SUSE Linux Enterprise Server, Version 15 SP4

Known vulnerabilities detected

Our automated heuristics have identified vulnerabilities that may be associated with this certificate. See the CVEs section for details.

CSV information

Status active
Valid from 27.01.2026
Valid until 27.01.2031
Scheme 🇩🇪 DE
Manufacturer SUSE LLC
Category Other Devices and Systems
Security level
Protection profiles

Heuristics summary

Certificate ID: BSI-DSZ-CC-1231-2026

Certificate

Extracted keywords

Protocols
SSH

Security level
EAL 4, EAL 2
Security Assurance Requirements (SAR)
ADV_FSP.1, AGD_OPE.1, AGD_PRE.1, ALC_CMC.1, ALC_TSU_EXT.1, ALC_FLR, ATE_IND.1, AVA_VAN.1, ASE_CCL.1, ASE_ECD.1, ASE_INT.1, ASE_OBJ.2, ASE_REQ.2, ASE_SPD.1, ASE_TSS.1
Certificates
BSI-DSZ-CC-1231-2026

Standards
ISO/IEC 15408, ISO/IEC 18045

File metadata

Title Certificate BSI-DSZ-CC-1231-2026
Subject Common Criteria, Certification, Zertifizierung, Protection Profile for Virtualization, Linux-based, Server Virtualization, BSI-DSZ-CC-1231-2026
Keywords "Common Criteria, Certification, Zertifizierung, Protection Profile for Virtualization, Linux-based, Server Virtualization, BSI-DSZ-CC-1231-2026"
Author Federal Office for Information Security
Pages 1

Certification report

Extracted keywords

Symmetric Algorithms
AES, HMAC
Asymmetric Algorithms
ECDH, ECDSA, ECC, DH, Diffie-Hellman
Hash functions
SHA-256, SHA-512, SHA-2
Schemes
Key Exchange, KEX, Key agreement
Protocols
SSH, SSHv2, IKEv2, IKE
Randomness
RNG
Libraries
OpenSSL
Elliptic Curves
P-256, P-384, P-521
Block cipher modes
CTR, GCM

Security level
EAL 4, EAL 2, EAL 1
Claims
OE.CONFIG, OE.PHYSICAL, OE.TRUSTED_ADMIN, OE.NON_MALICIOUS_USER
Security Assurance Requirements (SAR)
ADV_FSP.1, AGD_OPE.1, AGD_PRE.1, ALC_CMC.1, ALC_TSU_EXT.1, ALC_FLR, ATE_IND.1, AVA_VAN.1, ASE_CCL.1, ASE_ECD.1, ASE_INT.1, ASE_OBJ.2, ASE_REQ.2, ASE_SPD.1, ASE_TSS.1
Security Functional Requirements (SFR)
FCS_SSH_EXT.1.5, FCS_SSH_EXT.1.4, FTP_ITC_EXT.1
Certificates
BSI-DSZ-CC-1231-2026
Evaluation facilities
atsec

Certification process
being maintained, is not given any longer. In particular, prior to the dissemination of confidential documentation and information related to the TOE or resulting from the evaluation and certification, 6] Evaluation Technical Report, Version 5, 2026-01-21, Final Evaluation Technical Report, atsec (confidential document) [7] Protection Profile for Virtualization, Version 1.1, 2021-06-14; https://www.niap- ccevs

Standards
FIPS180-4, FIPS186-5, FIPS197, PKCS#1, AIS 20, AIS 32, RFC8017, RFC4253, RFC4252, RFC5903, RFC5656, RFC4419, RFC8268, RFC4344, RFC5647, RFC2104, RFC4251, RFC6668, RFC8332, RFC4306, ISO/IEC 15408, ISO/IEC 18045, ISO/IEC 17065
Technical reports
BSI TR-02102

File metadata

Title Certification Report BSI-DSZ-CC-1231-2026
Subject Common Criteria, Certification, Zertifizierung, Protection Profile for Virtualization, Linux-based, Server Virtualization, BSI-DSZ-CC-1231-2026
Keywords "Common Criteria, Certification, Zertifizierung, Protection Profile for Virtualization, Linux-based, Server Virtualization, BSI-DSZ-CC-1231-2026"
Author Federal Office for Information Security
Pages 25

Frontpage

Certificate ID BSI-DSZ-CC-1231-2026
Certified item SUSE Linux Enterprise Server Version 15 SP4
Certification lab BSI
Developer SUSE LLC

Security target

Extracted keywords

Symmetric Algorithms
AES, AES-256, AES128, AES256, HMAC, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512, CBC-MAC
Asymmetric Algorithms
ECDH, ECDHE, ECDSA, EdDSA, ECC, Diffie-Hellman
Hash functions
SHA-256, SHA-384, SHA-512, PBKDF
Schemes
MAC, Key Agreement
Protocols
SSH, SSHv2, TLS, PGP
Randomness
DRBG, RNG, RBG
Libraries
OpenSSL, libgcrypt
Elliptic Curves
P-256, P-384, P-521
Block cipher modes
CBC, CTR, GCM, CCM, XTS

Claims
O.VM_ISOLATION, O.VMM_INTEGRITY, O.PLATFORM_INTEGRITY, O.MANAGEMENT_ACCESS, O.PATCHED_SOFTWARE, O.VM_ENTROPY, O.AUDIT, O.CORRECTLY_APPLIED_CONFIGURATION, O.RESOURCE_ALLOCATION, O.DOMAIN_INTEGRITY, O.CORRECTL, T.DATA_LEAKAGE, T.UNAUTHORIZED_UPDATE, T.UNAUTHORIZED_MODIFICATION, T.USER_ERROR, T.VMM_COMPROMISE, T.PLATFORM_COMPROMISE, T.UNAUTHORIZED_ACCESS, T.WEAK_CRYPTO, T.UNPATCHED_SOFTWARE, T.MISCONFIGURATION, T.DENIAL_OF_SERVICE, A.PLATFORM_INTEGRITY, A.PHYSICAL, A.TRUSTED_ADMIN, A.NON_MALICIOUS_USER, OE.CONFIG, OE.PHYSICAL, OE.TRUSTED_ADMIN, OE.NON_MALICIOUS_USER
Security Assurance Requirements (SAR)
ALC_TSU_EXT.1, ALC_TSU_EXT
Security Functional Requirements (SFR)
FAU_GEN.1, FAU_SAR.1, FAU_STG.1, FAU_STG_EXT.1, FAU_GEN.1.1, FAU_GEN.1.2, FAU_SAR.1.1, FAU_SAR.1.2, FAU_STG.1.1, FAU_STG.1.2, FAU_STG_EXT.1.1, FAU_STG_EXT.1.2, FAU_GEN, FAU_SAR, FAU_STG, FAU_STG_EXT, FCS_CKM.1, FCS_CKM.2, FCS_CKM_EXT.4, FCS_COP, FCS_ENT_EXT.1, FCS_RBG_EXT.1, FCS_SSH_EXT.1, FCS_SSHC_EXT.1, FCS_SSHS_EXT.1, FCS_RBG_EXT.1.2, FCS_SSH_EXT.1.1, FCS_SSHS_EXT.1.3, FCS_COP.1, FCS_CKM.1.1, FCS_CKM.2.1, FCS_CKM_EXT.4.1, FCS_CKM_EXT.4.2, FCS_ENT_EXT.1.1, FCS_ENT_EXT.1.2, FCS_RBG_EXT.1.1, FCS_RNG.1, FCS_SSH_EXT.1.2, FCS_SSH_EXT.1.3, FCS_SSH_EXT.1.4, FCS_SSH_EXT.1.5, FCS_SSH_EXT.1.6, FCS_SSH_EXT.1.7, FCS_SSH_EXT.1.8, FCS_SSHC_EXT, FCS_SSHS_EXT, FCS_CKM_EXT, FCS_CKM, FCS_RBG_EXT, FCS_ENT_EXT, FCS_SSH_EXT, FDP_HBI_EXT.1, FDP_PPR_EXT.1, FDP_RIP_EXT.1, FDP_RIP_EXT.2, FDP_VMS_EXT.1, FDP_VNC_EXT.1, FDP_HBI_EXT.1.1, FDP_PPR_EXT.1.1, FDP_PPR_EXT.1.2, FDP_PPR_EXT.1.3, FDP_RIP_EXT.1.1, FDP_RIP_EXT.2.1, FDP_VMS_EXT.1.1, FDP_VMS_EXT.1.2, FDP_VMS_EXT.1.3, FDP_VMS_EXT.1.4, FDP_VNC_EXT.1.1, FDP_VNC_EXT.1.2, FDP_PPR_EXT, FDP_RIP_EXT, FDP_VMS_EXT, FDP_VNC_EXT, FDP_HBI_EXT, FIA_AFL_EXT.1, FIA_UAU.5, FIA_UIA_EXT.1, FIA_PMG_EXT.1, FIA_AFL.1, FIA_AFL_EXT.1.1, FIA_AFL_EXT.1.2, FIA_UAU.5.1, FIA_UAU.5.2, FIA_UIA_EXT.1.1, FIA_PMG_EXT.1.1, FIA_AFL_EXT, FIA_PMG_EXT, FIA_UAU, FIA_UIA_EXT, FMT_MOF_EXT.1, FMT_SMO_EXT.1, FMT_MOF_EXT, FMT_SMO_EXT, FMT_MOF_EXT.1.1, FPT_DVD_EXT.1, FPT_EEM_EXT.1, FPT_HAS_EXT.1, FPT_HCL_EXT.1, FPT_RDM_EXT.1, FPT_TUD_EXT.1, FPT_VDP_EXT.1, FPT_VIV_EXT.1, FPT_DVD_EXT.1.1, FPT_EEM_EXT.1.1, FPT_HAS_EXT.1.1, FPT_HAS_EXT.1.2, FPT_HCL_EXT.1.1, FPT_RDM_EXT.1.1, FPT_RDM_EXT.1.2, FPT_TUD_EXT.1.1, FPT_TUD_EXT.1.2, FPT_TUD_EXT.1.3, FPT_VDP_EXT.1.1, FPT_VDP_EXT.1.2, FPT_VIV_EXT.1.1, FPT_VIV_EXT.1.2, FPT_DVD_EXT, FPT_EEM_EXT, FPT_HAS_EXT, FPT_VDP_EXT, FPT_VIV_EXT, FPT_HCL_EXT, FPT_RDM_EXT, FPT_TUD_EXT, FTA_TAB.1, FTA_TAB.1.1, FTA_TAB, FTP_ITC_EXT.1, FTP_TRP.1, FTP_UIF_EXT.1, FTP_UIF_EXT.2, FTP_ITC_EXT.1.1, FTP_TRP.1.1, FTP_UIF_EXT.1.1, FTP_UIF_EXT.2.1, FTP_UIF_EXT, FTP_ITC_EXT, FTP_TRP
Certificates
BSI-DSZ-CC-1231
Evaluation facilities
atsec

Standards
FIPS 186-4, FIPS PUB 186-5, FIPS 140-2, NIST SP 800-38A, NIST SP 800-38D, NIST SP 800-57, NIST SP 800-56A, RFC 4252, RFC 8332, RFC 5656, RFC 4253, RFC 4344, RFC 5647, RFC 6668, RFC 8268, RFC 4251, RFC4253, RFC5656, RFC4252

File metadata

Title SUSE Linux Enterprise Server 15 SP4 Security Target for VPP Compliance (version 1.4 as of 2026-01-14)
Subject SUSE Linux Enterprise Server
Keywords SLES, operating system, virtual machine monitor
Author SUSE supported by atsec consultants (generated by CCTool version 2.8.4.66)
Pages 72

Heuristics

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. For details on our data sources and inference methods, see our methodology. If you believe any information here is inaccurate or harmful, please submit feedback.

Certificate ID

BSI-DSZ-CC-1231-2026

Extracted SARs

ADV_FSP.1, AGD_OPE.1, AGD_PRE.1, ALC_CMC.1, ALC_TSU_EXT.1, ASE_CCL.1, ASE_ECD.1, ASE_INT.1, ASE_OBJ.2, ASE_REQ.2, ASE_SPD.1, ASE_TSS.1, ATE_IND.1, AVA_VAN.1

Related CVEs

ID Links Severity CVSS Score Published on
Base score
CVE-2002-20001
C N
HIGH 7.5 11.11.2021
CVE-2018-17962
C N
HIGH 7.5 09.10.2018
CVE-2019-18897
C N
HIGH 7.8 02.03.2020
CVE-2019-18901
C N
MEDIUM 5.5 02.03.2020
CVE-2019-18902
C N
CRITICAL 9.8 02.03.2020
CVE-2019-18903
C N
CRITICAL 9.8 02.03.2020
CVE-2020-8013
C N
LOW 2.5 02.03.2020
CVE-2022-27239
C N
HIGH 7.8 27.04.2022
CVE-2023-23005
C N
MEDIUM 5.5 01.03.2023
CVE-2026-31431
C N
HIGH 7.8 22.04.2026
Showing 5 out of 10.

Scheme data

Cert Id BSI-DSZ-CC-1231-2026
Product SUSE Linux Enterprise Server, Version 15 SP4
Vendor SUSE LLC
Certification Date 27.01.2026
Category Operating systems
Url https://www.bsi.bund.de/SharedDocs/Zertifikate_CC/CC/Betriebssysteme/1231.html
Enhanced
Product SUSE Linux Enterprise Server, Version 15 SP4
Applicant SUSE LLC 1221 S Valley Grove Way #500, Pleasant Grove UT 84062 United States
Evaluation Facility atsec information security GmbH
Protection Profile U.S. Government Approved Protection Profile - Protection Profile for Virtualization Version 1.1, 14 June 2021
Certification Date 27.01.2026
Expiration Date 26.01.2031
Report Link https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Zertifizierung/Reporte/Reporte1200/1231a_pdf.pdf?__blob=publicationFile&v=2
Target Link https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Zertifizierung/Reporte/Reporte1200/1231b_pdf.pdf?__blob=publicationFile&v=2
Cert Link https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Zertifizierung/Reporte/Reporte1200/1231c_pdf.pdf?__blob=publicationFile&v=2
Description The TOE is the SUSE Linux Enterprise Server 15 SP4, a highly-configurable Linux-based operating system offering virtual machine management support. The virtual machine monitor support is integrated into the operating system. The evaluation covers the KVM virtualization technology. The TOE provides identification and authentication of its users, user data protection, and security audit functionality. Administrators of the TOE may perform local and remote security management.

References

No references are available for this certificate.

Updates Feed

  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.cc.CCCertificate",
  "category": "Other Devices and Systems",
  "cert_link": "https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/1231c_pdf.pdf",
  "dgst": "be4423bad8b0c4bb",
  "heuristics": {
    "_type": "sec_certs.sample.cc_eucc_common.Heuristics",
    "annotated_references": null,
    "cert_id": "BSI-DSZ-CC-1231-2026",
    "cert_lab": [
      "BSI"
    ],
    "cpe_matches": {
      "_type": "Set",
      "elements": [
        "cpe:2.3:o:suse:linux_enterprise_server:15:sp6:*:*:-:-:*:*",
        "cpe:2.3:o:suse:linux_enterprise_server:15:sp5:*:*:-:sap:*:*",
        "cpe:2.3:o:suse:linux_enterprise_server:15:sp7:*:*:-:-:*:*",
        "cpe:2.3:o:suse:linux_enterprise_server:15:sp4:*:*:ltss:-:*:*",
        "cpe:2.3:o:suse:linux_enterprise_server:15:sp5:*:*:-:-:*:*",
        "cpe:2.3:o:suse:linux_enterprise_server:15:sp4:*:*:*:*:*:*",
        "cpe:2.3:o:suse:linux_enterprise_server:15:sp4:*:*:-:-:*:*",
        "cpe:2.3:o:suse:linux_enterprise_server:15:sp5:*:*:*:*:*:*",
        "cpe:2.3:o:suse:linux_enterprise_server:15:sp7:*:*:-:sap:*:*",
        "cpe:2.3:o:suse:linux_enterprise_server:15:sp5:*:*:ltss:-:*:*",
        "cpe:2.3:o:suse:linux_enterprise_server:15:sp6:*:*:-:sap:*:*",
        "cpe:2.3:o:suse:linux_enterprise_server:15:sp6:*:*:ltss:-:*:*",
        "cpe:2.3:o:suse:linux_enterprise_server:15:sp4:*:*:-:sap:*:*"
      ]
    },
    "direct_transitive_cves": null,
    "eal": null,
    "extracted_sars": {
      "_type": "Set",
      "elements": [
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "AVA_VAN",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "AGD_OPE",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ATE_IND",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ASE_CCL",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ASE_INT",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ALC_CMC",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ALC_TSU_EXT",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "AGD_PRE",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ASE_TSS",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ASE_ECD",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ASE_OBJ",
          "level": 2
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ASE_SPD",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ADV_FSP",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ASE_REQ",
          "level": 2
        }
      ]
    },
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "15"
      ]
    },
    "indirect_transitive_cves": null,
    "next_certificates": null,
    "prev_certificates": null,
    "protection_profiles": {
      "_type": "Set",
      "elements": [
        "65c2757c97fa03d4"
      ]
    },
    "related_cves": {
      "_type": "Set",
      "elements": [
        "CVE-2022-27239",
        "CVE-2020-8013",
        "CVE-2026-31431",
        "CVE-2023-23005",
        "CVE-2019-18901",
        "CVE-2018-17962",
        "CVE-2002-20001",
        "CVE-2019-18897",
        "CVE-2019-18903",
        "CVE-2019-18902"
      ]
    },
    "report_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "scheme_data": {
      "category": "Operating systems",
      "cert_id": "BSI-DSZ-CC-1231-2026",
      "certification_date": "2026-01-27",
      "enhanced": {
        "applicant": "SUSE LLC 1221 S Valley Grove Way #500, Pleasant Grove UT 84062 United States",
        "cert_link": "https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Zertifizierung/Reporte/Reporte1200/1231c_pdf.pdf?__blob=publicationFile\u0026v=2",
        "certification_date": "2026-01-27",
        "description": "The TOE is the SUSE Linux Enterprise Server 15 SP4, a highly-configurable Linux-based operating system offering virtual machine management support. The virtual machine monitor support is integrated into the operating system. The evaluation covers the KVM virtualization technology. The TOE provides identification and authentication of its users, user data protection, and security audit functionality. Administrators of the TOE may perform local and remote security management.",
        "evaluation_facility": "atsec information security GmbH",
        "expiration_date": "2031-01-26",
        "product": "SUSE Linux Enterprise Server, Version 15 SP4",
        "protection_profile": "U.S. Government Approved Protection Profile - Protection Profile for Virtualization Version 1.1, 14 June 2021",
        "report_link": "https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Zertifizierung/Reporte/Reporte1200/1231a_pdf.pdf?__blob=publicationFile\u0026v=2",
        "target_link": "https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Zertifizierung/Reporte/Reporte1200/1231b_pdf.pdf?__blob=publicationFile\u0026v=2"
      },
      "product": "SUSE Linux Enterprise Server, Version 15 SP4",
      "url": "https://www.bsi.bund.de/SharedDocs/Zertifikate_CC/CC/Betriebssysteme/1231.html",
      "vendor": "SUSE LLC"
    },
    "st_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "verified_cpe_matches": null
  },
  "maintenance_updates": {
    "_type": "Set",
    "elements": []
  },
  "manufacturer": "SUSE LLC",
  "manufacturer_web": "https://www.suse.com",
  "name": "SUSE Linux Enterprise Server, Version 15 SP4",
  "not_valid_after": "2031-01-27",
  "not_valid_before": "2026-01-27",
  "pdf_data": {
    "_type": "sec_certs.sample.cc_eucc_common.PdfData",
    "cert_filename": "1231c_pdf.pdf",
    "cert_frontpage": null,
    "cert_keywords": {
      "asymmetric_crypto": {},
      "cc_cert_id": {
        "DE": {
          "BSI-DSZ-CC-1231-2026": 1
        }
      },
      "cc_claims": {},
      "cc_protection_profile_id": {},
      "cc_sar": {
        "ADV": {
          "ADV_FSP.1": 1
        },
        "AGD": {
          "AGD_OPE.1": 1,
          "AGD_PRE.1": 1
        },
        "ALC": {
          "ALC_CMC.1": 1,
          "ALC_FLR": 1,
          "ALC_TSU_EXT.1": 1
        },
        "ASE": {
          "ASE_CCL.1": 1,
          "ASE_ECD.1": 1,
          "ASE_INT.1": 1,
          "ASE_OBJ.2": 1,
          "ASE_REQ.2": 1,
          "ASE_SPD.1": 1,
          "ASE_TSS.1": 1
        },
        "ATE": {
          "ATE_IND.1": 1
        },
        "AVA": {
          "AVA_VAN.1": 1
        }
      },
      "cc_security_level": {
        "EAL": {
          "EAL 2": 1,
          "EAL 4": 1
        }
      },
      "cc_sfr": {},
      "certification_process": {},
      "cipher_mode": {},
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "SSH": {
          "SSH": 1
        }
      },
      "crypto_scheme": {},
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {},
      "hash_function": {},
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {},
      "side_channel_analysis": {},
      "standard_id": {
        "ISO": {
          "ISO/IEC 15408": 2,
          "ISO/IEC 18045": 2
        }
      },
      "symmetric_crypto": {},
      "technical_report_id": {},
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "cert_metadata": {
      "/Author": "Federal Office for Information Security",
      "/Keywords": "\"Common Criteria, Certification, Zertifizierung, Protection Profile for Virtualization, Linux-based, Server Virtualization, BSI-DSZ-CC-1231-2026\"",
      "/Subject": "Common Criteria, Certification, Zertifizierung, Protection Profile for Virtualization, Linux-based, Server Virtualization, BSI-DSZ-CC-1231-2026",
      "/Title": "Certificate BSI-DSZ-CC-1231-2026",
      "pdf_file_size_bytes": 238586,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 1
    },
    "report_filename": "1231a_pdf.pdf",
    "report_frontpage": {
      "DE": {
        "cc_security_level": "Common Criteria Part 3 extended ASE_CCL.1, ASE_ECD.1, ASE_INT.1, ASE_OBJ.2, ASE_REQ.2, ASE_SPD.1, ASE_TSS.1, ADV_FSP.1, AGD_OPE.1, AGD_PRE.1, ALC_CMC.1, ALC_TSU_EXT.1, ATE_IND.1, AVA_VAN.1 valid until: 26 January 2031",
        "cc_version": "PP conformant Common Criteria Part 2 extended",
        "cert_id": "BSI-DSZ-CC-1231-2026",
        "cert_item": "SUSE Linux Enterprise Server Version 15 SP4",
        "cert_lab": "BSI",
        "developer": "SUSE LLC",
        "match_rules": [
          "(BSI-DSZ-CC-.+?) (?:for|For) (.+?) from (.*)"
        ],
        "ref_protection_profiles": "Protection Profile for Virtualization, Version 1.1 as of 2021-06-14; in the PP-Configuration complemented with the PP-Module for Server Virtualization Systems, Version 1.1 as of 2020-06-14; supplemented by the Functional Package for Secure Shell (SSH), Version 1.0 as of 2021- 05-13"
      }
    },
    "report_keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 1
          },
          "ECDH": {
            "ECDH": 2
          },
          "ECDSA": {
            "ECDSA": 4
          }
        },
        "FF": {
          "DH": {
            "DH": 3,
            "Diffie-Hellman": 2
          }
        }
      },
      "cc_cert_id": {
        "DE": {
          "BSI-DSZ-CC-1231-2026": 14
        }
      },
      "cc_claims": {
        "OE": {
          "OE.CONFIG": 1,
          "OE.NON_MALICIOUS_USER": 1,
          "OE.PHYSICAL": 1,
          "OE.TRUSTED_ADMIN": 1
        }
      },
      "cc_protection_profile_id": {},
      "cc_sar": {
        "ADV": {
          "ADV_FSP.1": 2
        },
        "AGD": {
          "AGD_OPE.1": 2,
          "AGD_PRE.1": 2
        },
        "ALC": {
          "ALC_CMC.1": 2,
          "ALC_FLR": 3,
          "ALC_TSU_EXT.1": 3
        },
        "ASE": {
          "ASE_CCL.1": 2,
          "ASE_ECD.1": 2,
          "ASE_INT.1": 2,
          "ASE_OBJ.2": 2,
          "ASE_REQ.2": 2,
          "ASE_SPD.1": 2,
          "ASE_TSS.1": 2
        },
        "ATE": {
          "ATE_IND.1": 2
        },
        "AVA": {
          "AVA_VAN.1": 2
        }
      },
      "cc_security_level": {
        "EAL": {
          "EAL 1": 1,
          "EAL 2": 3,
          "EAL 4": 3
        }
      },
      "cc_sfr": {
        "FCS": {
          "FCS_SSH_EXT.1.4": 1,
          "FCS_SSH_EXT.1.5": 1
        },
        "FTP": {
          "FTP_ITC_EXT.1": 1
        }
      },
      "certification_process": {
        "ConfidentialDocument": {
          "6] Evaluation Technical Report, Version 5, 2026-01-21, Final Evaluation Technical Report, atsec (confidential document) [7] Protection Profile for Virtualization, Version 1.1, 2021-06-14; https://www.niap- ccevs": 1,
          "being maintained, is not given any longer. In particular, prior to the dissemination of confidential documentation and information related to the TOE or resulting from the evaluation and certification": 1
        }
      },
      "cipher_mode": {
        "CTR": {
          "CTR": 2
        },
        "GCM": {
          "GCM": 3
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {
        "OpenSSL": {
          "OpenSSL": 1
        }
      },
      "crypto_protocol": {
        "IKE": {
          "IKE": 1,
          "IKEv2": 2
        },
        "SSH": {
          "SSH": 25,
          "SSHv2": 2
        }
      },
      "crypto_scheme": {
        "KA": {
          "Key agreement": 2
        },
        "KEX": {
          "KEX": 1,
          "Key Exchange": 2
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-256": 4,
          "P-384": 4,
          "P-521": 4
        }
      },
      "eval_facility": {
        "atsec": {
          "atsec": 3
        }
      },
      "hash_function": {
        "SHA": {
          "SHA2": {
            "SHA-2": 2,
            "SHA-256": 5,
            "SHA-512": 1
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "RNG": {
          "RNG": 3
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "BSI": {
          "AIS 20": 2,
          "AIS 32": 1
        },
        "FIPS": {
          "FIPS180-4": 6,
          "FIPS186-5": 5,
          "FIPS197": 2
        },
        "ISO": {
          "ISO/IEC 15408": 4,
          "ISO/IEC 17065": 2,
          "ISO/IEC 18045": 4
        },
        "PKCS": {
          "PKCS#1": 1
        },
        "RFC": {
          "RFC2104": 2,
          "RFC4251": 2,
          "RFC4252": 3,
          "RFC4253": 8,
          "RFC4306": 2,
          "RFC4344": 1,
          "RFC4419": 2,
          "RFC5647": 3,
          "RFC5656": 3,
          "RFC5903": 3,
          "RFC6668": 2,
          "RFC8017": 2,
          "RFC8268": 3,
          "RFC8332": 2
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 6
          }
        },
        "constructions": {
          "MAC": {
            "HMAC": 2
          }
        }
      },
      "technical_report_id": {
        "BSI": {
          "BSI TR-02102": 1
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "report_metadata": {
      "/Author": "Federal Office for Information Security",
      "/Keywords": "\"Common Criteria, Certification, Zertifizierung, Protection Profile for Virtualization, Linux-based, Server Virtualization, BSI-DSZ-CC-1231-2026\"",
      "/Subject": "Common Criteria, Certification, Zertifizierung, Protection Profile for Virtualization, Linux-based, Server Virtualization, BSI-DSZ-CC-1231-2026",
      "/Title": "Certification Report BSI-DSZ-CC-1231-2026",
      "pdf_file_size_bytes": 362703,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 25
    },
    "st_filename": "1231b_pdf.pdf",
    "st_frontpage": null,
    "st_keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 6
          },
          "ECDH": {
            "ECDH": 2,
            "ECDHE": 1
          },
          "ECDSA": {
            "ECDSA": 5
          },
          "EdDSA": {
            "EdDSA": 2
          }
        },
        "FF": {
          "DH": {
            "Diffie-Hellman": 5
          }
        }
      },
      "cc_cert_id": {
        "DE": {
          "BSI-DSZ-CC-1231": 1
        }
      },
      "cc_claims": {
        "A": {
          "A.NON_MALICIOUS_USER": 4,
          "A.PHYSICAL": 2,
          "A.PLATFORM_INTEGRITY": 3,
          "A.TRUSTED_ADMIN": 3
        },
        "O": {
          "O.AUDIT": 8,
          "O.CORRECTL": 1,
          "O.CORRECTLY_APPLIED_CONFIGURATION": 4,
          "O.DOMAIN_INTEGRITY": 16,
          "O.MANAGEMENT_ACCESS": 24,
          "O.PATCHED_SOFTWARE": 5,
          "O.PLATFORM_INTEGRITY": 14,
          "O.RESOURCE_ALLOCATION": 7,
          "O.VMM_INTEGRITY": 23,
          "O.VM_ENTROPY": 6,
          "O.VM_ISOLATION": 18
        },
        "OE": {
          "OE.CONFIG": 2,
          "OE.NON_MALICIOUS_USER": 2,
          "OE.PHYSICAL": 2,
          "OE.TRUSTED_ADMIN": 2
        },
        "T": {
          "T.DATA_LEAKAGE": 6,
          "T.DENIAL_OF_SERVICE": 4,
          "T.MISCONFIGURATION": 4,
          "T.PLATFORM_COMPROMISE": 4,
          "T.UNAUTHORIZED_ACCESS": 4,
          "T.UNAUTHORIZED_MODIFICATION": 5,
          "T.UNAUTHORIZED_UPDATE": 4,
          "T.UNPATCHED_SOFTWARE": 4,
          "T.USER_ERROR": 3,
          "T.VMM_COMPROMISE": 6,
          "T.WEAK_CRYPTO": 4
        }
      },
      "cc_protection_profile_id": {},
      "cc_sar": {
        "ALC": {
          "ALC_TSU_EXT": 5,
          "ALC_TSU_EXT.1": 5
        }
      },
      "cc_security_level": {},
      "cc_sfr": {
        "FAU": {
          "FAU_GEN": 4,
          "FAU_GEN.1": 9,
          "FAU_GEN.1.1": 1,
          "FAU_GEN.1.2": 1,
          "FAU_SAR": 1,
          "FAU_SAR.1": 9,
          "FAU_SAR.1.1": 1,
          "FAU_SAR.1.2": 1,
          "FAU_STG": 1,
          "FAU_STG.1": 9,
          "FAU_STG.1.1": 1,
          "FAU_STG.1.2": 1,
          "FAU_STG_EXT": 1,
          "FAU_STG_EXT.1": 11,
          "FAU_STG_EXT.1.1": 1,
          "FAU_STG_EXT.1.2": 1
        },
        "FCS": {
          "FCS_CKM": 3,
          "FCS_CKM.1": 10,
          "FCS_CKM.1.1": 1,
          "FCS_CKM.2": 10,
          "FCS_CKM.2.1": 1,
          "FCS_CKM_EXT": 3,
          "FCS_CKM_EXT.4": 9,
          "FCS_CKM_EXT.4.1": 1,
          "FCS_CKM_EXT.4.2": 1,
          "FCS_COP": 47,
          "FCS_COP.1": 5,
          "FCS_ENT_EXT": 2,
          "FCS_ENT_EXT.1": 9,
          "FCS_ENT_EXT.1.1": 1,
          "FCS_ENT_EXT.1.2": 1,
          "FCS_RBG_EXT": 4,
          "FCS_RBG_EXT.1": 11,
          "FCS_RBG_EXT.1.1": 1,
          "FCS_RBG_EXT.1.2": 2,
          "FCS_RNG.1": 2,
          "FCS_SSHC_EXT": 2,
          "FCS_SSHC_EXT.1": 7,
          "FCS_SSHS_EXT": 2,
          "FCS_SSHS_EXT.1": 8,
          "FCS_SSHS_EXT.1.3": 1,
          "FCS_SSH_EXT": 1,
          "FCS_SSH_EXT.1": 14,
          "FCS_SSH_EXT.1.1": 2,
          "FCS_SSH_EXT.1.2": 1,
          "FCS_SSH_EXT.1.3": 1,
          "FCS_SSH_EXT.1.4": 1,
          "FCS_SSH_EXT.1.5": 1,
          "FCS_SSH_EXT.1.6": 1,
          "FCS_SSH_EXT.1.7": 1,
          "FCS_SSH_EXT.1.8": 1
        },
        "FDP": {
          "FDP_HBI_EXT": 1,
          "FDP_HBI_EXT.1": 10,
          "FDP_HBI_EXT.1.1": 1,
          "FDP_PPR_EXT": 3,
          "FDP_PPR_EXT.1": 10,
          "FDP_PPR_EXT.1.1": 1,
          "FDP_PPR_EXT.1.2": 1,
          "FDP_PPR_EXT.1.3": 1,
          "FDP_RIP_EXT": 6,
          "FDP_RIP_EXT.1": 9,
          "FDP_RIP_EXT.1.1": 1,
          "FDP_RIP_EXT.2": 9,
          "FDP_RIP_EXT.2.1": 1,
          "FDP_VMS_EXT": 5,
          "FDP_VMS_EXT.1": 10,
          "FDP_VMS_EXT.1.1": 3,
          "FDP_VMS_EXT.1.2": 1,
          "FDP_VMS_EXT.1.3": 1,
          "FDP_VMS_EXT.1.4": 1,
          "FDP_VNC_EXT": 4,
          "FDP_VNC_EXT.1": 11,
          "FDP_VNC_EXT.1.1": 1,
          "FDP_VNC_EXT.1.2": 1
        },
        "FIA": {
          "FIA_AFL.1": 2,
          "FIA_AFL_EXT": 1,
          "FIA_AFL_EXT.1": 7,
          "FIA_AFL_EXT.1.1": 1,
          "FIA_AFL_EXT.1.2": 1,
          "FIA_PMG_EXT": 1,
          "FIA_PMG_EXT.1": 10,
          "FIA_PMG_EXT.1.1": 1,
          "FIA_UAU": 1,
          "FIA_UAU.5": 11,
          "FIA_UAU.5.1": 1,
          "FIA_UAU.5.2": 1,
          "FIA_UIA_EXT": 1,
          "FIA_UIA_EXT.1": 12,
          "FIA_UIA_EXT.1.1": 1
        },
        "FMT": {
          "FMT_MOF_EXT": 5,
          "FMT_MOF_EXT.1": 13,
          "FMT_MOF_EXT.1.1": 1,
          "FMT_SMO_EXT": 2,
          "FMT_SMO_EXT.1": 10
        },
        "FPT": {
          "FPT_DVD_EXT": 2,
          "FPT_DVD_EXT.1": 9,
          "FPT_DVD_EXT.1.1": 1,
          "FPT_EEM_EXT": 4,
          "FPT_EEM_EXT.1": 9,
          "FPT_EEM_EXT.1.1": 1,
          "FPT_HAS_EXT": 4,
          "FPT_HAS_EXT.1": 9,
          "FPT_HAS_EXT.1.1": 1,
          "FPT_HAS_EXT.1.2": 1,
          "FPT_HCL_EXT": 2,
          "FPT_HCL_EXT.1": 10,
          "FPT_HCL_EXT.1.1": 1,
          "FPT_RDM_EXT": 1,
          "FPT_RDM_EXT.1": 10,
          "FPT_RDM_EXT.1.1": 1,
          "FPT_RDM_EXT.1.2": 1,
          "FPT_TUD_EXT": 1,
          "FPT_TUD_EXT.1": 10,
          "FPT_TUD_EXT.1.1": 1,
          "FPT_TUD_EXT.1.2": 1,
          "FPT_TUD_EXT.1.3": 1,
          "FPT_VDP_EXT": 4,
          "FPT_VDP_EXT.1": 9,
          "FPT_VDP_EXT.1.1": 1,
          "FPT_VDP_EXT.1.2": 1,
          "FPT_VIV_EXT": 3,
          "FPT_VIV_EXT.1": 9,
          "FPT_VIV_EXT.1.1": 1,
          "FPT_VIV_EXT.1.2": 1
        },
        "FTA": {
          "FTA_TAB": 1,
          "FTA_TAB.1": 10,
          "FTA_TAB.1.1": 1
        },
        "FTP": {
          "FTP_ITC_EXT": 1,
          "FTP_ITC_EXT.1": 15,
          "FTP_ITC_EXT.1.1": 1,
          "FTP_TRP": 1,
          "FTP_TRP.1": 11,
          "FTP_TRP.1.1": 4,
          "FTP_UIF_EXT": 2,
          "FTP_UIF_EXT.1": 10,
          "FTP_UIF_EXT.1.1": 1,
          "FTP_UIF_EXT.2": 9,
          "FTP_UIF_EXT.2.1": 1
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 1
        },
        "CCM": {
          "CCM": 1
        },
        "CTR": {
          "CTR": 5
        },
        "GCM": {
          "GCM": 4
        },
        "XTS": {
          "XTS": 1
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {
        "OpenSSL": {
          "OpenSSL": 9
        },
        "libgcrypt": {
          "libgcrypt": 2
        }
      },
      "crypto_protocol": {
        "PGP": {
          "PGP": 1
        },
        "SSH": {
          "SSH": 98,
          "SSHv2": 6
        },
        "TLS": {
          "TLS": {
            "TLS": 1
          }
        }
      },
      "crypto_scheme": {
        "KA": {
          "Key Agreement": 1
        },
        "MAC": {
          "MAC": 3
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-256": 16,
          "P-384": 16,
          "P-521": 16
        }
      },
      "eval_facility": {
        "atsec": {
          "atsec": 2
        }
      },
      "hash_function": {
        "PBKDF": {
          "PBKDF": 1
        },
        "SHA": {
          "SHA2": {
            "SHA-256": 5,
            "SHA-384": 5,
            "SHA-512": 5
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 8
        },
        "RNG": {
          "RBG": 2,
          "RNG": 4
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-2": 1,
          "FIPS 186-4": 1,
          "FIPS PUB 186-5": 6
        },
        "NIST": {
          "NIST SP 800-38A": 2,
          "NIST SP 800-38D": 2,
          "NIST SP 800-56A": 1,
          "NIST SP 800-57": 1
        },
        "RFC": {
          "RFC 4251": 1,
          "RFC 4252": 6,
          "RFC 4253": 5,
          "RFC 4344": 2,
          "RFC 5647": 2,
          "RFC 5656": 10,
          "RFC 6668": 2,
          "RFC 8268": 2,
          "RFC 8332": 6,
          "RFC4252": 4,
          "RFC4253": 4,
          "RFC5656": 2
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 10,
            "AES-256": 1,
            "AES128": 1,
            "AES256": 1
          }
        },
        "constructions": {
          "MAC": {
            "CBC-MAC": 1,
            "HMAC": 2,
            "HMAC-SHA-256": 2,
            "HMAC-SHA-384": 2,
            "HMAC-SHA-512": 2
          }
        }
      },
      "technical_report_id": {},
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "st_metadata": {
      "/Author": "SUSE supported by atsec consultants (generated by CCTool version 2.8.4.66)",
      "/Keywords": "SLES, operating system, virtual machine monitor",
      "/Subject": "SUSE Linux Enterprise Server",
      "/Title": "SUSE Linux Enterprise Server 15 SP4 Security Target for VPP Compliance (version 1.4 as of 2026-01-14)",
      "pdf_file_size_bytes": 1010485,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "https://www.niap-ccevs.org/technical-decisions/TD0682",
          "http://tools.ietf.org/html/rfc4252",
          "https://www.niap-ccevs.org/technical-decisions/TD0814",
          "http://tools.ietf.org/html/rfc4253",
          "https://www.niap-ccevs.org/Profile/Info.cfm?PPID=456\u0026id=456",
          "https://www.niap-ccevs.org/technical-decisions/TD0953",
          "https://www.suse.com/support/security/",
          "http://www.commoncriteriaportal.org/files/ccfiles/CCPART1V3.1R5.pdf",
          "https://www.niap-ccevs.org/technical-decisions/TD0721",
          "https://www.niap-ccevs.org/MMO/PP/CFG_Virtualization-SV_v1.0.pdf",
          "https://www.niap-ccevs.org/technical-decisions/TD0961",
          "https://www.niap-ccevs.org/Profile/Info.cfm?PPID=458\u0026id=458",
          "https://www.suse.com/support/update/",
          "https://www.niap-ccevs.org/technical-decisions/TD0695",
          "https://www.niap-ccevs.org/technical-decisions/TD0905",
          "https://www.suse.com/support/security/contact/",
          "https://www.niap-ccevs.org/technical-decisions/TD0909",
          "http://www.commoncriteriaportal.org/files/ccfiles/CCPART3V3.1R5.pdf",
          "https://www.niap-ccevs.org/technical-decisions/TD0844",
          "https://www.niap-ccevs.org/technical-decisions/TD0967",
          "https://www.niap-ccevs.org/technical-decisions/TD0615",
          "https://www.niap-ccevs.org/technical-decisions/TD0732",
          "https://www.niap-ccevs.org/technical-decisions/TD0777",
          "http://tools.ietf.org/html/rfc5656",
          "https://www.niap-ccevs.org/Profile/Info.cfm?PPID=459\u0026id=459",
          "http://www.commoncriteriaportal.org/files/ccfiles/CCPART2V3.1R5.pdf",
          "https://www.niap-ccevs.org/technical-decisions/TD0936"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 72
    }
  },
  "protection_profile_links": {
    "_type": "Set",
    "elements": [
      "https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/pp_nd_vpn_gw_ep_v1.0.pdf"
    ]
  },
  "report_link": "https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/1231a_pdf.pdf",
  "scheme": "DE",
  "security_level": {
    "_type": "Set",
    "elements": []
  },
  "st_link": "https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/1231b_pdf.pdf",
  "state": {
    "_type": "sec_certs.sample.cc_eucc_common.InternalState",
    "cert": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": "479ef243abfd32415026ec3e63ce4b9e23478c1ee2a97d113b622cb711d01a5b",
      "txt_hash": "dd80ba6a29b17bb28b3d3a89dacc246e2418d443d63b60e8ab5ab7d7b9bcc385"
    },
    "report": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": "7bcd31c88b79f9b064c84728f35dd79a3035a5d187219f21c8414620689b4d7f",
      "txt_hash": "3051784be78bddec222eea41d241764a905d0e07255c5ec7b5205ac49988b23d"
    },
    "st": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": "43df63ee9214e17417b1394435ad3ae7f65313bb5a478b937d43d6bfe59f0e24",
      "txt_hash": "ae5b83d65881696ea395cc12898447ac0e9482a5ecf4769c796713a971fd5cc4"
    }
  },
  "status": "active"
}