificate number | 2701 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | Microsoft Corporation · website |
| Software versions | 10.0.10586 |
Module description
Quoted from the NIST CMVP entry for this certificate.
The BitLocker® Windows OS Loader loads the boot-critical driver and OS kernel image files.
Security level exceptions
- Physical Security: N/A
- Design Assurance: Level 2
Approved algorithms (3)
Other algorithms
MD5; NDRNG
Tested configurations
- Windows 10 (x64) running on a Dell XPS 8700 with PAA
- Windows 10 (x64) running on a HP Compaq Pro 6305 with PAA
- Windows 10 (x86) running on a Dell Inspiron 660s without PAA
- Windows 10 Enterprise (x64) running on a HP Compaq Pro 6305 with PAA
- Windows 10 Enterprise (x64) running on a Microsoft Surface 3 with PAA
- Windows 10 Enterprise (x64) running on a Microsoft Surface Book with PAA
- Windows 10 Enterprise (x64) running on a Microsoft Surface Pro 2 with PAA
- Windows 10 Enterprise (x64) running on a Microsoft Surface Pro 3 with PAA
- Windows 10 Enterprise (x64) running on a Microsoft Surface Pro 4 with PAA
- Windows 10 Enterprise (x64) running on a Microsoft Surface Pro with PAA
- Windows 10 Enterprise (x86) running on a Dell Inspiron 660s without PAA
- Windows 10 for Surface Hub (x64) running on a Microsoft Surface Hub 55" with PAA (single-user mode)
- Windows 10 for Surface Hub (x64) running on a Microsoft Surface Hub 84" with PAA
- Windows 10 Mobile (ARMv7) running on a Microsoft Lumia 635
- Windows 10 Mobile (ARMv7) running on a Microsoft Lumia 950
- Windows 10 Pro (x64) running on a HP Compaq Pro 6305 with PAA
- Windows 10 Pro (x64) running on a Microsoft Surface Book with PAA
- Windows 10 Pro (x64) running on a Microsoft Surface Pro 2 with PAA
- Windows 10 Pro (x64) running on a Microsoft Surface Pro 3 with PAA
- Windows 10 Pro (x64) running on a Microsoft Surface Pro 4 with PAA
- Windows 10 Pro (x64) running on a Microsoft Surface Pro with PAA
- Windows 10 Pro (x86) running on a Dell Inspiron 660s without PAA
Validation history
| Date | Type | Lab |
|---|---|---|
| 2016-08-26 | Initial | Leidos Accredited Testing & Evaluation (AT&E) Lab |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2016-08-26