Windows OS Loader
Windows OS Loader, from Microsoft Corporation, holds FIPS 140-3 certificate #5405 at overall level 1. The validation is active, with a sunset date of 2031-08-30. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: When installed, initialized and configured as specified in Section 11.1 of the Security Policy. When operated in approved mode with module Boot Manager validated to FIPS 140-3 under Cert. #5404 operating in approved mode. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs. No assurance of FIPS 140-3 requirements met for the components of the RBG construct that are external to the module boundary (e.g., DRBG, ESV) except for SP 800-90C compliance and security strength of the provided random bits
This caveat mentions binding. A bound module inherits the earliest sunset of the modules it binds to, so the sunset date above can be optimistic.
Certificate
| Certificate number | 5405 |
|---|---|
| Standard | FIPS 140-3 |
| Status | active |
| Sunset date | 2031-08-30 |
| Overall level | 1 |
| Module type | Software-hybrid |
| Embodiment | MultiChipStand |
| Vendor | Microsoft Corporation · website |
Module description
Quoted from the NIST CMVP entry for this certificate.
The Windows OS Loader (the "module") is the component that loads the operating system kernel (ntoskrnl.exe) and other boot stage binary image files. The module is a part of BitLocker Drive Encryption, which is a data protection feature of the Windows operating system that encrypts data on a storage volume.
Security level exceptions
- Non-invasive security: N/A
Approved algorithms (10)
| Algorithm | CAVP certificates |
|---|---|
| AES-CBC | A4008, A4009 |
| AES-CCM | A4008, A4009 |
| AES-GCM | A4008, A4009 |
| AES-XTS Testing Revision 2.0 | A4008, A4009 |
| Counter DRBG | A4008, A4009 |
| RSA SigVer (FIPS186-4) | A3767, A3768 |
| SHA-1 | A4008, A4009 |
| SHA2-256 | A4008, A4009 |
| SHA2-384 | A4008, A4009 |
| SHA2-512 | A4008, A4009 |
Validation history
| Date | Type | Lab |
|---|---|---|
| 2026-08-31 | Initial | Leidos Accredited Testing & Evaluation (AT&E) Lab |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-09-01: first observed by this tracker, status active
- Validation dates on record: 2026-08-31