Windows Server 2008 R2 Boot Manager (bootmgr)
Microsoft Corporation - FIPS 140 #1321
This is the system boot manager, called by the bootstrapping code that resides in the boot sector. It checks its own integrity and then checks the integrity of the OS loader and launches it.
Key facts
- Scheme
- FIPS 140
- Certificate
- 1321
- Standard
- FIPS 140-2
- Security level
- Level 1
- Status
- historical
- Vendor
- Microsoft Corporation
- Module type
- Software
- Embodiment
- Multi-Chip Stand Alone
- Lab
- SAIC-VA
- First validated
- June 22, 2010
- Versions
- 6.1.7600.16385 or 6.1.7601.17514
- Caveat
- When operated in FIPS mode
Algorithms
- AES
- HMAC
- RSA
- SHS
Algorithm families of the CAVP certificates listed for this module, plus post-quantum algorithms named in its documents.
CVEs that may affect this product
- CVE-2010-4398HIGH 7.8KEVEPSS 8.7%
- CVE-2009-3103HIGH 10.0EPSS 92.3%
- CVE-2009-2532HIGH 10.0EPSS 62.2%
- CVE-2009-1216HIGH 10.0EPSS 24.5%
- CVE-2009-0568HIGH 10.0EPSS 32.4%
- CVE-2009-0086HIGH 10.0EPSS 14.1%
- CVE-2008-4038HIGH 10.0EPSS 39.2%
- CVE-2010-3227HIGH 9.3EPSS 20.8%
- CVE-2009-0081HIGH 9.3EPSS 32.1%
- CVE-2008-3013HIGH 9.3EPSS 52.1%
- CVE-2009-0230HIGH 9.0EPSS 34.9%
- CVE-2009-2493HIGH 8.8EPSS 37.8%
- CVE-2009-0231HIGH 8.8EPSS 37.5%
- CVE-2008-4269HIGH 8.5EPSS 20.5%
- CVE-2008-4268HIGH 8.5EPSS 20.7%
- CVE-2008-4036HIGH 8.4EPSS 1.5%
- CVE-2018-8641HIGH 7.8EPSS 1.1%
- CVE-2010-4669HIGH 7.8EPSS 29.1%
- CVE-2009-2526HIGH 7.8EPSS 81.9%
- CVE-2009-0082HIGH 7.8EPSS 1.4%
- CVE-2011-1229HIGH 7.2EPSS 1.5%
- CVE-2009-0083HIGH 7.2EPSS 1.5%
- CVE-2009-0078HIGH 7.2EPSS 2.7%
- CVE-2008-2252HIGH 7.2EPSS 1.9%
- CVE-2008-2251HIGH 7.2EPSS 1.5%
- CVE-2008-2250HIGH 7.2EPSS 1.6%
- CVE-2008-1084HIGH 7.2EPSS 6.8%
- CVE-2009-0085HIGH 7.1EPSS 15.2%
- CVE-2009-0080MEDIUM 6.9EPSS 2.4%
- CVE-2012-1194MEDIUM 6.4EPSS 9.7%
- CVE-2009-0234MEDIUM 6.4EPSS 34.4%
- CVE-2007-6753MEDIUM 6.2EPSS 1.8%
- CVE-2009-0233MEDIUM 5.8EPSS 27.1%
- CVE-2018-0975MEDIUM 5.5EPSS 2.9%
- CVE-2018-0974MEDIUM 5.5EPSS 3.4%
- CVE-2018-0973MEDIUM 5.5EPSS 3.4%
- CVE-2018-0972MEDIUM 5.5EPSS 3.4%
- CVE-2018-0971MEDIUM 5.5EPSS 3.4%
- CVE-2018-0970MEDIUM 5.5EPSS 3.4%
- CVE-2018-0969MEDIUM 5.5EPSS 3.4%
- CVE-2018-0968MEDIUM 5.5EPSS 3.5%
- CVE-2018-0960MEDIUM 5.5EPSS 1.8%
- CVE-2018-0887MEDIUM 5.5EPSS 1.8%
- CVE-2009-0094MEDIUM 5.5EPSS 23.5%
- CVE-2008-1441MEDIUM 5.4EPSS 19.7%
- CVE-2010-0025MEDIUM 5.0EPSS 21.5%
- CVE-2010-0024MEDIUM 5.0EPSS 10.7%
- CVE-2017-11852MEDIUM 4.7EPSS 2.2%
- CVE-2017-11831MEDIUM 4.7EPSS 3.3%
- CVE-2017-0175MEDIUM 4.7EPSS 7.0%
and 6 more
Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.
Documents and sources
Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP and the Common Criteria Portal - dataset of September 21, 2026 - synced October 15, 2026
Check certifications from your AI assistant
The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.
Add the certifications brain