808bits

Windows OS Loader

FIPS 140-2 certificate #3090 · Microsoft Corporation · data as of 2026-08-28
Historical. Moved to historical list due to dependency on certificate #3089. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode with module Boot Manager validated to FIPS 140-2 under Cert. #3089 operating in FIPS mode

Certificate

Certificate number3090
StandardFIPS 140-2
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorMicrosoft Corporation · website
Software versions10.0.15063 and 10.0.15063.728

Module description

The BitLocker® Windows OS Loader loads the boot-critical driver and OS kernel image files.

Security level exceptions

  • Physical Security: N/A
  • Design Assurance: Level 2

Approved algorithms

AlgorithmCAVP certificate
AES4624, 4625, 5300, 5316
RSA2523, 2846
SHS3790, 4253

Allowed algorithms

NDRNG

Tested configurations

  • Surface Hub (x64) running on a Microsoft Surface Hub with PAA
  • Windows 10 Education Creators Update (x64) running on a Microsoft Surface Pro with PAA
  • Windows 10 Enterprise Creators Update (x64) running on a Microsoft Surface 3 with PAA
  • Windows 10 Enterprise Creators Update (x64) running on a Microsoft Surface Book with PAA
  • Windows 10 Enterprise Creators Update (x64) running on a Microsoft Surface Laptop with PAA
  • Windows 10 Enterprise Creators Update (x64) running on a Microsoft Surface Pro 4 with PAA
  • Windows 10 Enterprise Creators Update (x64) running on a Microsoft Surface Pro with PAA
  • Windows 10 Enterprise Creators Update (x64) running on a Microsoft Surface Studio with PAA
  • Windows 10 Enterprise Creators Update (x64) running on an HP Pro x2 612 G2 Detachable PC with LTE with PAA
  • Windows 10 Home Creators Update (x86) running on a Dell Inspiron 660s without PAA
  • Windows 10 Mobile Creators Update (ARMv7) running on a Microsoft Lumia 650
  • Windows 10 Mobile Creators Update (ARMv7) running on a Microsoft Lumia 950
  • Windows 10 Mobile Creators Update (ARMv7) running on a Microsoft Lumia 950 XL
  • Windows 10 Mobile Creators Update (ARMv7) running on an HP Elite x3
  • Windows 10 Pro Creators Update (x64) on Hyper-V on Windows Server 2016 running on a Surface Pro 4 with PAA
  • Windows 10 Pro Creators Update (x64) running on a Dell Latitude 5285 with PAA
  • Windows 10 Pro Creators Update (x64) running on a Dell PowerEdge R630 Server with PAA
  • Windows 10 Pro Creators Update (x64) running on a Dell Precision Tower 5810MT with PAA
  • Windows 10 Pro Creators Update (x64) running on a Microsoft Surface 3 with LTE with PAA
  • Windows 10 Pro Creators Update (x64) running on a Microsoft Surface Laptop with PAA
  • Windows 10 Pro Creators Update (x64) running on a Microsoft Surface Pro 3 with PAA
  • Windows 10 Pro Creators Update (x64) running on a Microsoft Surface Pro with PAA
  • Windows 10 Pro Creators Update (x64) running on a Panasonic Toughbook with PAA (single-user mode)
  • Windows 10 Pro Creators Update (x64) running on an HP Compaq Pro 6305 with PAA
  • Windows 10 Pro Creators Update (x64) running on an HP Slimline Desktop with PAA
  • Windows 10 S Creators Update (x64) running on a Microsoft Surface Laptop with PAA

Validation history

DateTypeLab
2018-03-22InitialLeidos Accredited Testing & Evaluation (AT&E) Lab
2019-06-17UpdateLeidos Accredited Testing & Evaluation (AT&E) Lab

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2018-03-22, 2019-06-17

Source documents