Certificate 2351 - Boot Manager in Microsoft Windows 8.1 Enterprise, Windows Server 2012 R2, Windows Storage Server 2012 R2, Surface Pro 3, Surface Pro 2, Surface Pro, Surface 2, Surface, Windows RT 8.1, Windows Phone 8.1, Windows Embedded 8.1 Industry Enterprise, StorSimple 8000 Series
intCertNum 2351
strVendorName Microsoft Corporation
strURL http://www.microsoft.com
strAddress1 One Microsoft Way
strAddress2
strAddress3
strCity Redmond
strStateProv WA
strPostalCode 98052-6399
strCountry 98052-6399
strContact Tim Myers
strEmail FIPS@microsoft.com
strPhone 800-642-7676
strFax
strContact2
strEmail2
strFax2
strPhone2
intCertNum 2351
strModuleName Boot Manager in Microsoft Windows 8.1 Enterprise, Windows Server 2012 R2, Windows Storage Server 2012 R2, Surface Pro 3, Surface Pro 2, Surface Pro, Surface 2, Surface, Windows RT 8.1, Windows Phone 8.1, Windows Embedded 8.1 Industry Enterprise, StorSimple 8000 Series
strPartNumber Software Versions: 6.3.9600 and 6.3.9600.17031
memModuleNotes When operated in FIPS mode
str140Version 140-2
_sp_ Security Policy   [pdf][html][txt]
_cert_ Certificate   [pdf]
strPURL
strModuleType Software
strValidationDate 03/12/2015;04/10/2015
intOverallLevel 1
memIndividualLevelNotes -Physical Security: N/A ;-Design Assurance: Level 2;;;-Operational Environment: Tested as meeting Level 1 with Microsoft Windows 8.1 Enterprise (x86) running on a Dell PowerEdge SC440 without PAA; Microsoft Windows 8.1 Enterprise (x86) running on a Dell Dimension E521 without PAA; Microsoft Windows 8.1 Enterprise (x86) running on an Intel Maho Bay with PAA; Microsoft Windows 8.1 Enterprise (x86) running on an HP Compaq Pro 6305 with PAA; Microsoft Windows 8.1 Enterprise (x64) running on a Dell PowerEdge SC440 without PAA; Microsoft Windows 8.1 Enterprise (x64) running on a Dell Dimension E521 without PAA ; Microsoft Windows 8.1 Enterprise (x64) running on an Intel Maho Bay with PAA; Microsoft Windows 8.1 Enterprise (x64) running on an HP Compaq Pro 6305 with PAA; Microsoft Windows 8.1 Enterprise (x64) running on a Dell Inspiron 660s without PAA and with PCLMULQDQ and SSSE 3; Microsoft Windows 8.1 Enterprise (x64) running on a Microsoft Surface Pro 2 with PAA and with PCLMULQDQ and SSSE 3; Microsoft Windows 8.1 Enterprise (x64) running on an HP Compaq Pro 6305 with PAA and with PCLMULQDQ and SSSE 3; Microsoft Windows Embedded 8.1 Industry Enterprise (x86) running on a Dell PowerEdge SC440 without PAA; Microsoft Windows Embedded 8.1 Industry Enterprise (x86) running on a Dell Dimension E521 without PAA; Microsoft Windows Embedded 8.1 Industry Enterprise (x86) running on an Intel Maho Bay with PAA; Microsoft Windows Embedded 8.1 Industry Enterprise (x86) running on an HP Compaq Pro 6305 with PAA; Microsoft Windows Embedded 8.1 Industry Enterprise (x64) running on a Dell PowerEdge SC440 without PAA; Microsoft Windows Embedded 8.1 Industry Enterprise (x64) running on a Dell Dimension E521 without PAA; Microsoft Windows Embedded 8.1 Industry Enterprise (x64) running on an Intel Maho Bay with PAA; Microsoft Windows Embedded 8.1 Industry Enterprise (x64) running on an HP Compaq Pro 6305 with PAA; Microsoft Windows Embedded 8.1 Industry Enterprise (x64) running on a Dell Inspiron 660s without PAA and with PCLMULQDQ and SSSE 3; Microsoft Windows Embedded 8.1 Industry Enterprise (x64) running on an Intel Maho Bay with PAA and with PCLMULQDQ and SSSE 3; Microsoft Windows Embedded 8.1 Industry Enterprise (x64) running on an HP Compaq Pro 6305 with PAA and with PCLMULQDQ and SSSE 3; Microsoft Windows Server 2012 R2 (x64) running on a Dell PowerEdge SC440 without PAA; Microsoft Windows Server 2012 R2 (x64) running on a Dell Dimension E521 without PAA; Microsoft Windows Server 2012 R2 (x64) running on an Intel Maho Bay with PAA; Microsoft Windows Server 2012 R2 (x64) running on an HP Compaq Pro 6305 with PAA; Microsoft Windows Server 2012 R2 (x64) running on a Dell Inspiron 660s without PAA and with PCLMULQDQ and SSSE 3; Microsoft Windows Server 2012 R2 (x64) running on an Intel Maho Bay with PAA and with PCLMULQDQ and SSSE 3; Microsoft Windows Server 2012 R2 (x64) running on an HP Compaq Pro 6305 with PAA and with PCLMULQDQ and SSSE 3; Microsoft Windows Storage Server 2012 R2 (x64) running on a Dell PowerEdge SC440 without PAA; Microsoft Windows Storage Server 2012 R2 (x64) running on a Dell Dimension E521 without PAA; Microsoft Windows Storage Server 2012 R2 (x64) running on an Intel Maho Bay with PAA; Microsoft Windows Storage Server 2012 R2 (x64) running on an HP Compaq Pro 6305 with PAA; Microsoft Windows Storage Server 2012 R2 (x64) running on a Dell Inspiron 660s without PAA and with PCLMULQDQ and SSSE 3; Microsoft Windows Storage Server 2012 R2 (x64) running on an Intel Maho Bay with PAA and with PCLMULQDQ and SSSE 3; Microsoft Windows Storage Server 2012 R2 (x64) running on an HP Compaq Pro 6305 with PAA and with PCLMULQDQ and SSSE 3; Microsoft Windows 8.1 Pro (x64) running on an Intel x64 Processor with PAA running on a Microsoft Surface Pro; Microsoft Windows 8.1 Pro (x64) running on an Intel i5 with PAA running on a Microsoft Surface Pro 2; Microsoft Windows RT 8.1 (ARMv7 Thumb-2) running on an NVIDIA Tegra 3 Tablet; Microsoft Windows RT 8.1 (ARMv7 Thumb-2) running on a Microsoft Surface RT; Microsoft Windows RT 8.1 (ARMv7 Thumb-2) running on a Microsoft Surface 2; Microsoft Windows RT 8.1 (ARMv7 Thumb-2) running on a Qualcomm Tablet; Microsoft Windows Phone 8.1 (ARMv7 Thumb-2) running on a Qualcomm Snapdragon S4 running on a Windows Phone 8.1; Microsoft Windows Phone 8.1 (ARMv7 Thumb-2) running on a Qualcomm Snapdragon 400 running on a Windows Phone 8.1; Microsoft Windows Phone 8.1 (ARMv7 Thumb-2) running on a Qualcomm Snapdragon 800 running on a Windows Phone 8.1; Microsoft Server 2012 R2 (x64) running on a Microsoft StorSimple 8100 without PAA; Microsoft Server 2012 R2 (x64) running on a Microsoft StorSimple 8100 with PAA; Microsoft Windows 8.1 Pro (x64) running on an Intel i7 with PAA and PCLMULQDQ and SSSE 3 running on a Microsoft Surface Pro 3 (single-user mode)
strFIPSAlgorithms AES (Cert. #2832);
HMAC (Cert. #1773);
PBKDF (vendor affirmed);
RSA (Cert. #1494);
SHS (Certs. #2373 and #2396)
strOtherAlgorithms MD5;
KDF (non-compliant);
PBKDF (non-compliant)
strConfiguration Multi-chip standalone
memModuleDescription The Windows system boot manager is called by the bootstrapping code that resides in the boot sector. It checks its own integrity, checks the integrity of the Windows OS Loader, and then launches it.
intModuleCount 1
memAdditionalNotes 04/10/15: Added OE Microsoft Windows 8.1 Pro (x64) running on an Intel i7 with AES-NI and PCLMULQDQ and SSSE 3 running on a Microsoft Surface Pro 3 and updated the security policy.
strFirstValidtionDate 03/12/15 00:00:00
strLabName Leidos
strValidationYear 2015