Windows Server 2008 R2 Code Integrity (ci.dll)
Microsoft Corporation - FIPS 140 #1334
This is a dynamically linked library that runs as ntoskrnl.exe. It verifies the integrity of executable files, including kernel mode drivers, critical system components and user mode crypto modules, before these files are loaded from disk into memory by the memory manager.
Key facts
- Scheme
- FIPS 140
- Certificate
- 1334
- Standard
- FIPS 140-2
- Security level
- Level 1
- Status
- historical
- Vendor
- Microsoft Corporation
- Module type
- Software
- Embodiment
- Multi-Chip Stand Alone
- Lab
- SAIC-VA
- First validated
- June 15, 2010
- Versions
- 6.1.7600.16385, 6.1.7600.17122, 6.1.7600.21320, 6.1.7601.17514, 6.1.7601.17950 and 6.1.7601.22108
- Caveat
- When operated in FIPS mode with Windows Server 2008 R2 Winload OS Loader (winload.exe) validated to FIPS 140-2 under Cert. #1333 operating in FIPS mode
Algorithms
- RSA
- SHS
Algorithm families of the CAVP certificates listed for this module, plus post-quantum algorithms named in its documents.
CVEs that may affect this product
- CVE-2010-4398HIGH 7.8KEVEPSS 8.7%
- CVE-2009-3103HIGH 10.0EPSS 92.3%
- CVE-2009-2532HIGH 10.0EPSS 62.2%
- CVE-2009-1216HIGH 10.0EPSS 24.5%
- CVE-2009-0568HIGH 10.0EPSS 32.4%
- CVE-2009-0086HIGH 10.0EPSS 14.1%
- CVE-2008-4038HIGH 10.0EPSS 39.2%
- CVE-2010-3227HIGH 9.3EPSS 20.8%
- CVE-2009-0081HIGH 9.3EPSS 32.1%
- CVE-2008-3013HIGH 9.3EPSS 52.1%
- CVE-2009-0230HIGH 9.0EPSS 34.9%
- CVE-2009-2493HIGH 8.8EPSS 37.8%
- CVE-2009-0231HIGH 8.8EPSS 37.5%
- CVE-2008-4269HIGH 8.5EPSS 20.5%
- CVE-2008-4268HIGH 8.5EPSS 20.7%
- CVE-2008-4036HIGH 8.4EPSS 1.5%
- CVE-2018-8641HIGH 7.8EPSS 1.1%
- CVE-2010-4669HIGH 7.8EPSS 29.1%
- CVE-2009-2526HIGH 7.8EPSS 81.9%
- CVE-2009-0082HIGH 7.8EPSS 1.4%
- CVE-2011-1229HIGH 7.2EPSS 1.5%
- CVE-2009-0083HIGH 7.2EPSS 1.5%
- CVE-2009-0078HIGH 7.2EPSS 2.7%
- CVE-2008-2252HIGH 7.2EPSS 1.9%
- CVE-2008-2251HIGH 7.2EPSS 1.5%
- CVE-2008-2250HIGH 7.2EPSS 1.6%
- CVE-2008-1084HIGH 7.2EPSS 6.8%
- CVE-2009-0085HIGH 7.1EPSS 15.2%
- CVE-2009-0080MEDIUM 6.9EPSS 2.4%
- CVE-2012-1194MEDIUM 6.4EPSS 9.7%
- CVE-2009-0234MEDIUM 6.4EPSS 34.4%
- CVE-2007-6753MEDIUM 6.2EPSS 1.8%
- CVE-2009-0233MEDIUM 5.8EPSS 27.1%
- CVE-2018-0975MEDIUM 5.5EPSS 2.9%
- CVE-2018-0974MEDIUM 5.5EPSS 3.4%
- CVE-2018-0973MEDIUM 5.5EPSS 3.4%
- CVE-2018-0972MEDIUM 5.5EPSS 3.4%
- CVE-2018-0971MEDIUM 5.5EPSS 3.4%
- CVE-2018-0970MEDIUM 5.5EPSS 3.4%
- CVE-2018-0969MEDIUM 5.5EPSS 3.4%
- CVE-2018-0968MEDIUM 5.5EPSS 3.5%
- CVE-2018-0960MEDIUM 5.5EPSS 1.8%
- CVE-2018-0887MEDIUM 5.5EPSS 1.8%
- CVE-2009-0094MEDIUM 5.5EPSS 23.5%
- CVE-2008-1441MEDIUM 5.4EPSS 19.7%
- CVE-2010-0025MEDIUM 5.0EPSS 21.5%
- CVE-2010-0024MEDIUM 5.0EPSS 10.7%
- CVE-2017-11852MEDIUM 4.7EPSS 2.2%
- CVE-2017-11831MEDIUM 4.7EPSS 3.3%
- CVE-2017-0175MEDIUM 4.7EPSS 7.0%
and 6 more
Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.
Certificates it builds on
- 1333
Certificate ids found in this certificate's documents (automated extraction).
Documents and sources
Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP and the Common Criteria Portal - dataset of September 21, 2026 - synced October 15, 2026
Check certifications from your AI assistant
The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.
Add the certifications brain