® TOV, TUEV and TUV are registered trademarks. Any use or application requires prior approval.

Certificate

Standard

Certificate number

Certificate holder
and developer

Product and
assurance level

Project number

Evaluation facility

FH H
COT
Lo
‘Common Criteria Recognition
Arrangement for components
Fe

„rest

   
  

mon!

SOGIS Mutual Recognition
‘Agreement for components up
to EAL7

Validity

Accredited by the Dutch
Council for Accreditation

www.tuv.com/nl

Common Criteria for Information Technology Security Evaluation (CC),
Version 3.1 Revision 4 (ISO/IEC 15408)

CC-19-119032

TUV Rheinland Nederland B.V. certifies:

Utimaco IS GmbH

Germanusstr. 4, 52080 Aachen, Germany

CryptoServer CP5 Se12 5.0.0.0, CryptoServer CP5 Se52

5.0.0.0, CryptoServer CP5 Se500 5.0.0.0, CryptoServer
CP5 Se1500 5.0.0.0

Assurance Package:
= EAL4 augmented with AVA_VAN.5

Protection Profile Conformance:
= prEN 419 221-5 Protection Profiles for TSP Cryptographic
Modules — Part 5: Cryptographic Module for Trust Services,
v0.15, 2016-11-29, registered under the reference ANSSI-CC-
PP-2016/05

119032

Brightsight BV located in Delft, the Netherlands

Applying the Common Methodology for Information Technology Security
Evaluation (CEM), Version 3.1 Revision 4 (ISO/IEC 18045)

The Designated Certification Body from The Netherlands under Article 30(2) and 39(2) of Regulation 910/2014
declares that:

« the IT product identified in this certificate is (part of) a Qualified Signature/Seal Creation Device (QSCD)
where a qualified trust service provider (QTSP) manages the electronic signature creation data or electronic
seal creation data on behalf of a signatory or of a creator of a seal

+ The IT product meets the requirements laid down in Annex II of Regulation (EU) No 910/2014 OF THE
EUROPEAN PARLIAMENT AND OF THE COUNCIL of 23 July 2014.

‘+ Conformity of the IT product with the requirements of Annex II has been certified with an evaluation process
that fulfils the requirements of Article 30(3.(b)) and the Dutch Conformity Assessment Process (DCAP)

« DCAP includes an assessment of the guidance provided to QTSP users on how to meet the Objectives on
the Operational Environment.

The IT product identified in this certificate has been evaluated at an accredited and licensed/approved evaluation
facility using the Common Methodology for IT Security Evaluation version 3.1 Revision 4 for conformance to the
Common Criteria for IT Security Evaluation version 3.1 Revision 4. This certificate applies only to the specific
version and release of the product in its evaluated configuration and in conjunction with the complete certification
report. The evaluation has been conducted in accordance with the provisions of the Netherlands scheme for
certification in the area of IT security [NSCIB] and the conclusions of the evaluation facility in the evaluation
technical report are consistent with the evidence adduced. This certificate is not an endorsement of the IT product
by TÜV Rheinland Nederland B.V. or by other organisation that recognises or gives effect to this certificate, and
no warranty of the IT product by TÜV Rheinland Nederland B.V. or by any other organisation that recognises or
gives effect to this certificate, is either expressed or implied.

Date of 1% issue : 09-10-2018

Date of 2" issue : 14-03-2019
Certificate expiry : 09-10-2023

    

  

C.CiM> louten, LSM Systems

TUY Rheinland Nederland B.V.
Westervoortsedijk 73, 6827 AV Amhem
P.O. Box 2220, NL-6802 CE Arnhem
The Netherlands

TUVRheinland®
Precisely Right.