MRA recognition for components CCRArecognition for components
up to EAL 4 and ALC_FLR only up to EAL 2 and ALC_FLR only
(D (UC
CENTRO GRIPTOLOGIGO NACIONAL
CERTIFICATE
CCN-CC-41/2025
Microsoft Windows11 (versions 24H2 and 23H2), Microsoft Windows
Server 2025, Microsoft Azure Stack HCI (versions 24H2, 23H2)
Type of product Sistema operativo
Conformanceoffunctionality PP Conformancefunctionality
Protection Profile Conformance Protection Profile for General Purpose Operating Systems, Version:
4.3, September 27, 2022 [GPOSPP43] and NIAP Technical Decisions
(TDs).
Evaluation Facility DEKRATesting and Certification S.A.U.
Certification Report CCN-CC/2024-54/INF-4682
Expiration Date See Certification Report
Pursuantto the authority vested in me underAct 11/2002 regulating the National Intelligence Centre,
and underArticle 1 and Article 2.2.c of Royal Decree 421/2004 of March 12th regulating the National
Cryptologic Centre, | hereby:
Certify that the security of Microsoft Windows11 (versions 24H2 and 23H2), Microsoft WindowsServer
2025, Microsoft Azure Stack HCI(versions 24H2, 23H2), requested by Microsoft Corporation, 1 Microsoft
Way, Redmond, WA 98052, Estados Unidos de América, has been evaluated using CC/CEM:2022 Release
1, and it has met the requirementsof its Security Target identified as “Microsoft Windows 11 (24H2,
23H2), Windows Server 2025 and Azurelocal (24H2, 23H2) Security Target, version 0.02, July 2, 2025.”,
for evaluation assurance level PP compliant.
Madrid, 21 November 2025
Secretary of State Director
Esneranza Gasteleiro Llamazares
as This certificate, its scope and validity are subject to the terms, conditions and requirements specified in the
ENAC “Reglamento de Evaluación y Certificación de la Seguridad delas T.I.C.” at PRE/2740/2007, September19th.
CERTIFICACIÓN
1245/ C-PRTIO.
8
a
The above-mentioned Security Target and Certification Report are available at the National Cryptologic Centre.
This certificate will come into effect the following day that the associated certificate resolution
signed by the Secretary of State Director of CCN is published in the Official State Gazette (B.O.E
— https://www.boe.es).
The IT product identified in this certificate has been evaluated at an accredited and
licensed/approved evaluation facility using the CC/CEM:2022 Release 1 and CC Supporting
Documentsaslisted in the Certification Report. This certificate applies only to the specific
version and release of the product in its evaluated configuration and in conjunction with the
complete Certification Report. The evaluation has been conducted in accordance with the
provisions of the Spanish IT Security Evaluation and Certification Scheme, PRE/2740/2007
Septemberthe 19th, and the conclusions of the evaluation facility in the evaluation technical
report are consistent with the evidence adduced. This certificate is not an endorsementof the
IT product by the Spanish Schemeorby anyother organisation that recognisesorgives effect
to this certificate, and no warranty of the IT product by the Spanish Schemeorby any other
organisation that recognisesorgives effect to this certificate, is either expressed or implied.