808bits

BitLocker® Windows OS Loader (winload) in Microsoft Windows 10, Windows 10 Pro, Windows 10 Enterprise, Windows 10 Mobile, Windows 10 for Surface Hub

FIPS 140-2 certificate #2701 · Microsoft Corporation · data as of 2026-08-28
Historical. Moved to historical list due to dependency on certificate #2700. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode with module Boot Manager in Microsoft Windows 10, Windows 10 Pro, Windows 10 Enterprise, Windows 10 Mobile, Windows 10 for Surface Hub validated to FIPS 140-2 under Cert. #2700 operating in FIPS mode

Certificate

Certificate number2701
StandardFIPS 140-2
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorMicrosoft Corporation · website
Software versions10.0.10586

Module description

The BitLocker® Windows OS Loader loads the boot-critical driver and OS kernel image files.

Security level exceptions

  • Physical Security: N/A
  • Design Assurance: Level 2

Approved algorithms

AlgorithmCAVP certificate
AES3629, 3653
RSA1871
SHS3048

Other algorithms

MD5; NDRNG

Tested configurations

  • Windows 10 (x64) running on a Dell XPS 8700 with PAA
  • Windows 10 (x64) running on a HP Compaq Pro 6305 with PAA
  • Windows 10 (x86) running on a Dell Inspiron 660s without PAA
  • Windows 10 Enterprise (x64) running on a HP Compaq Pro 6305 with PAA
  • Windows 10 Enterprise (x64) running on a Microsoft Surface 3 with PAA
  • Windows 10 Enterprise (x64) running on a Microsoft Surface Book with PAA
  • Windows 10 Enterprise (x64) running on a Microsoft Surface Pro 2 with PAA
  • Windows 10 Enterprise (x64) running on a Microsoft Surface Pro 3 with PAA
  • Windows 10 Enterprise (x64) running on a Microsoft Surface Pro 4 with PAA
  • Windows 10 Enterprise (x64) running on a Microsoft Surface Pro with PAA
  • Windows 10 Enterprise (x86) running on a Dell Inspiron 660s without PAA
  • Windows 10 for Surface Hub (x64) running on a Microsoft Surface Hub 55" with PAA (single-user mode)
  • Windows 10 for Surface Hub (x64) running on a Microsoft Surface Hub 84" with PAA
  • Windows 10 Mobile (ARMv7) running on a Microsoft Lumia 635
  • Windows 10 Mobile (ARMv7) running on a Microsoft Lumia 950
  • Windows 10 Pro (x64) running on a HP Compaq Pro 6305 with PAA
  • Windows 10 Pro (x64) running on a Microsoft Surface Book with PAA
  • Windows 10 Pro (x64) running on a Microsoft Surface Pro 2 with PAA
  • Windows 10 Pro (x64) running on a Microsoft Surface Pro 3 with PAA
  • Windows 10 Pro (x64) running on a Microsoft Surface Pro 4 with PAA
  • Windows 10 Pro (x64) running on a Microsoft Surface Pro with PAA
  • Windows 10 Pro (x86) running on a Dell Inspiron 660s without PAA

Validation history

DateTypeLab
2016-08-26InitialLeidos Accredited Testing & Evaluation (AT&E) Lab

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2016-08-26

Source documents