This page was not yet optimized for use on mobile devices.
BitLocker Dump Filter
Certificate details
| Certificate ID | #3092 |
|---|---|
| Status | historical |
| Historical reason | Moved to historical list due to sunsetting |
| Validation dates | 22.03.2018 , 09.11.2018 , 09.07.2019 , 05.06.2020 , 05.10.2022 |
| Standard | FIPS 140-2 |
| Security level | 1 |
| Type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Caveat | When operated in FIPS mode with the module Code Integrity under Cert. #3093, #3195 or #3644 operating in FIPS mode or Secure Kernel Code Integrity under Cert. #3096 or #3651 operating in FIPS mode |
| Exceptions |
|
| Description | The BitLocker® Dump Filter (dumpfve.sys) is the full volume encryption filter that resides in the system dump stack. Whenever the dump stack is called (in the event of a system crash or for hibernation), this filter ensures that all data is encrypted before it gets written to the disk as a dump file or hibernation file. |
| Tested configurations |
|
| Vendor | Microsoft Corporation |
| References | This certificate's webpage directly references 5 certificates, transitively this expands into 11 certificates. |
Security policy
Extracted keywords
Symmetric Algorithms
AESHash functions
SHA-256, SHA-2Protocols
SSLBlock cipher modes
CBC, CCM, XTSVendor
Samsung, Qualcomm, Microsoft, Microsoft CorporationStandards
FIPS 140, FIPS 140-2, FIPS 197, FIPS 186-4, FIPS 180-4, NIST SP 800-38E, NIST SP 800-38C, PKCS#1Cross-references
OutgoingAutomated analysis
Automated inference - use with caution
All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.No automatically derived data are available in this section.
Cross-references
Loading...
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate was first processed.
{
"_type": "sec_certs.sample.fips.FIPSCertificate",
"cert_id": 3092,
"dgst": "98b7d6e81d8c304f",
"heuristics": {
"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
"algorithms": {
"_type": "Set",
"elements": [
"RSA#3080",
"SHS#4010",
"AES#C346",
"AES#4894",
"AES#4625",
"AES#5847",
"SHS#3790",
"AES#C2055",
"RSA#2668",
"RSA#C211",
"RSA#2669",
"RSA#2672",
"AES#C211",
"SHS#4011",
"RSA#2522",
"SHS#4633",
"AES#4896",
"AES#4897",
"AES#4624",
"AES#4901",
"AES#5859",
"SHS#C211",
"AES#4902",
"AES#4895",
"AES#C2047",
"SHS#4009"
]
},
"cpe_matches": null,
"direct_transitive_cves": null,
"extracted_versions": {
"_type": "Set",
"elements": [
"-"
]
},
"indirect_transitive_cves": null,
"module_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": {
"_type": "Set",
"elements": [
"3096",
"3195",
"3093",
"3644",
"3651"
]
},
"indirectly_referenced_by": null,
"indirectly_referencing": {
"_type": "Set",
"elements": [
"3096",
"3090",
"3615",
"3195",
"3480",
"3089",
"3194",
"3093",
"3091",
"3644",
"3651"
]
}
},
"module_prunned_references": {
"_type": "Set",
"elements": [
"3096",
"3195",
"3093",
"3644",
"3651"
]
},
"policy_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": {
"_type": "Set",
"elements": [
"3096",
"3195",
"3093",
"3644",
"3651"
]
},
"indirectly_referenced_by": null,
"indirectly_referencing": {
"_type": "Set",
"elements": [
"3096",
"3090",
"3195",
"3480",
"3089",
"3194",
"3093",
"3091",
"3644",
"3651"
]
}
},
"policy_prunned_references": {
"_type": "Set",
"elements": [
"3096",
"3195",
"3093",
"3644",
"3651"
]
},
"related_cves": null,
"verified_cpe_matches": null
},
"pdf_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
"keywords": {
"asymmetric_crypto": {},
"certification_process": {},
"cipher_mode": {
"CBC": {
"CBC": 3
},
"CCM": {
"CCM": 3
},
"XTS": {
"XTS": 4
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {},
"crypto_protocol": {
"TLS": {
"SSL": {
"SSL": 2
}
}
},
"crypto_scheme": {},
"device_model": {},
"ecc_curve": {},
"eval_facility": {},
"fips_cert_id": {
"Cert": {
"# 3080": 2,
"# 3096": 1,
"# 4633": 2,
"#2522": 2,
"#2668": 2,
"#2669": 1,
"#2672": 1,
"#3093": 1,
"#3096": 2,
"#3195": 2,
"#3644": 1,
"#3651": 1,
"#3790": 2,
"#4009": 2,
"#4010": 1,
"#4011": 1,
"#4624": 2,
"#4625": 1,
"#4895": 1,
"#4901": 2,
"#5847": 2,
"#5859": 1
}
},
"fips_certlike": {
"Certlike": {
"AES CBC 128 and 256": 3,
"PKCS#1": 8,
"RSA PKCS#1": 8,
"SHA- 256": 1,
"SHA-2": 2,
"SHA-256": 17
}
},
"fips_security_level": {},
"hash_function": {
"SHA": {
"SHA2": {
"SHA-2": 2,
"SHA-256": 17
}
}
},
"ic_data_group": {},
"javacard_api_const": {},
"javacard_packages": {},
"javacard_version": {},
"os_name": {},
"pq_crypto": {},
"randomness": {},
"side_channel_analysis": {},
"standard_id": {
"FIPS": {
"FIPS 140": 5,
"FIPS 140-2": 6,
"FIPS 180-4": 8,
"FIPS 186-4": 8,
"FIPS 197": 3
},
"NIST": {
"NIST SP 800-38C": 1,
"NIST SP 800-38E": 1
},
"PKCS": {
"PKCS#1": 8
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 15
}
}
},
"tee_name": {},
"tls_cipher_suite": {},
"vendor": {
"Microsoft": {
"Microsoft": 92,
"Microsoft Corporation": 3
},
"Qualcomm": {
"Qualcomm": 4
},
"Samsung": {
"Samsung": 2
}
},
"vulnerability": {}
},
"policy_metadata": {
"/CreationDate": "D:20220921145034-04\u002700\u0027",
"/Creator": "Nuance PDF Create",
"/ModDate": "D:20220921145034-04\u002700\u0027",
"/Producer": "Nuance PDF Create",
"pdf_file_size_bytes": 667734,
"pdf_hyperlinks": {
"_type": "Set",
"elements": []
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 25
}
},
"state": {
"_type": "sec_certs.sample.fips.InternalState",
"module": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": null,
"txt_hash": null
},
"policy": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": "28b5c651fe8422058da5abdd7a1d9d40b7e4c8993f2b0d5b6fdb4f0e0f0c5483",
"txt_hash": "8803edc7f26182b1fb6b60e25de998ed2988ee22afbe0a24b99cd20962c598ba"
}
},
"web_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
"caveat": "When operated in FIPS mode with the module Code Integrity under Cert. #3093, #3195 or #3644 operating in FIPS mode or Secure Kernel Code Integrity under Cert. #3096 or #3651 operating in FIPS mode",
"certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/FIPS140-2-ConsolidatedMarch2018.pdf",
"date_sunset": null,
"description": "The BitLocker\u00ae Dump Filter (dumpfve.sys) is the full volume encryption filter that resides in the system dump stack. Whenever the dump stack is called (in the event of a system crash or for hibernation), this filter ensures that all data is encrypted before it gets written to the disk as a dump file or hibernation file.",
"embodiment": "Multi-Chip Stand Alone",
"exceptions": [
"Physical Security: N/A",
"Design Assurance: Level 2"
],
"fw_versions": null,
"historical_reason": "Moved to historical list due to sunsetting",
"hw_versions": null,
"level": 1,
"mentioned_certs": {
"3093": 1,
"3096": 1,
"3195": 1,
"3644": 1,
"3651": 1
},
"module_name": "BitLocker Dump Filter",
"module_type": "Software",
"revoked_link": null,
"revoked_reason": null,
"standard": "FIPS 140-2",
"status": "historical",
"sw_versions": "10.0.15063 [1], 10.0.15063.674 [2], 10.0.15254 [3], 10.0.16299 [4], 10.0.17134 [5], 10.0.17763 [6] and 10.0.17763.107 [7]",
"tested_conf": [
"Azure Data Box Edge (x64) running on a Microsoft Azure Data Box with PAA [6]",
"Surface Hub (x64) running on a Microsoft Surface Hub with PAA [1][2]",
"Windows 10 Education April 2018 Update (x64) running on a Microsoft Surface Laptop with PAA [5]",
"Windows 10 Education Creators Update (x64) running on a Microsoft Surface Pro with PAA [1]",
"Windows 10 Education Fall Creators Update (x64) running on a Microsoft Surface Pro with PAA [4]",
"Windows 10 Education October 2018 Update (x64) running on a Microsoft Surface Laptop with PAA [6]",
"Windows 10 Enterprise April 2018 Update (x64) running on a Microsoft Surface Book 2 with PAA [5]",
"Windows 10 Enterprise April 2018 Update (x64) running on a Microsoft Surface Laptop with PAA [5]",
"Windows 10 Enterprise April 2018 Update (x64) running on a Microsoft Surface Pro LTE with PAA [5]",
"Windows 10 Enterprise April 2018 Update (x64) running on a Microsoft Surface Studio 2 with PAA [5]",
"Windows 10 Enterprise April 2018 Update (x64) running on a Microsoft Surface Studio with PAA [5]",
"Windows 10 Enterprise April 2018 Update (x64) running on an HP Pro x2 612 G2 Detachable PC with LTE with PAA [5]",
"Windows 10 Enterprise Creators Update (x64) running on a Microsoft Surface 3 with PAA [1]",
"Windows 10 Enterprise Creators Update (x64) running on a Microsoft Surface Book with PAA [1]",
"Windows 10 Enterprise Creators Update (x64) running on a Microsoft Surface Laptop with PAA [1]",
"Windows 10 Enterprise Creators Update (x64) running on a Microsoft Surface Pro 4 with PAA [1]",
"Windows 10 Enterprise Creators Update (x64) running on a Microsoft Surface Pro with PAA [1]",
"Windows 10 Enterprise Creators Update (x64) running on a Microsoft Surface Studio with PAA [1]",
"Windows 10 Enterprise Creators Update (x64) running on an HP Pro x2 612 G2 Detachable PC with LTE with PAA [1]",
"Windows 10 Enterprise Fall Creators Update (x64) running on a Microsoft Surface Book 2 with PAA [4]",
"Windows 10 Enterprise Fall Creators Update (x64) running on a Microsoft Surface Book with PAA [4]",
"Windows 10 Enterprise Fall Creators Update (x64) running on a Microsoft Surface Laptop with PAA [4]",
"Windows 10 Enterprise Fall Creators Update (x64) running on a Microsoft Surface Pro 4 with PAA [4]",
"Windows 10 Enterprise Fall Creators Update (x64) running on a Microsoft Surface Pro with PAA [4]",
"Windows 10 Enterprise Fall Creators Update (x64) running on a Microsoft Surface Studio with PAA [4]",
"Windows 10 Enterprise Fall Creators Update (x64) running on an HP Pro x2 612 G2 Detachable PC with LTE with PAA [4]",
"Windows 10 Enterprise October 2018 Update (x64) running on a Microsoft Surface Book 2 with PAA [6]",
"Windows 10 Enterprise October 2018 Update (x64) running on a Microsoft Surface Laptop with PAA [6]",
"Windows 10 Enterprise October 2018 Update (x64) running on a Microsoft Surface Pro LTE with PAA [6]",
"Windows 10 Enterprise October 2018 Update (x64) running on a Microsoft Surface Studio with PAA [6]",
"Windows 10 Enterprise October 2018 Update (x64) running on a Samsung Galaxy Book 12\" with PAA [6]",
"Windows 10 Enterprise October 2018 Update (x64) running on an HP EliteBook x360 1030 G2 with PAA [6]",
"Windows 10 Mobile Creators Update (ARMv7) running on a Microsoft Lumia 650 [1]",
"Windows 10 Mobile Creators Update (ARMv7) running on a Microsoft Lumia 950 [1]",
"Windows 10 Mobile Creators Update (ARMv7) running on a Microsoft Lumia 950 XL [1]",
"Windows 10 Mobile Creators Update (ARMv7) running on an HP Elite x3 [1]",
"Windows 10 Mobile Fall Creators Update (ARMv7) running on a Microsoft Lumia 650 [3]",
"Windows 10 Mobile Fall Creators Update (ARMv7) running on a Microsoft Lumia 950 [3]",
"Windows 10 Mobile Fall Creators Update (ARMv7) running on a Microsoft Lumia 950 XL [3]",
"Windows 10 Mobile Fall Creators Update (ARMv7) running on an HP Elite x3 [3]",
"Windows 10 Pro April 2018 Update (x64) running on a Dell Latitude 12 Rugged Tablet with PAA [5]",
"Windows 10 Pro April 2018 Update (x64) running on a Dell Latitude 5290 with PAA [5]",
"Windows 10 Pro April 2018 Update (x64) running on a Microsoft Surface Book 2 with PAA [5]",
"Windows 10 Pro April 2018 Update (x64) running on a Microsoft Surface Go with PAA [5]",
"Windows 10 Pro April 2018 Update (x64) running on a Microsoft Surface Laptop 2 with PAA [5]",
"Windows 10 Pro April 2018 Update (x64) running on a Microsoft Surface Laptop with PAA [5]",
"Windows 10 Pro April 2018 Update (x64) running on a Microsoft Surface Pro 6 with PAA [5]",
"Windows 10 Pro April 2018 Update (x64) running on a Microsoft Surface Pro LTE with PAA [5]",
"Windows 10 Pro April 2018 Update (x64) running on an HP Slimline Desktop with PAA [5]",
"Windows 10 Pro Creators Update (x64) on Hyper-V on Windows Server 2016 running on a Surface Pro 4 with PAA [1]",
"Windows 10 Pro Creators Update (x64) running on a Dell Latitude 5285 with PAA [1]",
"Windows 10 Pro Creators Update (x64) running on a Dell PowerEdge R630 Server with PAA [1]",
"Windows 10 Pro Creators Update (x64) running on a Dell Precision Tower 5810MT with PAA [1]",
"Windows 10 Pro Creators Update (x64) running on a Microsoft Surface 3 with LTE with PAA [1]",
"Windows 10 Pro Creators Update (x64) running on a Microsoft Surface Laptop with PAA [1]",
"Windows 10 Pro Creators Update (x64) running on a Microsoft Surface Pro 3 with PAA [1]",
"Windows 10 Pro Creators Update (x64) running on a Microsoft Surface Pro with PAA [1]",
"Windows 10 Pro Creators Update (x64) running on a Panasonic Toughbook with PAA [1]",
"Windows 10 Pro Creators Update (x64) running on an HP Compaq Pro 6305 with PAA [1]",
"Windows 10 Pro Creators Update (x64) running on an HP Slimline Desktop with PAA [1]",
"Windows 10 Pro Fall Creators Update (x64) on Hyper-V on Windows Server 2016 running on a Surface Pro 4 with PAA [4]",
"Windows 10 Pro Fall Creators Update (x64) running on a Dell Latitude 5285 with PAA [4]",
"Windows 10 Pro Fall Creators Update (x64) running on a Dell Latitude 5290 with PAA [4]",
"Windows 10 Pro Fall Creators Update (x64) running on a Dell PowerEdge R630 Server with PAA [4]",
"Windows 10 Pro Fall Creators Update (x64) running on a Dell Precision Tower 5810MT with PAA [4]",
"Windows 10 Pro Fall Creators Update (x64) running on a Microsoft Surface 3 with LTE with PAA [4]",
"Windows 10 Pro Fall Creators Update (x64) running on a Microsoft Surface Laptop with PAA [4]",
"Windows 10 Pro Fall Creators Update (x64) running on a Microsoft Surface Pro with PAA [4]",
"Windows 10 Pro Fall Creators Update (x64) running on a Panasonic Toughbook with PAA [4]",
"Windows 10 Pro Fall Creators Update (x64) running on an HP Compaq Pro 6305 with PAA [4]",
"Windows 10 Pro Fall Creators Update (x64) running on an HP Slimline Desktop with PAA [4]",
"Windows 10 Pro October 2018 Update (x64) running on a Dell Latitude 12 Rugged Tablet with PAA [6]",
"Windows 10 Pro October 2018 Update (x64) running on a Dell Latitude 5290 with PAA [6]",
"Windows 10 Pro October 2018 Update (x64) running on a Microsoft Surface Book 2 with PAA [6]",
"Windows 10 Pro October 2018 Update (x64) running on a Microsoft Surface Go with PAA [6]",
"Windows 10 Pro October 2018 Update (x64) running on a Microsoft Surface Laptop with PAA [6]",
"Windows 10 Pro October 2018 Update (x64) running on a Microsoft Surface Pro LTE with PAA [6]",
"Windows 10 Pro October 2018 Update (x64) running on a Samsung Galaxy Book 10.6\" with PAA [6]",
"Windows 10 Pro October 2018 Update (x64) running on an HP Elite x2 1013 G3 Tablet with PAA [6]",
"Windows 10 Pro October 2018 Update (x64) running on an HP Slimline Desktop with PAA [6]",
"Windows 10 S Creators Update (x64) running on a Microsoft Surface Laptop with PAA [1]",
"Windows 10 S Fall Creators Update (x64) running on a Microsoft Surface Laptop with PAA [4]",
"Windows Server 2019 Core (x64) on Hyper-V on Windows Server 2016 running on a Dell PowerEdge R740 Server with PAA [6]",
"Windows Server 2019 Core (x64) on Hyper-V on Windows Server 2019 running on a Dell Precision Tower 5810MT with PAA [6]",
"Windows Server 2019 Core (x64) running on a Dell PowerEdge R740 Server with PAA [6]",
"Windows Server 2019 Datacenter Core (x64) on Hyper-V on Windows Server 2019 running on a Dell Precision Tower 5810MT with PAA [6]",
"Windows Server 2019 Datacenter Core (x64) running on a Dell PowerEdge R740 Server with PAA [6]",
"Windows Server Core (x64) on Hyper-V on Windows Server 2016 running on a Dell PowerEdge R740 Server with PAA [5]",
"Windows Server Core Datacenter 2019 RTM (x64) running on an HPE Edgeline EL8000 / ProLiant e910 Server Blade with PAA [7]",
"Windows Server Datacenter Core (x64) on Hyper-V on Windows Server running on a Dell Precision Tower 5810MT with PAA [4][5]",
"Windows Server Datacenter Core (x64) running on a Dell PowerEdge R630 Server with PAA [4]",
"Windows Server Datacenter Core (x64) running on a Dell PowerEdge R740 Server with PAA [4][5]",
"Windows Server Datacenter Core (x64) running on a Dell Precision Tower 5810MT with PAA [4]",
"Windows Server Standard Core (x64) on Hyper-V on Windows Server running on a Dell Precision Tower 5810MT with PAA [4][5]",
"Windows Server Standard Core (x64) running on a Dell PowerEdge R630 Server with PAA [4]",
"Windows Server Standard Core (x64) running on a Dell PowerEdge R740 Server with PAA [4][5]",
"Windows Server Standard Core (x64) running on a Dell Precision Tower 5810MT with PAA [4] (single-user mode)"
],
"validation_history": [
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2018-03-22",
"lab": "Leidos Accredited Testing \u0026 Evaluation (AT\u0026E) Lab",
"validation_type": "Initial"
},
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2018-11-09",
"lab": "Leidos Accredited Testing \u0026 Evaluation (AT\u0026E) Lab",
"validation_type": "Update"
},
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2019-07-09",
"lab": "Leidos Accredited Testing \u0026 Evaluation (AT\u0026E) Lab",
"validation_type": "Update"
},
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2020-06-05",
"lab": "Leidos Accredited Testing \u0026 Evaluation (AT\u0026E) Lab",
"validation_type": "Update"
},
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2022-10-05",
"lab": "Leidos Accredited Testing \u0026 Evaluation (AT\u0026E) Lab",
"validation_type": "Update"
}
],
"vendor": "Microsoft Corporation",
"vendor_url": "http://www.microsoft.com"
}
}