Code Integrity
Microsoft Corporation - FIPS 140 #3195
Code Integrity (ci.dll) verifies the integrity of executable files, including kernel mode drivers, critical system components, and user mode cryptographic modules as they are loaded into memory from the disk.
Key facts
- Scheme
- FIPS 140
- Certificate
- 3195
- Standard
- FIPS 140-2
- Security level
- Level 1
- Status
- historical
- Status reason
- Moved to historical list due to dependency on certificate #3091
- Vendor
- Microsoft Corporation
- Module type
- Software
- Embodiment
- Multi-Chip Stand Alone
- Lab
- Leidos Accredited Testing & Evaluation (AT&E) Lab
- First validated
- October 15, 2018
- Versions
- 10.0.15063.674 [1], 10.0.15254 [2], 10.0.16299 [3] and 10.0.17134 [4]
- Caveat
- When operated in FIPS mode with modules Windows OS Loader validated to FIPS 140-2 under Cert. #3194 or Cert. #3480 operating in FIPS mode or Windows Resume validated to FIPS 140-2 under Cert. #3091 operating in FIPS mode
- Level exceptions
- Design Assurance: Level 2; Physical Security: N/A
Algorithms
- AES
- RSA
- SHS
Algorithm families of the CAVP certificates listed for this module, plus post-quantum algorithms named in its documents.
CAVP algorithm certificates (13)
- AES 4897
- RSA 2668
- RSA 2669
- RSA 2672
- RSA 2673
- RSA 2674
- RSA 2675
- RSA 3080
- RSA 3081
- SHS 4009
- SHS 4010
- SHS 4011
- SHS 4633
Each approved algorithm in a FIPS 140-3 module needs its own NIST CAVP certificate. Older numeric certificates link to their NIST page; ACVP certificates (A1234) can be looked up in the CAVP validation search.
Tested environments
- Surface Hub (x64) running on a Microsoft Surface Hub without PAA [1]
- Windows 10 Education April 2018 Update (x64) running on a Microsoft Surface Laptop without PAA [4]
- Windows 10 Education Fall Creators Update (x64) running on a Microsoft Surface Pro without PAA [3]
- Windows 10 Enterprise April 2018 Update (x64) running on a Microsoft Surface Book 2 without PAA [4]
- Windows 10 Enterprise April 2018 Update (x64) running on a Microsoft Surface Laptop without PAA [4]
- Windows 10 Enterprise April 2018 Update (x64) running on a Microsoft Surface Pro LTE without PAA [4]
- Windows 10 Enterprise April 2018 Update (x64) running on a Microsoft Surface Studio 2 with PAA [4]
- Windows 10 Enterprise April 2018 Update (x64) running on a Microsoft Surface Studio without PAA [4]
- Windows 10 Enterprise April 2018 Update (x64) running on an HP Pro x2 612 G2 Detachable PC with LTE without PAA [4]
- Windows 10 Enterprise Fall Creators Update (x64) running on a Microsoft Surface Book 2 without PAA [3]
- Windows 10 Enterprise Fall Creators Update (x64) running on a Microsoft Surface Book without PAA [3]
- Windows 10 Enterprise Fall Creators Update (x64) running on a Microsoft Surface Laptop without PAA [3]
- Windows 10 Enterprise Fall Creators Update (x64) running on a Microsoft Surface Pro 4 without PAA [3]
- Windows 10 Enterprise Fall Creators Update (x64) running on a Microsoft Surface Pro without PAA [3]
- Windows 10 Enterprise Fall Creators Update (x64) running on a Microsoft Surface Studio without PAA [3]
- Windows 10 Enterprise Fall Creators Update (x64) running on an HP Pro x2 612 G2 Detachable PC with LTE without PAA [3]
- Windows 10 Home April 2018 Update (x86) running on a Dell Inspiron 660s without PAA [4]
- Windows 10 Home Fall Creators Update (x86) running on a Dell Inspiron 660s without PAA [3]
- Windows 10 Mobile Fall Creators Update (ARMv7) running on a Microsoft Lumia 650 [2]
- Windows 10 Mobile Fall Creators Update (ARMv7) running on a Microsoft Lumia 950 [2]
- Windows 10 Mobile Fall Creators Update (ARMv7) running on a Microsoft Lumia 950 XL [2]
- Windows 10 Mobile Fall Creators Update (ARMv7) running on an HP Elite x3 [2]
- Windows 10 Pro April 2018 Update (x64) running on a Dell Latitude 12 Rugged Tablet without PAA [4]
- Windows 10 Pro April 2018 Update (x64) running on a Dell Latitude 5290 without PAA [4]
- Windows 10 Pro April 2018 Update (x64) running on a Microsoft Surface Book 2 without PAA [4]
- Windows 10 Pro April 2018 Update (x64) running on a Microsoft Surface Go without PAA [4]
- Windows 10 Pro April 2018 Update (x64) running on a Microsoft Surface Laptop 2 with PAA [4]
- Windows 10 Pro April 2018 Update (x64) running on a Microsoft Surface Laptop without PAA [4]
- Windows 10 Pro April 2018 Update (x64) running on a Microsoft Surface Pro 6 with PAA [4] (single-user mode)
- Windows 10 Pro April 2018 Update (x64) running on a Microsoft Surface Pro LTE without PAA [4]
- Windows 10 Pro April 2018 Update (x64) running on an HP Slimline Desktop with PAA [4]
- Windows 10 Pro Fall Creators Update (x64) on Hyper-V on Windows Server 2016 running on a Surface Pro 4 without PAA [3]
- Windows 10 Pro Fall Creators Update (x64) running on a Dell Latitude 5285 without PAA [3]
- Windows 10 Pro Fall Creators Update (x64) running on a Dell Latitude 5290 without PAA [3]
- Windows 10 Pro Fall Creators Update (x64) running on a Dell PowerEdge R630 Server without PAA [3]
- Windows 10 Pro Fall Creators Update (x64) running on a Dell Precision Tower 5810MT without PAA [3]
- Windows 10 Pro Fall Creators Update (x64) running on a Microsoft Surface 3 with LTE without PAA [3]
- Windows 10 Pro Fall Creators Update (x64) running on a Microsoft Surface Laptop without PAA [3]
- Windows 10 Pro Fall Creators Update (x64) running on a Microsoft Surface Pro 3 without PAA [3]
- Windows 10 Pro Fall Creators Update (x64) running on a Microsoft Surface Pro without PAA [3]
and 13 more
Operational environments the module was tested on, as listed by NIST CMVP.
CVEs that may affect this product
sec-certs has not matched any CVE to this certificate. That is not proof the product is unaffected.
Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.
Certificates it builds on
- 3091
- 3194
- 3480
Certificate ids found in this certificate's documents (automated extraction).
Documents and sources
Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP, the Common Criteria Portal and ENISA (EUCC) - dataset of September 21, 2026 - synced October 17, 2026
Check certifications from your AI assistant
The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.
Add the certifications brain