Tim Myers' FAQ / Blog

Windows 7 and Windows Server 2008 R2 in Common Criteria Evaluation

timmyers — Thu, 05 Nov 2009 14:51:00 GMT

Microsoft Windows 7 and Microsoft Windows Server 2008 R2 formally entered evaluation for Common Criteria Evaluation Assurance Level 4 augmented with flaw remediation (ALC_FLR.3), commonly referred to as EAL4+. The Protection Profile in use is PP_GPOSPP_V7....(read more)

Windows Server 2003 Web Edition and CC Revisited

timmyers — Wed, 30 Sep 2009 21:01:00 GMT

Microsoft Windows Server 2003 Web Edition is a proper subset of the Windows Server 2003 editions that were included in the Target of Evaluation (TOE) of several Common Criteria security evaluations. The Web Edition has no more security functions than...(read more)

Windows Vista and Windows Server 2008 are Common Criteria Certified at EAL4+

timmyers — Wed, 23 Sep 2009 21:13:00 GMT

Microsoft Windows Vista and Microsoft Windows Server 2008 received their Common Criteria (CC) certificate on September 23 rd at the 10 th International Common Criteria Conference in Tromsø, Norway. The CC Evaluation Assurance Level is 4 (EAL4+). The target...(read more)

Microsoft Windows Server 2008 Hyper-V Role is now Common Criteria Certified at EAL4+

timmyers — Wed, 23 Sep 2009 21:05:00 GMT

Microsoft Windows Server 2008 Hyper-V Role has successfully completed validation against the Common Criteria at Evaluation Assurance Level 4 augmented by ALC_FLR.3 Flaw Remediation (EAL4+). The German Bundesamt für Sicherheit in der Informationstechnik...(read more)

Windows Mobile 6.1 Certified with Common Criteria at EAL4

timmyers — Wed, 23 Sep 2009 20:53:00 GMT

Windows Mobile 6.1 with System Center Mobile Device Manager 2008 and System Center Mobile Device Manager 2008 Service Pack 1 (SP1) have been validated at Common Criteria (CC) Evaluation Assurance Level 4 (EAL4). The CC evaluation was conducted by Stratsec...(read more)

Does Microsoft plan to evaluate Windows 7 and Windows Server 2008 R2 under CC?

timmyers — Wed, 05 Aug 2009 01:35:00 GMT

Q: Does Microsoft plan to evaluate Windows 7 and Windows Server 2008 R2 under CC? A: Microsoft has evaluated every release of the Windows NT product family under Common Criteria, both Client and Server versions, since Windows 2000. It is currently our...(read more)

The Database Engine of Microsoft SQL Server 2005 SP2 Common Criteria Certification

timmyers — Wed, 08 Jul 2009 17:55:00 GMT

The Database Engine of Microsoft SQL Server 2005 SP2, Enterprise Edition (English) Version 9.00.3068.00 was validated/certified as meeting Evaluation Assurance Level 4 Augmented (EAL4+) in a CC evaluation. The certification includes verification of compliance...(read more)

Microsoft SQL Server 2000 TCSEC Class C2 Certification

timmyers — Wed, 08 Jul 2009 17:48:00 GMT

Microsoft SQL Server 2000 was validated against the DoD/NSA NCSC Trusted Computer System Evaluation Criteria ( TCSEC ). Its rating was Class C2 . This kind of security evaluation was a predecessor to the Common Criteria (CC). Unfortunately, the DoD/NSA...(read more)

Has Windows Storage Server 2003 SP1 been Common Criteria Certified?

timmyers — Thu, 18 Jun 2009 19:38:00 GMT

No, Windows Storage Server 2003 SP1 has not been certified/validated in a Common Criteria (CC) evaluation. An inspection of the Security Targets and Validation Reports for the following evaluated products should help you determine whether the components...(read more)

SharePoint DoD 5015.2 Certification

timmyers — Wed, 15 Apr 2009 00:39:00 GMT

Microsoft Office SharePoint Server 2007 with DoD Add-On Pack complies with the DoD 5015.02-STD Joint Interoperability Test Command (JITC) Records Management Application (RMA) Design Criteria Standard rather than the Common Criteria. Press http://www.informationweek.com/news/windows/showArticle.jhtml?articleID=199703089...(read more)

SQL Server 2008 Database Engine CC Validated at EAL1+

timmyers — Wed, 08 Apr 2009 19:21:00 GMT

The Database Engine of Microsoft SQL Server 2008 Enterprise Edition (English) x86 and x64, Version 10.0.1600.22 was Common Criteria validated / certified at EAL1+ by the BSI in Germany. The certification report and security target are available here:...(read more)

Has Windows Server 2003 Web Edition been certified?

timmyers — Fri, 27 Mar 2009 19:33:00 GMT

It is understood that there are no plans to evaluate the Web Edition of Windows Server 2003 against the Common Criteria (CC). There isn't anything contained in the Web Edition that you can't find in the Standard Edition, Enterprise Edition, or Datacenter...(read more)

Internet Security and Acceleration (ISA) Server 2006 is Common Criteria Certified

timmyers — Mon, 09 Mar 2009 20:14:00 GMT

Microsoft Internet Security & Acceleration (ISA) Server 2006 has been validated and certified to have met Common Criteria Evaluation Assurance Level 4 with augmentation of AVA_VLA.3 and ALC_FLR.3 (EAL4+.) For details, please see the ISA team blog:...(read more)

Composite Common Criteria Evaluations

timmyers — Wed, 04 Mar 2009 19:08:00 GMT

Composite Common Criteria evaluations -- those that have a dependency on another CC evaluation, i.e., SQL Server and Windows Server -- can proceed in parallel. It is my understanding from the 8th ICCC that the other component/platform evaluation needn't...(read more)

When will SP 1,2,3,… be CC certified?

timmyers — Tue, 24 Feb 2009 02:39:00 GMT

Generally, we do not certify every Service Pack (SP), just major product releases. For example, our customers have seen a long term commitment by Microsoft to certify each major release of Windows. If a new SP’s ship date happens to line up with the conclusion...(read more)