Does all editions of Windows 2008 support CNG? The following page http://technet.microsoft.com/en-us/library/cc750357.aspxrefers to Windows 2008 security certificate for ksecdd.sys. Does this security policy applies to all editions of Windows 2008 ( R2 foundation, R2 standard, R2enterprise etc)? I found that the version of ksecdd.sys is different in Windows 2008 Enterprise when compared with FIPS validated version.Pankaj

Yes, all versions of 2008 use CNG. Vista does and Windows 7 will as well. 2000, XP, and 2003 use CAPI.The link in that document in Table 5 will direct you to the official list: http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140val-all.htm#1007ksecdd.sys Software Versions: 6.0.6001.22202 and 6.0.6002.18005 are specifically approved for FIPS 140 when operating in FIPS mode.