Indian Common Criteria Certification Scheme (C35) Government of India Ministry of Electronics & Information Technology, STQC Directorate 6 CGO Complex, New Delhi 110003 Certificate Number: 1C35/BG01/ARCON/EAL2/0119/0015 Product Name: ARCON PAM Version 4.8 comprising of Vault Server 4.8 and Application Server 4.8 Assurance Level: EAL 2+ (Augmented with ALC_DVS.1) Certificate Report No: 1C35/8G01/ARCON/EAL2/0119/0015/CR Version: 1.0, Dated: 30.08.2023 The product identified in the certificate has been evaluated under the terms and conditions of the Indian Common Criteria Scheme (IC3S), at CCTL, ETDC Bengaluru accredited testing laboratory using the Common Methodology for IT Security Evaluation (Version 3.1) for conformance to the Common Criteria for IT Security Evaluation (Version 3.1). P This certificate applies only to specific version and release of the product in its evaluated configuration (Refer Annexure and Certification Report). The product's functional and assurance security specifications are contained in the Security Target and the conclusions of the Common Criteria Testing Laboratory in the evaluation technical report are consistent with the evidence adduced. This certificate is not an endorsement of the product by any agency of the Government of the India and no warranty of the product is either expressed or implied. Date of Issue: 26.09.2023 \ iA Certificate Expiry: 25.09.2028 Head IC3S Ce! fon Body Common Criteria Annexure to Common Criteria Certificate Number: IC3S/BGO1/ARCON/EAL2/0119/0015/CR Indian Common Criteria Certification Scheme (1C3S) Government of India, Ministry of Electronics & Information Technology STQC Directorate, 6 CGO Complex, New Delhi 110003 The product below has been evaluated under the terms of Indian Common Criteria Certification Scheme (IC3S) and has met the stated Common Criteria requirements. The scope of the evaluation and the assumed usage environment are specified in the body of Certification Report No 1C35/BG01/ARCON/EAL2/0119/0015/CR Version: 1.0, Dated 30.08.2023, which is available in the website: www.com! ria-indis Sponsor ARCON TechSolutions Pvt. Ltd. 901, Kamla Executive Park, Off Andheri-Kurla Road, JB Nagar, Andheri (E), Mumbai - 400059 Developer ARCON TechSolutions Pvt. Ltd. 901, Kamla Executive Park, Off Andheri-Kurla Road, JB Nagar, Andheri (E), Mumbai — 400059, India Security Target Reference Identification ARCON PAM Version 4.8 Security Target, Version 1.6 date of release: 15-05-2023 Product and Version ARCON PAM Version 4.8 comprising of Vault Server 4.8 and Application Server 48 Target of Evaluation ARCON PAM Version 4.8 comprising of Vault Server 4.8 and Application Server 48 Evaluated Configuration As in Annexure A Environment TOE components run on top of Microsoft Windows Server and has following requirements . Vault Server requires Microsoft SQL Server . ‚Application Server requires Internet Information Server Compliance to CC Part 2 Conformant Compliance to CC Part 3 Conformant Evaluation Assurance Level (EAL) EAL 2+ (Augmented with ALC_DVS.1) Evaluation Lab Common Criteria Test Laboratory, CCTL, ETDC, Bengaluru Date Authorized 17-05-2019 Date of Issue: 26.09.2023 Certificate Expiry: 25.09.2028 (01.8: Additional detaling about the product and its configuration may be provided with appropriate reference.) Annexure - A: Configuration of the TOE Product (TOE): ARCON PAM Version 4.8 comprising of Vault Server 4.8 and Application Server 4.8 ARCON PAM v4.8: e Build Number: 4850U4 SP2 e Buid Date: 18th May 2022 e Version Number: 4.8 Detail of evaluated configuration of the TOE. Product (TOE): ARCON PAM Version 4.8 comprising of Vault Server 4.8 and Application Server 4.8) The SHA256 hash of the TOE as given below Configuration Item Version Size SHA256 ARCOSServerManager | 4.8.5.0 6,438 ddb1414abbdfe486cc6623a509d8ce58b85864 .exe KB aff2fcba0f 617f7d012073818f ARCOSClientManager | 4.8.5.0 1,298 bf6b01 ebfb 1 8e34d£663026295280125afbc%e Online.dll KB 5615328bb 65607617f35a71bdb ARCOSClientManager | 8.0.0.0 42 KB | 9941483b704608b87148f249d3a3a64eba089f ActiveX.dll e86d96fc1 a2f7111cf5b48cdd4 ARCON.Common.dil | 5.2.45.6171 113 KB | 07142854800b1260d144e35c81cfdb12c893d 94035151c d486203189fc36421e ARCON.NetworkSecur | 5.2.45.6171 373 KB | 015c3ef9ab1f8de7e3c3a44c99072356dbd24d e.dil 81055838f 7e0fbeSbf32a7846a ARCONSWinsockCont | 4.0.0.0 76KB | 23aa9a636c9289330213574dafs5lel 852e06d rol.dil 59a48cf2a f542f10422e8945b3 ARCOSPasswordGener | 4.7.9.1 22KB | 0e2212dbdf8cd00979e49f5bb356baf7b5bc08 ator.dil 097a22bb 673753cde1f05f9704 ARCON.Network.DLL | 5.2.45.6171 90KB | 49a4d1342ab9f007675b55c11f59c459f43365 e0e7bea16 e47877c9e843257a9 ARCONACMOCommo | 4.8.5.0 321 KB | 8e7613698ed82b461e08645033b1 5ba74f417 nFunctions.dil 27da72c68 e9f66242ebfdd18a3f ARCONCommonLibrar | 1.0.0.0 1,825 74e61d9bd759b0ad7dd7645037ff5dd8ff86aa y.dil KB 2dal45al 62b3a5db4b1421eaaS ARCONCommonLibrar | 1.0.0.01 29 KB | a7f3c25e448c8129709be5d92f82feca651c05 y.XmiSerializers.dil df74629cb 7ce38ea6e5495f536 ARCONPAMSecurity. | 2.0.0.0 37 KB | 80e7b9c4f9700c7fdbe92 1 aSee171ecd3c0a78 dil b802f63c33 f336d0ed8c96b50a Date of Issue: 26.09.2023 Certificate Expiry: 25.09.2028