Indian Common C teria Creation Scheme (1C3S) Government of India Ministry of Electronics & Information Technology, STQC Directorate 6 CGO Complex, New Delhi 110003_. 2 ri Certificate Number: IC3S/KOLO1/ADVA/EAL2/0421/0030 Product Name: Scalable Optical Transport Solution FSP 3000R7 Operating System (CC), Version R7 Rel.21.1.1 Assurance Level: EAL 2 Certificate Report No: IC3S/KOLO1/ADVA/EAL2/0421/0030/CR, Version: 1.0, Dated: 16-09-2022 The product identified in the certificate has been evaluated under the terms and conditions of the Indian Common Criteria Certification Scheme (IC3S), at Common Criteria Test Laboratory, ERTL (East), Kolkata, India the accredited testing laboratory using the Common Methodology for IT Security Evaluation (Version 3.1 Revision 5) for conformance to the Common Criteria for IT Security Evaluation (Version 3.1 Revision 5). This certificate applies only to specific version and release of the product in its evaluated configuration (Refer Annexure and Certification Report). The product’s functional and assurance security specifications are contained in the Security Target, and the conclusions of the Common Criteria Testing Laboratory in the evaluation technical report are consistent with the evidence produced. (Details at Annexure-I) This certificate is not an endorsement of the product by any agency of the Government of India and no warranty of the product is either expressed or implied. Date of Issue: 19.10.2022 Head IC3S Certification Body Certificate Expiry: 18.10.2027 Annexure- I Indian Common Criteria Certification Scheme (IC3S) Government of India, Ministry of Electronics & Information Technology STQC Directorate, 6 CGO Complex, New Delhi 110003 Common Criteria Certificate Number: IC3S/KOLO1/ADVA/EAL2/0421/0030 The scope of the evaluation and the assumed usage environment are specified in the body of Certification Report No. IC3S/KOLO1/ADVA/EAL2/0421/0030/CR, Version: 1.0, Dated: 16-09-2022, which is available in the website: https: / /commoncriteria-india.gov.in Sponsor M/s ADVA OPTICAL NETWORKING SE, Fraunhoferstr.9a 82152 Martinsried, Munich, Germany Developer M/s ADVA OPTICAL NETWORKING SE, Fraunhoferstr.9a 82152 Martinsried, Munich, Germany ‘Security Target Reference Identification FSP 3000R7 Operating System Release 21.1.1 Common Criteria Certification Security Target, version 4.0 Product and Version Scalable Optical Transport Solution FSP 3000 Operating System, version R7 Rel, 21.1.1 and its related guidance documentation. TOE in short: FSP 3000R7 Operating System (CC) TOE Version: R7 Ref. 21.1.1 Target of Evaluation Scalable Optical Transport Solution FSP 3000 Operating System, version R7 Rel. 21.1.1 and its related guidance documentation. TOE in short: FSP 3000R7 Operating System (CC) TOE Version: R7 Rel. 21.1.1 Evaluated Configuration TOE Component Description NCU-II/ NCU-3 operating system Part of the NCU (NCU-II or NCU-3) cards is the operating system of the FSP 3000R7 family. The evaluated operating system is R7 Rel. 21.1.1 Users’ Manual | In addition the following guidance documents are part of the TOE: (AGD_OPE) + FSP3000R7_R21.1_High-Density_Subshelf Guide_IssA.pdf FSP3000R7_R21.1_Hardware_Description_IssA.pdf FSP3000R7_R21.1_Installation and Commissioning Manual_IssA.pdf FSP3000R7_R21.1_Maintenance_and_Troubleshooting Manual_IssA.pdf FSP3000R7_R21.1_Management_Data_Guide_IssA.pdf FSP3000R7_R21.1_Module_System_Specification_IssA.pdf FSP3000R7_R21.1_NETCONF_User_Guide_IssA.pdf FSP3000R7_R21.1_Network Element_Director_Help_IssA.pdf FSP3000R7_R21.1_Network Element_Director_Quick Start_Guide_IssA.pdf FSP3000R7_R21.1_Provisioning_and_Operations_Manual_IssA.pdf FSP3000R7_R21.1_Safety_Guide_IssA.pdf FSP3000R7_R21.1_Secure_System_Configuration_Guide_IssA.pdf FSP3000R7_R21.1_System_Description_IssA.pdf FSP3000R7_R21.1_TL1_Commands and_Syntax_Guide_IssA.pdf FSP3000R7_R21.1_TL1_Maintenance_and_Troubleshooting Manual IssA.pdf « _ FSP3000R7_R21.1 TL1_Module_Parameters_Guide_IssA.pdf Environment ‘The TOE is the operating system of the FSP 3000R7 system that can be installed in the NCU-II card or NCU-3 card. The NCU-II and NCU-3 are network element control (NCU) units providing system management capabilities and network connection to the FSP 3000R7 system. The NCU must be installed in the master shelf and requires a shelf control unit (SCU, SCU-S, SCU-II) in each (master + any additional) shelf to communicate with the modules. The NCU-3 requires a shelf control unit of type SCU-II. To ensure that sensitive data is transmitted to and from the TOE the TOE will provide encryption for these communication paths between themselves and the endpoint. These channels are implemented using following standard protocols: HTTPS (TLS), SSH, and SNMPv3. The hardware (mainboard, casing, interface modules) is not in the scope of the evaluation unless addressed by any assumption relating the operational environment. Compliance to CC Part 2 Complied Compliance to CC Part 3 Complied Evaluation Assurance Level (EAL) EAL 2 Evaluation Lab Common Criteria Test Laboratory (CCTL), ERTL ( East) , Kolkata, India Date of Issue: 19.10.2022 Certificate Expiry: 18-10-2027 Head IC3S Certification Body (N.B.: Additional detailing about the product and its configuration may be provided with appropriate reference.)