In addition to the general certificates listed here, other certificates may have been issued in order to demonstrate specific security requirements for some markets.
Contact us at security-certifications@apple.com if you have any questions.
Note that prior to iPadOS 13, the operating system for iPad was named iOS.
The following documents can be useful in context with these certifications and validations:
For information on public certifications related to Apple Internet Services, see:
For information on public certifications related to Apple applications, see:
For information on public certifications related to Apple operating systems, see:
- Product security certifications for iOS
- Product security certifications for iPadOS
- Product security certifications for macOS
- Product security certifications for watchOS
- Product security certifications for tvOS
For information on public certifications related to hardware and associated firmware components, see:
- Security certifications for SEP (Secure Key Store)
- Security certifications for T2 and its firmware
Cryptographic module validations
All Apple FIPS 140-2/-3 Conformance Validation Certificates are on the CMVP web site. Apple actively engages in the validation of the CoreCrypto User and CoreCrypto Kernel modules for each major release of an operating system. Validation of conformance can only be performed against a final module release version and formally submitted upon OS public release.
The CMVP maintains the validation status of cryptographic modules under four separate lists depending on their current status. The modules may begin in the Implementation Under Test List and then proceed to the Modules in Process List. Once validated they appear on the validated cryptographic modules list, and after five years are moved to the "historical" list.
In 2020 the CMVP adopt the international standard, ISO/IEC 19790, as the basis for FIPS 140-3.
For more information about FIPS 140-2/-3 validations see Apple Platform Security.
| CMVP Certificate Number | Module Name | Module Type | SL | Validation Date | Documents | |
|---|---|---|---|---|---|---|
| iPadOS 13 user space, kernel space and secure key store (sepOS) are currently under test. Please check the Implementation Under Test List and the Modules in Process List. | ||||||
| iOS 12 | 3438 | Apple CoreCrypto Kernel Module v9.0 for ARM | SW | 1 | 2019-04-23 | |
Apple CoreCrypto User Module v8.0 for ARM |
SW | 1 | 2019-04-11 | |||
| 3523 | Apple Secure Key Store Cryptographic Module v9.0 (sepOS) |
HW | 2 | 2019-09-10 | ||
| iOS 11 | 3148 | Apple CoreCrypto User Module v8.0 for ARM | SW | 1 | 2018-03-09 2018-05-22 2018-07-06 |
|
| 3147 | Apple CoreCrypto Kernel Module v8.0 for ARM | SW | 1 | 2018-03-09 2018-05-17 2018-07-03 |
||
| 3223 | Apple Secure Key Store Cryptographic Module v1.0 (sepOS) |
HW | 1 | 2019-09-10 | ||
| iOS 10 | 2828 | Apple iOS CoreCrypto Kernel Module v7.0 | SW | 1 | 2017-02-01 | |
| 2827 | Apple iOS CoreCrypto User Module v7.0 | SW | 1 | 2017-02-01 | ||
Previous versions
These previous iOS versions had cryptographic module validations. Those greater than five years old are listed by the CMVP with "historical" status:
- iOS 9 (CoreCrypto modules v6.0)
- iOS 8 (CoreCrypto modules v5.0)
- iOS 7 (CoreCrypto modules v4.0)
- iOS 6 (CoreCrypto modules v3.0)
Common Criteria (CC) certifications
NIAP typically maintain evaluations on the Product Compliant List for two years after which they are reviewed for conformance with the current assurance maintenance policy. The CC Portal may maintain products on the certified product list for five years.
The Common Criteria Portal lists certifications that can be mutually recognized under the Common Criteria Recognition Arrangement (CCRA).
For more information about Common Criteria certifications see Apple Platform Security.
| Scheme ID | Title | Protection Profile(s) | Date Certified | Documents | |
|---|---|---|---|---|---|
| iOS 13 | 11036 | Apple iOS 13 on iPhone and Apple iPadOS 13 on iPad Mobile Devices | PP-Module for MDM Agent Version 1.0 PP-Module for VPN Client Version 2.1 Protection Profile for Mobile Device Fundamentals Version 3.1 Extended Package for Wireless LAN Client Version 1.0 |
2020-09-23 | |
| iOS 12 | 10937 | iPhones and iPads with iOS 12 | Mobile Device Fundamentals VPN Client module Wireless LAN client EP MDM Agent EP |
2019-03-14 | |
| 10960 | iOS 12 Safari | PP for Application SW EP for Web Browsers |
2019-06-12 | ||
| 10961 | iOS 12 Contacts | PP for Application SW | 2019-06-12 | ||
| iOS 11 | 10851 | iPhones and iPads with iOS 11.2 | Mobile Device Fundamentals Wireless LAN client EP MDM Agent EP |
2019-06-12 | |
| 10876 | VPN Client on iPhone and iPad | PP VPN IPSec client | 2018-05-10 | ||
| 10916 | iOS 11 Safari | PP for Application SW EP for Web Browsers |
2018-11-09 | ||
| 10915 | iOS 11 Contacts | PP for Application SW | 2018-09-13 |