Common Criteria Certification
The Solaris 10 11/06 release of Trusted Extensions has finally received its Common Criteria certification. Like it's predecessor, Trusted Solaris 8, the assurance rating is EAL4+ in conformance with the Controlled Access, Role-Based Access, and Label Security Protection Profiles. The evaluation was performed by CGI Information Systems & Management Consultants Inc, and is listed on the Canadian Common Criteria list of certified products. You can also view the certificate and the Security Target on this page. The evaluated configuration, described in Section 2.3, page 8, is the most comprehensive for any product at this level. Among the Solaris features included are both the JDS (GNOME) and CDE desktops, the Solaris Management Console, both SPARC, x64 and x86 hardware, UFS, ZFS and NFS, and a distributed configurations administered using LDAP.
The currently shipping release, Solaris 10 5/08, will go through the rating maintenance process so that the certification can be applied to the latest software and hardware.
Posted at 06:33PM Jun 23, 2008 by gfaden in Sun | Comments[2]
Congratulations, very impressive feat. Now maybe the powers that be will start using it. Looks like I'll be doing a lot of reading this weekend.
Posted by sastrugi on June 24, 2008 at 02:25 AM PDT #
Congratulations, Glenn!
Question: I followed some of the links and noted a sunset date on LSPP, which on the same line, referenced this page:
http://www.niap-ccevs.org/cc-scheme/pp/PP_OS_ML_MR2.0_V1.91.cfm
Are you planning for Solaris 10 TX to get that certification as well?
Posted by John Jesus on June 25, 2008 at 05:03 AM PDT #