808bits

Code Integrity (ci.dll) in Windows 10 Enterprise LTSB

FIPS 140-2 certificate #3437 · Microsoft Corporation · data as of 2026-09-08

Code Integrity (ci.dll) in Windows 10 Enterprise LTSB, from Microsoft Corporation, holds FIPS 140-2 certificate #3437 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Moved to historical list due to dependency on certificate #3426. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode with modules BitLocker(R) Windows OS Loader (winload) in Windows 10 Enterprise LTSB validated to FIPS 140-2 under Cert. #3427 operating in FIPS mode or BitLocker(R) Windows Resume (winresume) in Windows 10 Enterprise LTSB validated to FIPS 140-2 under Cert. #3426

Certificate

Certificate number3437
StandardFIPS 140-2
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorMicrosoft Corporation · website
Software versions10.0.10240.17643

Module description

Quoted from the NIST CMVP entry for this certificate.

Code Integrity (ci.dll) verifies the integrity of executable files, including kernel mode drivers, critical system components, and user mode cryptographic modules as they are loaded into memory from the disk.

Security level exceptions

  • Physical Security: N/A
  • Design Assurance: Level 2

Approved algorithms (3)

AlgorithmCAVP certificates
AES5291
RSA2829
SHS4249

Tested configurations

  • Windows 10 Enterprise LTSB (x64) running on a Dell XPS 8700 with an Intel Core i7 with PAA
  • Windows 10 Enterprise LTSB (x64) running on a HP Compaq Pro 6305 with an AMD A4 with PAA
  • Windows 10 Enterprise LTSB (x64) running on a Microsoft Surface 3 with an Intel Atom x7 with PAA
  • Windows 10 Enterprise LTSB (x64) running on a Microsoft Surface Pro 2 with an Intel Core i5 with PAA
  • Windows 10 Enterprise LTSB (x64) running on a Microsoft Surface Pro 3 with an Intel Core i7 with PAA
  • Windows 10 Enterprise LTSB (x64) running on a Microsoft Surface Pro with an Intel x64 Processor with PAA (single-user mode)
  • Windows 10 Enterprise LTSB (x86) running on a Dell Inspiron 660s with an Intel Core i3 without PAA

Validation history

DateTypeLab
2019-04-23InitialLeidos Accredited Testing & Evaluation (AT&E) Lab

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2019-04-23

Source documents