Windows Vista and Windows Server 2008 are on the NIAP CCEVS Validated Products List

Microsoft Windows Vista and Microsoft Windows Server 2008 were Common Criteria (CC) validated on August 31, 2009. The CC conformance claim is Evaluation Assurance Level 4 (EAL4) augmented with flaw remediation ALC_FLR.3 and vulnerability analysis AVA_VLA.3 (EAL4+).

The certificate, security target, and validation report are now available here:

https://www.niap-ccevs.org/st/vid10291/

A listing on the global Common Criteria Portal should appear here soon:

https://www.commoncriteriaportal.org/products.html