Hi Andrea Spinoglio,
The designation "OEM" in the ISO filename does not indicate that the operating system is locked to specific vendor hardware. Within Microsoft's internal build taxonomy, the string "CLIENT_ENTERPRISES_OEM" simply identifies the initial, hardware-agnostic Release to Manufacturing base image distributed before general availability. The independent testing laboratory utilized this exact baseline build, which is why the Administrative Guide mandates it to ensure the audited environment remains completely static.
You cannot find this specific ISO or match its hash on standard Microsoft portals because platforms like the Microsoft 365 Admin Center are frequently updated with refresh media containing the latest cumulative updates. These refreshes supersede and hide the original base version, resulting in a hash mismatch when verified against the certification documentation.
To obtain the exact bit-for-bit match required for your Common Criteria audit, first check your portal for previous, archived versions of Windows 11 24H2. If base build 10.0.26100.1 is unavailable there, you must contact your Microsoft Technical Account Manager or open a ticket with Microsoft Enterprise Support to request secure access to this specific archived baseline media.
Hope this answer brought you some useful information. If it did, please hit “accept answer”. Should you have any questions, feel free to leave a comment.
DOmic V.