This page was not yet optimized for use on mobile devices.

Secure Kernel Code Integrity (skci.dll) in Windows 10 Pro, Windows 10 Enterprise, Windows 10 Enterprise LTSB, Windows Server 2016 Standard, Windows Server 2016 Datacenter, Windows Storage Server 2016

Certificate details

Certificate ID	#3513
Status	historical
Historical reason	Moved to historical list due to dependency on certificate #3510
Validation dates	22.08.2019
Standard	FIPS 140-2
Security level	1
Type	Software
Embodiment	Multi-Chip Stand Alone
Caveat	When operated in FIPS mode with the module Code Integrity (ci.dll) in Microsoft Windows 10, Windows 10 Pro, Windows 10 Enterprise, Windows 10 Enterprise LTSB, Windows 10 Mobile, Windows Server 2016 Standard, Windows Server 2016 Datacenter, Windows Storage Server 2016 under Cert. #3510 operating in FIPS mode
Exceptions	Physical Security: N/A Design Assurance: Level 2
Description	Secure Kernel Code Integrity (SKCI) running in the Virtual Secure Mode (VSM) of the Hyper-V hypervisor will only grant execute access to physical pages in the kernel that have been successfully verified. Executable pages will not have write permission outside of Hyper-V. Therefore, only verified code can be executed.
Tested configurations	Windows 10 Enterprise Anniversary Update (x64) running on a Dell Precision Tower 5810MT with an Intel Xeon E5 Windows 10 Enterprise Anniversary Update (x64) running on a HP Compaq Pro 6305 with an AMD A4 Windows 10 Enterprise Anniversary Update (x64) running on a Microsoft Surface Book with an Intel Core i7 Windows 10 Enterprise Anniversary Update (x64) running on a Microsoft Surface Pro 3 with an Intel Core i7 Windows 10 Enterprise Anniversary Update (x64) running on a Microsoft Surface Pro 4 with an Intel Core i5 Windows 10 Enterprise LTSB Anniversary Update (x64) running on a Dell Precision Tower 5810MT with an Intel Xeon E5 Windows 10 Enterprise LTSB Anniversary Update (x64) running on a Dell XPS 8700 with an Intel Core i7 Windows 10 Pro Anniversary Update (x64) running on a Dell Precision Tower 5810MT with an Intel Xeon E5 Windows 10 Pro Anniversary Update (x64) running on a Microsoft Surface Book with an Intel Core i7 Windows 10 Pro Anniversary Update (x64) running on a Microsoft Surface Pro 3 with an Intel Core i7 Windows 10 Pro Anniversary Update (x64) running on a Microsoft Surface Pro 4 with an Intel Core i5 Windows Server 2016 Datacenter Edition (x64) running on a Dell PowerEdge R630 Server with an Intel Xeon E5 Windows Server 2016 Standard Edition (x64) running on a Dell PowerEdge R630 Server with an Intel Xeon E5 Windows Server 2016 Standard Edition (x64) running on a HP Compaq Pro 6305 with an AMD A4 Windows Storage Server 2016 (x64) running on a Dell PowerEdge R630 Server with an Intel Xeon E5 (single-user mode)
Vendor	Microsoft Corporation http://www.microsoft.com
Lab	Leidos Accredited Testing & Evaluation (AT&E) Lab
References	This certificate's webpage directly references 1 certificates, transitively this expands into 4 certificates.

Certificate

Webpage

Security policy

Security policy PDF TXT

Extracted keywords

Symmetric Algorithms

AES

Hash functions

SHA-1, SHA1, SHA-256, SHA-384, SHA-512, SHA-2, SHA2, MD5

Protocols

SSL

Vendor

Microsoft, Microsoft Corporation

Standards

FIPS 140-2, FIPS 186-4, FIPS 180-4, FIPS 140, PKCS#1

Cross-references

Outgoing

3510 - historical - Code Integrity (ci.dll) in Microsoft Windows 10, Windows 10 Pro, Windows 10 Enterprise, Windows 10 Enterprise LTSB, Windows 10 Mobile, Windows Server 2016 Standard, Windows Server 2016 Datacenter, Windows Storage Server 2016

Creation date	D:20190815093837-04'00'
Modification date	D:20190815093837-04'00'
Pages	19

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

No automatically derived data are available in this section.

Cross-references

Processing updates

15.12.2025

The certificate data changed.
Certificate changed

The state was updated.

The following values were inserted: {'policy_json_hash': None}.

The following properties were deleted: ['policy_convert_garbage'].
08.09.2025

The certificate data changed.
Certificate changed

The web extraction data was updated.

The validation_history property was updated.
15.07.2024

The certificate data changed.
Certificate changed

The web extraction data was updated.

The status property was set to historical.

The historical_reason property was set to Moved to historical list due to dependency on certificate #3510.

The date_sunset property was set to None.
09.02.2023

The certificate data changed.
Certificate changed

The cert_id was updated.

The new value is 3513.

The web extraction data was updated.

The following values were inserted: {'validation_history': [{'_type': 'sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry', 'date': '2019-08-22', 'validation_type': 'Initial', 'lab': 'LEIDOS CSTL'}], 'vendor_url': 'http://www.microsoft.com', 'certificate_pdf_url': 'https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/AugustConsolidated.pdf', 'hw_versions': None, 'fw_versions': None}.

The standard property was set to FIPS 140-2.

The status property was set to active.

The level property was set to 1.

The embodiment property was set to Multi-Chip Stand Alone.

The mentioned_certs property was updated, with the {'3510': 1} data.

The following properties were deleted: ['date_validation', 'algorithms', 'vendor_www', 'lab', 'lab_nvlap', 'security_policy_www', 'certificate_www', 'hw_version', 'fw_version', 'product_url'].

The PDF extraction data was updated.

The following values were inserted: {'policy_metadata': {'pdf_file_size_bytes': 1041646, 'pdf_is_encrypted': False, 'pdf_number_of_pages': 19, '/CreationDate': "D:20190815093837-04'00'", '/ModDate': "D:20190815093837-04'00'", 'pdf_hyperlinks': {'_type': 'Set', 'elements': ['https://www.microsoft.com/en-us/howtotell/default.aspx', 'https://www.microsoft.com/en-us/windows', 'http://creativecommons.org/licenses/by-nd-nc/1.0/', 'https://docs.microsoft.com/en-us/windows/security/threat-protection/fips-140-validation']}}}.

The following properties were deleted: ['cert_id', 'algorithms', 'clean_cert_ids', 'st_metadata'].

The computed heuristics were updated.

The following values were inserted: {'policy_prunned_references': {'_type': 'Set', 'elements': ['3510']}, 'module_prunned_references': {'_type': 'Set', 'elements': ['3510']}, 'policy_processed_references': {'_type': 'sec_certs.sample.certificate.References', 'directly_referenced_by': None, 'indirectly_referenced_by': None, 'directly_referencing': {'_type': 'Set', 'elements': ['3510']}, 'indirectly_referencing': {'_type': 'Set', 'elements': ['3502', '3487', '3510', '3501']}}, 'module_processed_references': {'_type': 'sec_certs.sample.certificate.References', 'directly_referenced_by': None, 'indirectly_referenced_by': None, 'directly_referencing': {'_type': 'Set', 'elements': ['3510']}, 'indirectly_referencing': {'_type': 'Set', 'elements': ['3502', '3487', '3510', '3501']}}, 'direct_transitive_cves': None, 'indirect_transitive_cves': None}.

The algorithms property was set to {'_type': 'Set', 'elements': ['RSA#2833', 'SHS#4250']}.

The following properties were deleted: ['keywords', 'unmatched_algs', 'clean_cert_ids', 'st_references', 'web_references'].

The state was updated.

The following values were inserted: {'module_download_ok': True, 'policy_download_ok': True, 'policy_convert_garbage': False, 'policy_convert_ok': True, 'module_extract_ok': True, 'policy_extract_ok': True, 'policy_pdf_hash': '32648033b5ebfb3fc776bbc1351f4f3e88d246a06a01b1eca1adf95f051ebc75', 'policy_txt_hash': 'a1ade3932188a3b230172838b1a839f0f805e5a7ba8fa4a38a68ee964c56ff8d'}.

The following properties were deleted: ['sp_path', 'html_path', 'tables_done', 'file_status', 'txt_state'].
05.11.2022

The certificate data changed.
Certificate changed

The web extraction data was updated.

The algorithms property was set to {'_type': 'Set', 'elements': []}.

The computed heuristics were updated.

The algorithms property was updated, with the {'_type': 'Set', 'elements': [{'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#4250', 'algorithm_type': 'SHS', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#2833', 'algorithm_type': 'RSA', 'vendor': None, 'implementation': None, 'date': None}]} values discarded.
25.10.2022

The certificate data changed.
Certificate changed

The PDF extraction data was updated.

The keywords property was updated, with the {'fips_cert_id': {'__update__': {'Cert': {'__delete__': ['#1']}}}, 'eval_facility': {}, 'symmetric_crypto': {'__update__': {'AES_competition': {'__update__': {'AES': {'__delete__': ['AES-']}}}}, '__delete__': ['DES']}, 'hash_function': {'__update__': {'SHA': {'__update__': {'SHA2': {'__update__': {'SHA-2': 2}}}, '__delete__': ['SHA3']}}}, 'crypto_scheme': {}, 'tee_name': {}} data.

The algorithms property was set to {'_type': 'Set', 'elements': [{'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '512', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '384', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': ' 2', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '256', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': ' 180', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '1', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': ' 10', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': ' 2016', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': ' 4', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': 'A1', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '5', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': 'A2', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#1', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': ' 3', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': ' 186', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '4', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': ' 2016', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': ' 1', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}]}.

The computed heuristics were updated.

The algorithms property was updated, with the {'_type': 'Set', 'elements': [{'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '512', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '384', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': ' 2', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '256', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': ' 2016', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': ' 180', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '1', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': ' 10', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': ' 4', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': 'A1', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '5', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': 'A2', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#1', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': ' 3', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': ' 186', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '4', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': ' 2016', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': ' 1', 'algorithm_type': None, 'vendor': None, 'implementation': None, 'date': None}]} values added.

The st_references property was updated, with the {'directly_referencing': {'_type': 'Set', 'elements': ['3510']}, 'indirectly_referencing': {'_type': 'Set', 'elements': ['3502', '3487', '3510', '3501']}} data.

The web_references property was updated, with the {'directly_referencing': {'_type': 'Set', 'elements': ['3510']}, 'indirectly_referencing': {'_type': 'Set', 'elements': ['3502', '3487', '3510', '3501']}} data.

The state was updated.

The tables_done property was set to True.
10.10.2022

The certificate data changed.
Certificate changed

The computed heuristics were updated.

The cpe_matches property was set to None.

The related_cves property was set to None.
08.10.2022

The certificate data changed.
Certificate changed

The computed heuristics were updated.

The st_references property was updated, with the {'directly_referencing': None, 'indirectly_referencing': None} data.

The web_references property was updated, with the {'directly_referencing': None, 'indirectly_referencing': None} data.
17.07.2022

The certificate data changed.
Certificate changed

The web extraction data was updated.

This property was added with value {'_type': 'sec_certs.sample.fips.FIPSCertificate.WebData', 'module_name': 'Secure Kernel Code Integrity (skci.dll) in Windows 10 Pro, Windows 10 Enterprise, Windows 10 Enterprise LTSB, Windows Server 2016 Standard, Windows Server 2016 Datacenter, Windows Storage Server 2016', 'standard': 'FIPS140-2', 'status': 'Active', 'date_sunset': '2024-08-21', 'date_validation': ['2019-08-22'], 'level': '1', 'caveat': 'When operated in FIPS mode with the module Code Integrity (ci.dll) in Microsoft Windows 10, Windows 10 Pro, Windows 10 Enterprise, Windows 10 Enterprise LTSB, Windows 10 Mobile, Windows Server 2016 Standard, Windows Server 2016 Datacenter, Windows Storage Server 2016 under Cert. #3510 operating in FIPS mode', 'exceptions': ['Physical Security: N/A', 'Design Assurance: Level 2'], 'module_type': 'Software', 'embodiment': 'Multi Chip Standalone', 'algorithms': {'_type': 'Set', 'elements': [{'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#4250', 'algorithm_type': 'SHS', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#2833', 'algorithm_type': 'RSA', 'vendor': None, 'implementation': None, 'date': None}]}, 'tested_conf': ['Windows 10 Enterprise Anniversary Update (x64) running on a Dell Precision Tower 5810MT with an Intel Xeon E5', 'Windows 10 Enterprise Anniversary Update (x64) running on a HP Compaq Pro 6305 with an AMD A4', 'Windows 10 Enterprise Anniversary Update (x64) running on a Microsoft Surface Book with an Intel Core i7', 'Windows 10 Enterprise Anniversary Update (x64) running on a Microsoft Surface Pro 3 with an Intel Core i7', 'Windows 10 Enterprise Anniversary Update (x64) running on a Microsoft Surface Pro 4 with an Intel Core i5', 'Windows 10 Enterprise LTSB Anniversary Update (x64) running on a Dell Precision Tower 5810MT with an Intel Xeon E5', 'Windows 10 Enterprise LTSB Anniversary Update (x64) running on a Dell XPS 8700 with an Intel Core i7', 'Windows 10 Pro Anniversary Update (x64) running on a Dell Precision Tower 5810MT with an Intel Xeon E5', 'Windows 10 Pro Anniversary Update (x64) running on a Microsoft Surface Book with an Intel Core i7', 'Windows 10 Pro Anniversary Update (x64) running on a Microsoft Surface Pro 3 with an Intel Core i7', 'Windows 10 Pro Anniversary Update (x64) running on a Microsoft Surface Pro 4 with an Intel Core i5', 'Windows Server 2016 Datacenter Edition (x64) running on a Dell PowerEdge R630 Server with an Intel Xeon E5', 'Windows Server 2016 Standard Edition (x64) running on a Dell PowerEdge R630 Server with an Intel Xeon E5', 'Windows Server 2016 Standard Edition (x64) running on a HP Compaq Pro 6305 with an AMD A4', 'Windows Storage Server 2016 (x64) running on a Dell PowerEdge R630 Server with an Intel Xeon E5 (single-user mode)'], 'description': 'Secure Kernel Code Integrity (SKCI) running in the Virtual Secure Mode (VSM) of the Hyper-V hypervisor will only grant execute access to physical pages in the kernel that have been successfully verified. Executable pages will not have write permission outside of Hyper-V. Therefore, only verified code can be executed.', 'mentioned_certs': {'3510': {'count': 1}}, 'vendor': 'Microsoft Corporation', 'vendor_www': 'http://www.microsoft.com', 'lab': None, 'lab_nvlap': None, 'historical_reason': None, 'security_policy_www': 'https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/security-policies/140sp3513.pdf', 'certificate_www': 'https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/AugustConsolidated.pdf', 'hw_version': None, 'fw_version': None, 'revoked_reason': None, 'revoked_link': None, 'sw_versions': '10.0.14393.1770', 'product_url': None}.

The PDF extraction data was updated.

This property was added with value {'_type': 'sec_certs.sample.fips.FIPSCertificate.PdfData', 'cert_id': 3513, 'keywords': {'fips_cert_id': {'Cert': {'#3510': 2, '#1': 8, '# 2833': 1, '# 4250': 1, '#2833': 1, '#4250': 1}}, 'fips_security_level': {}, 'fips_certlike': {'Certlike': {'SHA-1': 8, 'SHA-256': 12, 'SHA-384': 3, 'SHA-512 (Cert. # 2833': 1, 'SHA-512 (Cert. # 4250': 1, 'SHA-512': 4, 'SHA1': 2, 'SHA-2': 2, 'SHA2': 1, 'RSA PKCS#1': 6, 'PKCS#1': 10}}, 'vendor': {'Microsoft': {'Microsoft': 40, 'Microsoft Corporation': 3}}, 'eval_facility': {'TTA': {'TTA': 1}}, 'symmetric_crypto': {'AES_competition': {'AES': {'AES-': 18, 'AES': 2}}, 'DES': {'DES': {'DES': 2}}}, 'asymmetric_crypto': {}, 'pq_crypto': {}, 'hash_function': {'SHA': {'SHA1': {'SHA-1': 8, 'SHA1': 2}, 'SHA2': {'SHA-256': 12, 'SHA-384': 3, 'SHA-512': 6, 'SHA-2': 14, 'SHA2': 1}, 'SHA3': {'SHA-3': 3}}, 'MD': {'MD5': {'MD5': 5}}}, 'crypto_scheme': {'MAC': {'MAC': 1}, 'KA': {'KA': 3}}, 'crypto_protocol': {'TLS': {'SSL': {'SSL': 2}}}, 'randomness': {}, 'cipher_mode': {}, 'ecc_curve': {}, 'crypto_engine': {}, 'tls_cipher_suite': {}, 'crypto_library': {}, 'vulnerability': {}, 'side_channel_analysis': {}, 'device_model': {}, 'tee_name': {'IBM': {'SE': 31}}, 'os_name': {}, 'cplc_data': {}, 'ic_data_group': {}, 'standard_id': {'FIPS': {'FIPS 140-2': 11, 'FIPS 186-4': 4, 'FIPS 180-4': 4, 'FIPS 140': 2}, 'PKCS': {'PKCS#1': 8}}, 'javacard_version': {}, 'javacard_api_const': {}, 'javacard_packages': {}, 'certification_process': {}}, 'algorithms': {'_type': 'Set', 'elements': []}, 'clean_cert_ids': {'#3510': 2}, 'st_metadata': {'pdf_file_size_bytes': 1041646, 'pdf_is_encrypted': False, 'pdf_number_of_pages': 19, '/CreationDate': "D:20190815093837-04'00'", '/ModDate': "D:20190815093837-04'00'", 'pdf_hyperlinks': {'_type': 'Set', 'elements': ['https://www.microsoft.com/en-us/howtotell/default.aspx', 'https://www.microsoft.com/en-us/windows', 'http://creativecommons.org/licenses/by-nd-nc/1.0/', 'https://docs.microsoft.com/en-us/windows/security/threat-protection/fips-140-validation']}}}.

The _type was updated.

The new value is sec_certs.sample.fips.FIPSCertificate.

The computed heuristics were updated.

The following values were inserted: {'clean_cert_ids': {'#3510': 2}}.

The _type property was set to sec_certs.sample.fips.FIPSCertificate.Heuristics.

The keywords property was set to {}.

The algorithms property was set to {'_type': 'Set', 'elements': [{'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#4250', 'algorithm_type': 'SHS', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#2833', 'algorithm_type': 'RSA', 'vendor': None, 'implementation': None, 'date': None}]}.

The st_references property was updated, with the {'_type': 'sec_certs.sample.certificate.References'} data.

The web_references property was updated, with the {'_type': 'sec_certs.sample.certificate.References'} data.

The state was updated.

The _type property was set to sec_certs.sample.fips.FIPSCertificate.InternalState.

The following properties were deleted: ['fragment_path'].

The web_scan was updated.

This property was removed.

The pdf_scan was updated.

This property was removed.
14.06.2022

The certificate data changed.
Certificate changed

The pdf_scan was updated.

The keywords property was updated, with the {'rules_cert_id': {}, 'rules_standard_id': {'__update__': {'FIPS ?(?:PUB )?[0-9]+-[0-9]+?': {'__update__': {'FIPS 140-2': {'__update__': {'count': 1}}}, '__delete__': ['FIPS 186-4', 'FIPS 180-4']}, 'FIPS ?(?:PUB )?[0-9]+?': {'__update__': {'FIPS 140': {'__update__': {'count': 1}}}}, 'PKCS[ #]*[1-9]+': {'__update__': {'PKCS#1': {'__update__': {'count': 1}}}}}}} data.

The computed heuristics were updated.

The keywords property was updated, with the {'rules_cert_id': {'__delete__': ['(?:#[^\\S\\r\\n]?|Cert\\.?(?!.\\s)[^\\S\\r\\n]?|Certificate[^\\S\\r\\n]?)(?P<id>\\d{4})(?!\\d)']}, 'rules_standard_id': {'__update__': {'FIPS ?(?:PUB )?[0-9]+-[0-9]+?': {'__update__': {'FIPS 140-2': {'__update__': {'count': 1}}}, '__delete__': ['FIPS 186-4', 'FIPS 180-4']}, 'FIPS ?(?:PUB )?[0-9]+?': {'__update__': {'FIPS 140': {'__update__': {'count': 1}}}}, 'PKCS[ #]*[1-9]+': {'__update__': {'PKCS#1': {'__update__': {'count': 1}}}}}}} data.
08.03.2022

The certificate data changed.
Certificate changed

The web_scan was updated.

The following properties were deleted: ['connections'].

The pdf_scan was updated.

The following properties were deleted: ['connections'].

The computed heuristics were updated.

The following values were inserted: {'st_references': {'_type': 'References', 'directly_referenced_by': None, 'indirectly_referenced_by': None, 'directly_referencing': {'_type': 'Set', 'elements': ['3510']}, 'indirectly_referencing': {'_type': 'Set', 'elements': ['3510']}}, 'web_references': {'_type': 'References', 'directly_referenced_by': None, 'indirectly_referenced_by': None, 'directly_referencing': {'_type': 'Set', 'elements': ['3510']}, 'indirectly_referencing': {'_type': 'Set', 'elements': ['3510']}}}.

The following properties were deleted: ['connections', 'directly_affected_by', 'indirectly_affected_by', 'directly_affecting', 'indirectly_affecting'].
18.02.2022

The certificate data changed.
Certificate changed

The computed heuristics were updated.

The extracted_versions property was set to {'_type': 'Set', 'elements': ['10', '2016']}.

The cpe_matches property was set to {'_type': 'Set', 'elements': ['cpe:2.3:o:microsoft:windows_server:2016:1709:*:*:*:*:*:*', 'cpe:2.3:o:microsoft:windows_server:2016:1803:*:*:*:*:*:*', 'cpe:2.3:o:microsoft:windows_server:2016:*:*:*:*:*:*:*']}.
12.02.2022

The certificate data changed.
Certificate changed

The computed heuristics were updated.

The cpe_matches property was updated, with the [[2, 'cpe:2.3:o:microsoft:windows_server:2016:1709:*:*:*:*:*:*']] values inserted.
11.02.2022

The certificate data changed.
Certificate changed

The computed heuristics were updated.

The cpe_matches property was updated, with the [[1, 'cpe:2.3:o:microsoft:windows_server:2016:1709:*:*:*:*:*:*'], [2, 'cpe:2.3:o:microsoft:windows_server:2016:*:*:*:*:*:*:*']] values inserted.
02.02.2022

The certificate data changed.
Certificate changed

The web_scan was updated.

The module_type property was set to Software.

The computed heuristics were updated.

The cpe_matches property was updated, with the [[1, 'cpe:2.3:o:microsoft:windows_server:2016:1709:*:*:*:*:*:*']] values inserted.
31.01.2022

The certificate data changed.
Certificate changed

The computed heuristics were updated.

The cpe_matches property was updated, with the [[1, 'cpe:2.3:o:microsoft:windows_server:2016:*:*:*:*:*:*:*'], [2, 'cpe:2.3:o:microsoft:windows_server:2016:1803:*:*:*:*:*:*']] values inserted.
30.01.2022

The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 3513,
  "dgst": "125c53fdf1e771c9",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "RSA#2833",
        "SHS#4250"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "2016",
        "10"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": {
        "_type": "Set",
        "elements": [
          "3510"
        ]
      },
      "indirectly_referenced_by": null,
      "indirectly_referencing": {
        "_type": "Set",
        "elements": [
          "3502",
          "3487",
          "3510",
          "3501"
        ]
      }
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": [
        "3510"
      ]
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": {
        "_type": "Set",
        "elements": [
          "3510"
        ]
      },
      "indirectly_referenced_by": null,
      "indirectly_referencing": {
        "_type": "Set",
        "elements": [
          "3502",
          "3487",
          "3510",
          "3501"
        ]
      }
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": [
        "3510"
      ]
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "keywords": {
      "asymmetric_crypto": {},
      "certification_process": {},
      "cipher_mode": {},
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "TLS": {
          "SSL": {
            "SSL": 2
          }
        }
      },
      "crypto_scheme": {},
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "# 2833": 1,
          "# 4250": 1,
          "#2833": 1,
          "#3510": 2,
          "#4250": 1
        }
      },
      "fips_certlike": {
        "Certlike": {
          "PKCS#1": 10,
          "RSA PKCS#1": 6,
          "SHA-1": 8,
          "SHA-2": 2,
          "SHA-256": 12,
          "SHA-384": 3,
          "SHA-512": 4,
          "SHA-512 (Cert. # 2833": 1,
          "SHA-512 (Cert. # 4250": 1,
          "SHA1": 2,
          "SHA2": 1
        }
      },
      "fips_security_level": {},
      "hash_function": {
        "MD": {
          "MD5": {
            "MD5": 5
          }
        },
        "SHA": {
          "SHA1": {
            "SHA-1": 8,
            "SHA1": 2
          },
          "SHA2": {
            "SHA-2": 2,
            "SHA-256": 12,
            "SHA-384": 3,
            "SHA-512": 6,
            "SHA2": 1
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {},
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140": 2,
          "FIPS 140-2": 11,
          "FIPS 180-4": 4,
          "FIPS 186-4": 4
        },
        "PKCS": {
          "PKCS#1": 8
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 2
          }
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {
        "Microsoft": {
          "Microsoft": 40,
          "Microsoft Corporation": 3
        }
      },
      "vulnerability": {}
    },
    "policy_metadata": {
      "/CreationDate": "D:20190815093837-04\u002700\u0027",
      "/ModDate": "D:20190815093837-04\u002700\u0027",
      "pdf_file_size_bytes": 1041646,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "https://www.microsoft.com/en-us/howtotell/default.aspx",
          "https://docs.microsoft.com/en-us/windows/security/threat-protection/fips-140-validation",
          "http://creativecommons.org/licenses/by-nd-nc/1.0/",
          "https://www.microsoft.com/en-us/windows"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 19
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": "32648033b5ebfb3fc776bbc1351f4f3e88d246a06a01b1eca1adf95f051ebc75",
      "txt_hash": "a1ade3932188a3b230172838b1a839f0f805e5a7ba8fa4a38a68ee964c56ff8d"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When operated in FIPS mode with the module Code Integrity (ci.dll) in Microsoft Windows 10, Windows 10 Pro, Windows 10 Enterprise, Windows 10 Enterprise LTSB, Windows 10 Mobile, Windows Server 2016 Standard, Windows Server 2016 Datacenter, Windows Storage Server 2016 under Cert. #3510 operating in FIPS mode",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/AugustConsolidated.pdf",
    "date_sunset": null,
    "description": "Secure Kernel Code Integrity (SKCI) running in the Virtual Secure Mode (VSM) of the Hyper-V hypervisor will only grant execute access to physical pages in the kernel that have been successfully verified. Executable pages will not have write permission outside of Hyper-V. Therefore, only verified code can be executed.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": [
      "Physical Security: N/A",
      "Design Assurance: Level 2"
    ],
    "fw_versions": null,
    "historical_reason": "Moved to historical list due to dependency on certificate #3510",
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {
      "3510": 1
    },
    "module_name": "Secure Kernel Code Integrity (skci.dll) in Windows 10 Pro, Windows 10 Enterprise, Windows 10 Enterprise LTSB, Windows Server 2016 Standard, Windows Server 2016 Datacenter, Windows Storage Server 2016",
    "module_type": "Software",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-2",
    "status": "historical",
    "sw_versions": "10.0.14393.1770",
    "tested_conf": [
      "Windows 10 Enterprise Anniversary Update (x64) running on a Dell Precision Tower 5810MT with an Intel Xeon E5",
      "Windows 10 Enterprise Anniversary Update (x64) running on a HP Compaq Pro 6305 with an AMD A4",
      "Windows 10 Enterprise Anniversary Update (x64) running on a Microsoft Surface Book with an Intel Core i7",
      "Windows 10 Enterprise Anniversary Update (x64) running on a Microsoft Surface Pro 3 with an Intel Core i7",
      "Windows 10 Enterprise Anniversary Update (x64) running on a Microsoft Surface Pro 4 with an Intel Core i5",
      "Windows 10 Enterprise LTSB Anniversary Update (x64) running on a Dell Precision Tower 5810MT with an Intel Xeon E5",
      "Windows 10 Enterprise LTSB Anniversary Update (x64) running on a Dell XPS 8700 with an Intel Core i7",
      "Windows 10 Pro Anniversary Update (x64) running on a Dell Precision Tower 5810MT with an Intel Xeon E5",
      "Windows 10 Pro Anniversary Update (x64) running on a Microsoft Surface Book with an Intel Core i7",
      "Windows 10 Pro Anniversary Update (x64) running on a Microsoft Surface Pro 3 with an Intel Core i7",
      "Windows 10 Pro Anniversary Update (x64) running on a Microsoft Surface Pro 4 with an Intel Core i5",
      "Windows Server 2016 Datacenter Edition (x64) running on a Dell PowerEdge R630 Server with an Intel Xeon E5",
      "Windows Server 2016 Standard Edition (x64) running on a Dell PowerEdge R630 Server with an Intel Xeon E5",
      "Windows Server 2016 Standard Edition (x64) running on a HP Compaq Pro 6305 with an AMD A4",
      "Windows Storage Server 2016 (x64) running on a Dell PowerEdge R630 Server with an Intel Xeon E5 (single-user mode)"
    ],
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2019-08-22",
        "lab": "Leidos Accredited Testing \u0026 Evaluation (AT\u0026E) Lab",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Microsoft Corporation",
    "vendor_url": "http://www.microsoft.com"
  }
}

Sections

Secure Kernel Code Integrity (skci.dll) in Windows 10 Pro, Windows 10 Enterprise, Windows 10 Enterprise LTSB, Windows Server 2016 Standard, Windows Server 2016 Datacenter, Windows Storage Server 2016

Certificate details

Security policy

Extracted keywords

Symmetric Algorithms

Hash functions

Protocols

Vendor

Standards

Cross-references

File metadata

Automated analysis

Automated inference - use with caution

Cross-references

Processing updates

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

New certificate

Raw data

Sections

Secure Kernel Code Integrity (skci.dll) in Windows 10 Pro, Windows 10 Enterprise, Windows 10 Enterprise LTSB, Windows Server 2016 Standard, Windows Server 2016 Datacenter, Windows Storage Server 2016

Certificate details

Security policy

Extracted keywords

Cryptography

Symmetric Algorithms

Hash functions

Protocols

Device

Vendor

Other

Standards

Cross-references

File metadata

Automated analysis

Automated inference - use with caution

Cross-references

Processing updates

Raw data

Toggle raw data