808bits

BitLocker Dump Filter

FIPS 140-3 certificate #5409 · Microsoft Corporation · data as of 2026-09-12

BitLocker Dump Filter, from Microsoft Corporation, holds FIPS 140-3 certificate #5409 at overall level 1. The validation is active, with a sunset date of 2031-08-30. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Active. Sunset date 2031-08-30, 1812 days away.
Caveat: When installed, initialized and configured as specified in Section 11.1 of the Security Policy. When operated in approved mode with module Code Integrity validated to FIPS 140-3 under Cert. #5406 operating in approved mode or Secure Kernel Code Integrity validated to FIPS 140-3 under Cert. #5407 operating in approved mode. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs

Certificate

Certificate number5409
StandardFIPS 140-3
Statusactive
Sunset date2031-08-30
Overall level1
Module typeSoftware-hybrid
EmbodimentMultiChipStand
VendorMicrosoft Corporation · website

Module description

Quoted from the NIST CMVP entry for this certificate.

The BitLocker Dump Filter module is a multi-chip standalone software-hybrid cryptographic module that protects crash dump files on BitLocker-encrypted computers. The module is part of the system dump stack. When the dump stack is called during a crash, the module ensures that all data is encrypted before being written to storage as a dump file.

Security level exceptions

  • Non-invasive security: N/A

Approved algorithms (4)

AlgorithmCAVP certificates
AES-CBCA4008, A4009
AES-XTS Testing Revision 2.0A4008, A4009
RSA SigVer (FIPS186-4)A4008, A4009
SHA2-256A4008, A4009

Validation history

DateTypeLab
2026-08-31InitialLeidos Accredited Testing & Evaluation (AT&E) Lab

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-09-01: first observed by this tracker, status active
  • Validation dates on record: 2026-08-31

Source documents