®

Federal Office

 

 

 

 

 

 

 

 

for Information Security a
‘Common Criteria be)
CYBERSECURITY CERTIFICATION | MAYS os

 

EUCC-3087-2026-04-0005(*)
Administration ID BSI-DSZ-CC-0827-V11-2026 Common Criteria

Smartcard Controller
Infineon Technologies Security Controller M9900 A22/C22/D22,
M9905 A11, M9906 A11

 

Holder of the Certificate: Infineon Technologies AG
Am Campeon 1-15
85579 Neubiberg
https://www.infineon.com/product-
information/cybersecurity-information NL
Evaluation Facility: TUV Informationstechnik GmbH Recognition Arrengemant
Unternehmensgruppe TUV NORD recognition for components up to EAL 2
Am TUV 1 and ALC_FLR only
45307 Essen
Assurance Level: EUCC High with component AVA_VAN.5
Assurance Package: EAL 5
DAKkS
Augmentation: ALC_DVS.2 and AVA_VAN.5 ( Deutsche elle
PP Conformance: Security IC Platform Protection Profile with 02E-19615-01-00

Augmentation Packages Version 1.0, 13
January 2014, BSI-CC-PP-0084-2014

valid until: 14 April 2031

The ICT Product identified in this certificate and its attached certification report has been
evaluated at the above mentioned notified evaluation facility using the Common
Methodology for IT Security Evaluation (CEM) in application of relevant state-of-the-art
documents for the AVA_VAN components 4 and 5 as well as the application notes and
interpretations on advice by the Certification Body in the versions published at the time
the conformity assessment was carried out. The CC and CEM used for the evaluation of
the above mentioned ICT product are published as ISO/IEC 15408 and ISO/IEC 18045
or as CC:2022 and CEM:2022.

(*) This certificate applies only to the specific version and release of the ICT product in its
evaluated configuration and in conjunction with the complete Certification Report and
Notification. For details see Certification Report part A chapter 5.

The evaluation has been conducted in accordance with the provisions of Commission
Implementing Regulation (EU) 2024/482 of 31 January 2024 laying down rules for the
application of Regulation (EU) 2019/881 of the European Parliament and of the Council
as regards the adoption of the European Common Criteria-based cybersecurity
certification scheme (EUCC) and the conclusions of the evaluation facility in the
evaluation technical report are consistent with the evidence adduced.

Bonn, 13 April 2026
For the Federal Office for Information Security

    
   
 

Markus Mackenbrock i >» Amendola
Deputy Head of Certification £torGeneral Directorate General S

Bundesamt für Sicherheit in der Informationstechnik
Godesberger Allee 87 - D-53175 Bonn - Postfach 20 03 63 - D-53133 Bonn
Phone +49 (0)228 99 9582-0 - Fax +49 (0)228 9582-5477 - Infoline +49 (0)228 99 9582-111
This certificate is not an endorsement of the IT Product by the Federal Office for Information Security or any
other organisation that recognises or gives effect to this certificate, and no warranty of the IT Product by the
Federal Office for Information Security or any other organisation that recognises or gives effect to this
certificate, is either expressed or implied.

This certificate and its holder are both subject to obligations and monitoring activities as specified in
Commission Implementing Regulation (EU) 2024/482. This certificate, its holder and its issuer are
furthermore subject to compliance rules and supervision by the National Cybersecurity Certification
Authority as established at Federal Office for Information Security, Division S 14, Freital, Email:

ncca@bsi.bund.de.

vio CC-Zen-304 EUCC-V5.5