iOS security certifications
iOS certification background
Apple actively engages in the provision of security assurance of iOS for each major release of an operating system using appropriate Protection Profiles and for the cryptographic modules, FIPS 140-3 requirements.
Validation of conformance can be performed only against a final released version of iOS.
iOS cryptographic module validation status
The Cryptographic Module Validation Program (CMVP) maintains the validation status of cryptographic modules under three separate lists depending on their current status.
For more information, see Cryptographic module validation status information.
FIPS 140-3 certifications
The table below shows the Apple cryptographic modules that are currently being tested by a laboratory, that have been recommended by a laboratory for validation by the CMVP, or that have been validated and certified as conformant to FIPS 140-3 by the CMVP.
Dates | Certificates/Documents | Module info |
|---|---|---|
Operating system release date: 2022 Validation dates: — | Certificates: Not yet certified | Title: Apple Corecrypto Module v13 Operating system: iOS 16 Environment: ARM, User, Software Type: Software Overall Security Level: 1 |
Operating system release date: 2022 Validation dates: — | Certificates: Not yet certified | Title: Apple Corecrypto Module v13 Operating system: iOS 16 Environment: ARM, Kernel, Software Type: Software Overall Security Level: 1 |
Operating system release date: 2022 Validation dates: — | Certificates: Not yet certified | Title: Apple Corecrypto Module v13 Operating system: sepOS distributed with iOS 16 Environment: ARM, Secure Key Store, Hardware Type: Hardware (A9-A12) Overall Security Level: 2 |
Operating system release date: 2022 Validation dates: — | Certificates: Not yet certified | Title: Apple Corecrypto Module v13 Operating system: sepOS distributed with iOS 16 Environment: ARM, Secure Key Store, Hardware Type: Hardware (A13-A16) Overall Security Level: 2 Physical Security Level: 3 |
Operating system release date: 2021 Validation dates: 01-10-2024 | Certificates: 4817 | Title: Apple Corecrypto Module v12 Operating system: iOS 15 Environment: ARM, User, Software Type: Software Overall Security Level: 1 |
Operating system release date: 2021 Validation dates: — | Certificates: Not yet certified | Title: Apple Corecrypto Module v12 Operating system: iOS 15 Environment: ARM, Kernel, Software Type: Software Overall Security Level: 1 |
Operating system release date: 2021 Validation dates: — | Certificates: Not yet certified | Title: Apple Corecrypto Module v12 Operating system: sepOS distributed with iOS 15 Environment: ARM, Secure Key Store, Hardware Type: Hardware (A9-A12) Overall Security Level: 2 |
Operating system release date: 2021 Validation dates: — | Certificates: Not yet certified | Title: Apple Corecrypto Module v12 Operating system: sepOS distributed with iOS 15 Environment: ARM, Secure Key Store, Hardware Type: Hardware (A13-A15) Overall Security Level: 2 Physical Security Level: 3 |
Operating system release date: 2020 Validation dates: 07-12-2022 | Certificates: 4391 | Title: Apple Corecrypto Module v11.1 Operating system: iOS 14 Environment: ARM, User, Software Type: Software Overall Security Level: 1 |
Operating system release date: 2020 Validation dates: 07-12-2022 | Certificates: 4392 | Title: Apple Corecrypto Module v11.1 Operating system: iOS 14 Environment: ARM, Kernel, Software Type: Software Overall Security Level: 1 |
Operating system release date: 2020 Validation dates: 09-08-2024 | Certificates: 4756 | Title: Apple Corecrypto Module v11.1 Operating system: sepOS distributed with iOS 14 Environment: Apple silicon, Secure Key Store, Hardware Type: Hardware (A9-A14) Overall Security Level: 2 |
Operating system release date: 2020 Validation dates: 09-08-2024 | Certificates: 4757 | Title: Apple Corecrypto Module v11.1 Operating system: sepOS distributed with iOS 14 Environment: ARM, Secure Key Store, Hardware Type: Hardware (A13-A14) Overall Security Level: 2 Physical Security Level: 3 |
FIPS 140-2 certifications
The table below shows the cryptographic modules that are certified by the CMVP as conformant with FIPS 140-2.
Dates | Certificates/Documents | Module info |
|---|---|---|
Operating system release date: 2019 Validation dates: 23-03-2021 | Certificates: 3856 | Title: Apple Corecrypto User Module v10.0 for ARM Operating system: iOS 13 Type: Software Security Level: 1 |
Operating system release date: 2019 Validation dates: 23-03-2021 | Certificates: 3855 | Title: Apple Corecrypto Kernel Module v10.0 for ARM Operating system: iOS 13 Type: Software Security Level: 1 |
Operating system release date: 2019 Validation dates: 05-02-2021 | Certificates: 3811 | Title: Apple Secure Key Store Cryptographic Module v10.0 Operating system: sepOS distributed with iOS 13 Type: Hardware Security Level: 2 |
Previous versions
These iOS versions previously had cryptographic module validations. Those more than five years old are listed by the CMVP with historical status:
2018 in iOS 12 (corecrypto modules v6.0)-FIPS 140-2
2017 in iOS 11 (corecrypto modules v6.0)-FIPS 140-2
2016 in iOS 10 (corecrypto modules v6.0)-FIPS 140-2
2015 in iOS 9 (corecrypto modules v6.0)-FIPS 140-2
2014 in iOS 8 (corecrypto modules v5.0)-FIPS 140-2
2013 in iOS 7 (corecrypto modules v4.0)-FIPS 140-2
2012 in iOS 6 (corecrypto modules v3.0)-FIPS 140-2
Common Criteria (CC) certification background
Apple actively engages in the evaluation of iOS for each major release of the operating system. Evaluation can only be performed against a final publicly released version of the operating system. Prior to iPadOS 13.1, iPadOS was named iOS.
Common Criteria (CC) certification status
The US scheme, operated by the National Information Assurance Project (NIAP), maintains a list of Products in Evaluation; this list includes products that are currently undergoing evaluation in the United States with a NIAP-approved Common Criteria Testing Laboratory (CCTL) and that have completed an Evaluation Kickoff Meeting (or equivalent) in which CCEVS management officially accepts the product into evaluation.
For more information, see Common Criteria (CC) certification status information.
The table below shows the certifications that are currently being evaluated by a laboratory or that have been certified as conforming with Common Criteria.
Operating system / Certification date | Scheme ID / Documents | Title / Protection Profiles |
|---|---|---|
Operating system: iOS 17 Certification date: — | Scheme ID: Not yet certified | Title: Apple iOS 17: iPhones Protection Profiles: PP-Configuration for Mobile Device Fundamentals, Biometric enrolment and verification for unlocking the device, Bluetooth, MDM Agents, Virtual Private Network (VPN) Clients, WLAN Clients |
Operating system: iOS 16 Certification date: 10-10-2023 | Scheme ID: 11349 | Title: Apple iOS 16: iPhone devices Protection Profiles: PP-Configuration for Mobile Device Fundamentals, Biometric enrolment and verification for unlocking the device, Bluetooth, MDM Agents, Virtual Private Network (VPN) Clients, WLAN Clients |
Operating system: iOS 15 Certification date: 04-11-2022 | Scheme ID: 11237 | Title: Apple iOS 15: iPhones Protection Profiles: Mobile Device Fundamentals, VPN Client module, WLAN Clients PP Module, MDM Agent EP, TLS package |
Archived Common Criteria certifications for iOS
These previous iOS versions had Common Criteria validations. They are archived by NIAP according to the NIAP policy:
Operating system / Certification date | Scheme ID / Documents | Title / Protection Profiles |
|---|---|---|
Operating system: iOS 14 Certification date: 01-09-2021 | Scheme ID: 11146 | Title: Apple iOS 14: iPhones Protection Profiles: Mobile Device Fundamentals, VPN Client module, WLAN Clients PP Module, MDM Agent EP |
Operating system: iOS 13 Certification date: 06-11-2020 | Scheme ID: 11036 | Title: iPhone with iOS 13 Protection Profiles: Mobile Device Fundamentals, VPN Client module, WLAN Clients EP, MDM Agent EP |
Operating system: iOS 12 Certification date: 14-03-2019 | Scheme ID: 10937 | Title: iPhone with iOS 12 Protection Profiles: Mobile Device Fundamentals, VPN Client module, Wireless LAN client EP, MDM Agent EP |
Operating system: iOS 11 Certification date: 17-07-2018 | Scheme ID: 10851 | Title: Apple iOS 11 Protection Profiles: Mobile Device Fundamentals, Wireless LAN client EP, MDM Agent EP |
Operating system: iOS 10 Certification date: 27-07-2017 | Scheme ID: 10782 | Title: iOS 10.2 on iPhone and iPad Devices Protection Profiles: Mobile Device Fundamentals, Wireless LAN client EP, MDM Agent EP |
Operating system: iOS 10 Certification date: 27-07-2017 | Scheme ID: 10792 | Title: iOS 10.2 VPN Client on iPhone and iPad Protection Profiles: VPN Client PP |
Operating system: iOS 9 Certification date: 14-10-2016 | Scheme ID: 10725 | Title: iOS 9.3.2 with MDM Agent Protection Profiles: Mobile Device Fundamentals, MDM Agent EP |
Operating system: iOS 9 Certification date: 13-10-2016 | Scheme ID: 10714 | Title: OS VPN Client on iPhone and iPad Protection Profiles: VPN Client PP |
Operating system: iOS 9 Certification date: 28-01-2016 | Scheme ID: 10695 | Title: iOS 9 Protection Profiles: Mobile Device Fundamentals |
For questions about Apple Security and Privacy Certifications, contact security-certifications@apple.com.