Windows Phone 8 gets ALL NINE FIPS 140-2 Validation Certificates

Windows Phone 8 received all nine cryptographic module certificates from the US CMVP and Canadian CSEC validation programs. This is very good news for US and Canadian federal government customers as well as other market sectors that require FIPS 140-2 validation for procurement and deployment.

The official record of FIPS 140-2 validation certificates is kept at the NIST CMVP website. Here is the full list of certificates (the links are correct but you may get some errors when trying to open them, please retry):

• Kernel Mode Cryptographic Primitives Library (CNG.SYS)
  • https://csrc.nist.gov/groups/STM/cmvp/documents/140-1/1401val2013.htm#1891
• Cryptographic Primitives Library (BCRYPTPRIMITIVES.DLL)
  • https://csrc.nist.gov/groups/STM/cmvp/documents/140-1/1401val2013.htm#1892
• Enhanced DSS and Diffie-Hellman Cryptographic Provider (DSSENH.DLL)
  • https://csrc.nist.gov/groups/STM/cmvp/documents/140-1/1401val2013.htm#1893
• Enhanced Cryptographic Provider (RSAENH.DLL)
  • https://csrc.nist.gov/groups/STM/cmvp/documents/140-1/1401val2013.htm#1894
• Boot Manager
  • https://csrc.nist.gov/groups/STM/cmvp/documents/140-1/1401val2013.htm#1895
• BitLocker® Windows OS Loader (WINLOAD)
  • https://csrc.nist.gov/groups/STM/cmvp/documents/140-1/1401val2013.htm#1896
• Code Integrity (CI.DLL)
  • https://csrc.nist.gov/groups/STM/cmvp/documents/140-1/1401val2013.htm#1897
• BitLocker® Windows Resume (WINRESUME)
  • https://csrc.nist.gov/groups/STM/cmvp/documents/140-1/1401val2013.htm#1898
• BitLocker® Dump Filter (DUMPFVE.SYS)
  • https://csrc.nist.gov/groups/STM/cmvp/documents/140-1/1401val2013.htm#1899

THE TOOLS DEPARTMENT free/trial tools for developers

• Think blue sky with Azure free trial

• Freedom of Expression  with Visual Studio Express 2012
• Tools and SDKs from the Windows Developer Center
• A 30-day Windows App Adventure

• Tools and SDKs from the Phone Developer Center
• A 30-day Phone App Adventure

Comments

• Anonymous
  September 17, 2013
  What was the patch level of the phone that received the FIPS validation? Any plans to develop STIG guidance as well?