Windows Server 2008 R2 BitLocker™ Drive Encryption
Microsoft Corporation - FIPS 140 #1339
Windows BitLocker Drive Encryption is a data protection feature available in Windows Server 2008 R2. BitLocker provides enhanced protection against data theft or exposure on computers that are lost or stolen, and more secure data deletion when BitLocker-protected computers are decommissioned.
Key facts
- Scheme
- FIPS 140
- Certificate
- 1339
- Standard
- FIPS 140-2
- Security level
- Level 1
- Status
- historical
- Vendor
- Microsoft Corporation
- Module type
- Software
- Embodiment
- Multi-Chip Stand Alone
- Lab
- SAIC-VA
- First validated
- November 15, 2010
- Versions
- 6.1.7600.16385, 6.1.7600.16429, 6.1.7600.16757, 6.1.7600.20536, 6.1.7600.20873, 6.1.7600.20897, 6.1.7600.20916, 6.1.7601.17514, 6.1.7601.17556, 6.1.7601.21634, 6.1.7601.21655 or 6.1.7601.21675
- Caveat
- When operated in FIPS mode with Windows Server 2008 R2 Boot Manager (bootmgr) (Cert. #1321), Windows Server 2008 R2 Winload OS Loader (winload.exe) (Cert. #1333), Windows Server 2008 R2 Code Integrity (ci.dll) (Cert. #1334), Microsoft Windows Server 2008 R2 Kernel Mode Cryptographic Primitives Library (cng.sys) (Cert. #1335) and Microsoft Windows Server 2008 R2 Cryptographic Primitives Library (bcryptprimitives.dll) (Cert. #1336) all validated under FIPS 140-2 and all operating in FIPS mode
Algorithms
- AES
- HMAC
- SHS
Algorithm families of the CAVP certificates listed for this module, plus post-quantum algorithms named in its documents.
CVEs that may affect this product
- CVE-2010-4398HIGH 7.8KEVEPSS 8.7%
- CVE-2009-3103HIGH 10.0EPSS 92.3%
- CVE-2009-2532HIGH 10.0EPSS 62.2%
- CVE-2009-1216HIGH 10.0EPSS 24.5%
- CVE-2009-0568HIGH 10.0EPSS 32.4%
- CVE-2009-0086HIGH 10.0EPSS 14.1%
- CVE-2008-4038HIGH 10.0EPSS 39.2%
- CVE-2010-3227HIGH 9.3EPSS 20.8%
- CVE-2009-0081HIGH 9.3EPSS 32.1%
- CVE-2008-3013HIGH 9.3EPSS 52.1%
- CVE-2009-0230HIGH 9.0EPSS 34.9%
- CVE-2009-2493HIGH 8.8EPSS 37.8%
- CVE-2009-0231HIGH 8.8EPSS 37.5%
- CVE-2008-4269HIGH 8.5EPSS 20.5%
- CVE-2008-4268HIGH 8.5EPSS 20.7%
- CVE-2008-4036HIGH 8.4EPSS 1.5%
- CVE-2018-8641HIGH 7.8EPSS 1.1%
- CVE-2010-4669HIGH 7.8EPSS 29.1%
- CVE-2009-2526HIGH 7.8EPSS 81.9%
- CVE-2009-0082HIGH 7.8EPSS 1.4%
- CVE-2011-1229HIGH 7.2EPSS 1.5%
- CVE-2009-0083HIGH 7.2EPSS 1.5%
- CVE-2009-0078HIGH 7.2EPSS 2.7%
- CVE-2008-2252HIGH 7.2EPSS 1.9%
- CVE-2008-2251HIGH 7.2EPSS 1.5%
- CVE-2008-2250HIGH 7.2EPSS 1.6%
- CVE-2008-1084HIGH 7.2EPSS 6.8%
- CVE-2009-0085HIGH 7.1EPSS 15.2%
- CVE-2009-0080MEDIUM 6.9EPSS 2.4%
- CVE-2012-1194MEDIUM 6.4EPSS 9.7%
- CVE-2009-0234MEDIUM 6.4EPSS 34.4%
- CVE-2007-6753MEDIUM 6.2EPSS 1.8%
- CVE-2009-0233MEDIUM 5.8EPSS 27.1%
- CVE-2018-0975MEDIUM 5.5EPSS 2.9%
- CVE-2018-0974MEDIUM 5.5EPSS 3.4%
- CVE-2018-0973MEDIUM 5.5EPSS 3.4%
- CVE-2018-0972MEDIUM 5.5EPSS 3.4%
- CVE-2018-0971MEDIUM 5.5EPSS 3.4%
- CVE-2018-0970MEDIUM 5.5EPSS 3.4%
- CVE-2018-0969MEDIUM 5.5EPSS 3.4%
- CVE-2018-0968MEDIUM 5.5EPSS 3.5%
- CVE-2018-0960MEDIUM 5.5EPSS 1.8%
- CVE-2018-0887MEDIUM 5.5EPSS 1.8%
- CVE-2009-0094MEDIUM 5.5EPSS 23.5%
- CVE-2008-1441MEDIUM 5.4EPSS 19.7%
- CVE-2010-0025MEDIUM 5.0EPSS 21.5%
- CVE-2010-0024MEDIUM 5.0EPSS 10.7%
- CVE-2017-11852MEDIUM 4.7EPSS 2.2%
- CVE-2017-11831MEDIUM 4.7EPSS 3.3%
- CVE-2017-0175MEDIUM 4.7EPSS 7.0%
and 6 more
Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.
Certificates it builds on
- 1321
- 1333
- 1334
- 1335
- 1336
Certificate ids found in this certificate's documents (automated extraction).
Documents and sources
Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP and the Common Criteria Portal - dataset of September 21, 2026 - synced October 15, 2026
Check certifications from your AI assistant
The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.
Add the certifications brain