I am currently working on an application running in Windows 7 Ultimate, and it has to be FIPS 140-2 compliance.
As far as I have researched in https://technet.microsoft.com/en-us/library/security/cc750357.aspx, there is a kind of validation process which consist in set a policy setting (secpol.msc) for using FIPS algorithms. The other step consist in checking that a few binaries (cng.sys, bcryptprimtive.dll) are the same version than the validated from NIST. http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140val-all.htm#1328
I am having troubles with this last step, the thing is that I cannot find any place where it is said how to modified these binaries, e.g. hotfix, downgrade separatly these binaries, ... Could somebody help me or clarify me this issue? Is it necessary to have the versions from NIST validated list?
Is there any way which I could validate that my system is FIPS 140-2 validated? According to the first url, cng.sys version should be the same than the validated on the list. What if my cng.sys version is not contained in that list?