Common Criteria certifications for previous Windows Server releases

  • Article

The following tables list the completed Common Criteria certifications for Windows Server releases before Windows Server 2016 and provide links to certification documents, organized by major release of the operating system. The Security Target describes the product editions in scope, the security functionality in the product, and the assurance measures from the Protection Profile used as part of the evaluation. The Administrative Guide provides guidance on configuring the product to match the evaluated configuration. The Certification Report or Validation Report documents the results of the evaluation, with the Assurance Activity Report (when available) providing details on the evaluator's actions.

Windows Server 2012 R2

Product details Date Scope Documents
Validated editions: Standard, Datacenter. November 20, 2017 (Hyper-V certification.) Certified against the Protection Profile for Server Virtualization. Security Target; Administrative Guide; Assurance Activity Report; Certification Report
Build: 6.3.9600. Validated editions: Standard, Datacenter. April 6, 2016 (OS certification.) Certified against the Protection Profile for General Purpose Operating Systems. Security Target; Administrative Guide; Assurance Activity Report; Certification Report

Windows Server 2012

Product details Date Scope Documents
Validated editions: Standard, Datacenter. January 9, 2015 (OS certification.) Certified against the Protection Profile for General Purpose Operating Systems. Security Target; Administrative Guide; Certification Report
Validated editions: Standard, Datacenter. April 7, 2014 (Disk encryption certification.) Certified against the Protection Profile for Full Disk Encryption. Security Target; Administrative Guide; Certification Report
Validated editions: Standard, Datacenter. January 31, 2014 (VPN certification.) Certified against the Protection Profile for IPsec Virtual Private Network Clients. Security Target; Administrative Guide; Certification Report

Windows Server 2008 R2

Product details Date Scope Documents
Validated editions: Standard, Enterprise, Datacenter, Itanium. March 24, 2011 (OS certification.) Certified against the Protection Profile for General Purpose Operating Systems. Security Target; Administrative Guide; Certification Report
Server Core 2008 R2: Hyper-V Server Role July 24, 2009 (Hyper-V certification.) Common Criteria for Information Technology Security Evaluation Version 3.1 Revision 3. It is CC Part 2 extended and Part 3 conformant, with a claimed Evaluation Assurance Level of EAL4, augmented by ALC_FLR.3. Security Target; Administrative Guide; Certification Report

Windows Server 2008

Product details Date Scope Documents
Validated edition: Standard, Enterprise, Datacenter. August 15, 2009 Controlled Access Protection Profile. CC Part 2: security functional requirements. CC Part 3: security assurance requirements, at EAL 4. Security Target; Administrative Guide; Certification Report
Microsoft Windows Server Core 2008: Hyper-V Server Role. July 24, 2009 CC Part 2: security functional requirements. CC Part 3: security assurance requirements, at EAL 4. Security Target; Administrative Guide; Certification Report
Validated edition: Standard, Enterprise, Datacenter. September 17, 2008 CC Part 2: security functional requirements. CC Part 3: security assurance requirements, at EAL 1. Security Target; Administrative Guide; Certification Report

Windows Server 2003 Certificate Server

Product details Date Scope Documents
Microsoft Certificate Server, as part of Windows Server 2003 SP1, Enterprise Edition April 1, 2007 CC Part 2: security functional requirements. CC Part 3: security assurance requirements at EAL 4, augmented with ALC_FLR.3 and AVA_VLA.4. Security Target; Certification Report

Windows Rights Management Services

Product details Date Scope Documents
Microsoft Windows Rights Management Services 1.0 with SP2 August 8, 2007 CC Part 2: security functional requirements. CC Part 3: security assurance requirements at EAL 4, augmented with ALC_FLR.3. Security Target; Certification Report