Comparing certificates Experimental feature

You are comparing two certificates. By default, only differing attributes are shown. Use the button below to show/hide all attributes.

Showing only differing attributes.
PacStar 451/453/455 Series with Cisco ASAv 9.12
CCEVS-VR-VID-11123-2021 		NetApp Storage Encryption (NSE) Running ONTAP 9.14.1
CCEVS-VR-VID-11477-2024
name PacStar 451/453/455 Series with Cisco ASAv 9.12 NetApp Storage Encryption (NSE) Running ONTAP 9.14.1
category Network and Network-Related Devices and Systems Other Devices and Systems
status archived active
not_valid_after 09.04.2023 18.11.2026
not_valid_before 09.04.2021 18.11.2024
cert_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/st_vid11123-ci.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/st_vid11477-ci.pdf
report_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/st_vid11123-vr.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/st_vid11477-vr.pdf
st_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/st_vid11123-st.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/st_vid11477-st.pdf
manufacturer Pacific Star Communications, Inc. (dba PacStar) NetApp, Inc.
manufacturer_web https://www.pacstar.com https://www.netapp.com/
dgst 589042dad19cdf72 ebcbec6fc7d39ca6
heuristics/cert_id CCEVS-VR-VID-11123-2021 CCEVS-VR-VID-11477-2024
heuristics/cpe_matches {} cpe:2.3:a:netapp:ontap_9:-:*:*:*:*:*:*:*
heuristics/related_cves {} CVE-2023-27535, CVE-2022-42915
heuristics/extracted_sars ADV_FSP.1, ALC_CMC.1, AVA_VAN.1, ATE_IND.1, ALC_CMS.1, AGD_OPE.1, AGD_PRE.1 ASE_TSS.1, ADV_FSP.1, ALC_CMC.1, ASE_INT.1, ASE_SPD.1, ASE_OBJ.1, ATE_FUN.1, AVA_VAN.1, ATE_IND.1, ALC_CMS.1, AGD_OPE.1, ASE_REQ.1, ASE_CCL.1, ASE_ECD.1, AGD_PRE.1
heuristics/extracted_versions 9.12 9.14.1
heuristics/scheme_data
  • category: Firewall, Network Device, Virtual Private Network
  • certification_date: 09.04.2021
  • evaluation_facility: Gossamer Security Solutions
  • expiration_date: 09.04.2023
  • id: CCEVS-VR-VID11123
  • product: PacStar 451/453/455 Series with Cisco ASAv 9.12
  • scheme: US
  • url: https://www.niap-ccevs.org/product/11123
  • vendor: Pacific Star Communications, Inc. (dba PacStar)
heuristics/protection_profiles cf18fa171ef6e928, fa0610a54305df78 52d782dbb1cd05bd
protection_profile_links https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/CPP_ND_V2.1.pdf, https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/MOD_CPP_FW_v1.3.pdf, https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/MOD_VPNGW_V1.0.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/CPP_FDE_AA_V2.0E.pdf
pdf_data/cert_filename st_vid11123-ci.pdf st_vid11477-ci.pdf
pdf_data/cert_keywords/cc_cert_id
  • US:
    • CCEVS-VR-VID11123-2021: 1
  • US:
    • CCEVS-VR-VID11477-2024: 1
pdf_data/cert_keywords/vendor
  • Cisco:
    • Cisco: 1
pdf_data/cert_keywords/eval_facility
  • Gossamer:
    • Gossamer Security: 1
  • Leidos:
    • Leidos: 1
pdf_data/cert_keywords/crypto_protocol
  • VPN:
    • VPN: 1
pdf_data/cert_metadata
  • /CreationDate: D:20210414122703-04'00'
  • /ModDate: D:20210414122703-04'00'
  • /Producer: iText 2.1.0 (by lowagie.com)
  • pdf_file_size_bytes: 180359
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 1
  • /Producer: WeasyPrint 62.3
  • /Title: VID11477-FINAL CERT
  • pdf_file_size_bytes: 136132
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 1
pdf_data/report_filename st_vid11123-vr.pdf st_vid11477-vr.pdf
pdf_data/report_frontpage
  • US:
    • cert_id: CCEVS-VR-VID11123-2021
    • cert_item: PacStar 451/453/455 Series with Cisco ASAv 9.12
    • cert_lab: US NIAP
  • US:
    • cert_id: CCEVS-VR-VID11477-2024
    • cert_item: for NetApp Storage Encryption (NSE) Running ONTAP 9.14.1
    • cert_lab: US NIAP
pdf_data/report_keywords/cc_cert_id
  • US:
    • CCEVS-VR-VID11123-2021: 1
  • US:
    • CCEVS-VR-VID11477-2024: 1
pdf_data/report_keywords/cc_sar
  • ADV:
    • ADV_FSP.1: 1
  • ALC:
    • ALC_CMC.1: 1
    • ALC_CMS.1: 1
  • ATE:
    • ATE_FUN.1: 1
  • AVA:
    • AVA_VAN.1: 1
pdf_data/report_keywords/vendor
  • Cisco:
    • Cisco: 32
  • Microsoft:
    • Microsoft: 1
pdf_data/report_keywords/eval_facility
  • Gossamer:
    • Gossamer Security: 4
  • Leidos:
    • Leidos: 6
pdf_data/report_keywords/crypto_protocol
  • IPsec:
    • IPsec: 9
  • SSH:
    • SSHv2: 6
  • TLS:
    • TLS:
      • TLS: 7
  • VPN:
    • VPN: 15
  • SSH:
    • SSH: 5
pdf_data/report_keywords/randomness
  • PRNG:
    • DRBG: 1
  • RNG:
    • RBG: 1
pdf_data/report_keywords/standard_id
  • NIST:
    • NIST SP 800-132: 1
    • NIST SP 800-38F: 1
pdf_data/report_keywords/certification_process
  • OutOfScope:
    • not tested in the evaluated configuration. System Manager GUI The System Manager GUI is considered out of scope and all management is performed via the command line interface. VMware Virtualization VMware: 1
    • out of scope: 1
pdf_data/report_metadata
  • /CreationDate: D:20220119145546-05'00'
  • /ModDate: D:20220119145546-05'00'
  • pdf_file_size_bytes: 600514
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 16
pdf_data/st_filename st_vid11123-st.pdf st_vid11477-st.pdf
pdf_data/st_keywords/cc_security_level
  • EAL:
    • EAL 1: 2
pdf_data/st_keywords/cc_sar
  • ADV:
    • ADV_FSP: 1
    • ADV_FSP.1: 9
  • AGD:
    • AGD_OPE: 1
    • AGD_OPE.1: 10
    • AGD_PRE: 1
    • AGD_PRE.1: 6
  • ALC:
    • ALC_CMC: 1
    • ALC_CMC.1: 4
    • ALC_CMS: 1
    • ALC_CMS.1: 5
  • ATE:
    • ATE_IND: 1
    • ATE_IND.1: 5
  • AVA:
    • AVA_VAN: 2
    • AVA_VAN.1: 7
  • ADV:
    • ADV_FSP.1: 11
  • AGD:
    • AGD_OPE.1: 12
    • AGD_PRE.1: 8
  • ALC:
    • ALC_CMC.1: 6
    • ALC_CMS.1: 7
  • ASE:
    • ASE_CCL.1: 1
    • ASE_ECD.1: 1
    • ASE_INT.1: 1
    • ASE_OBJ.1: 1
    • ASE_REQ.1: 1
    • ASE_SPD.1: 1
    • ASE_TSS.1: 2
  • ATE:
    • ATE_IND.1: 7
  • AVA:
    • AVA_VAN.1: 8
pdf_data/st_keywords/cc_sfr
  • FAU:
    • FAU_GEN.1: 4
  • FCS:
    • FCS_CKM.1: 5
    • FCS_CKM.2: 6
    • FCS_CKM.4: 1
    • FCS_COP: 8
    • FCS_NTP_EXT.1: 1
    • FCS_NTP_EXT.1.4: 1
    • FCS_RBG_EXT.1: 3
    • FCS_RBG_EXT.1.2: 1
    • FCS_SSHC_EXT.1: 2
    • FCS_SSHC_EXT.1.5: 1
    • FCS_SSHS_EXT.1: 4
    • FCS_SSHS_EXT.1.1: 1
    • FCS_SSHS_EXT.1.5: 3
    • FCS_SSHS_EXT.1.7: 1
    • FCS_TLSC_EXT.1.1: 3
    • FCS_TLSC_EXT.2: 3
    • FCS_TLSC_EXT.2.1: 1
    • FCS_TLSS_EXT: 1
    • FCS_TLSS_EXT.1: 3
    • FCS_TLSS_EXT.2: 1
  • FDP:
    • FDP_ACC.1: 3
  • FIA:
    • FIA_AFL.1: 7
    • FIA_AFL.1.1: 1
    • FIA_AFL.1.2: 1
    • FIA_PMG_EXT.1: 1
    • FIA_UAU.1: 1
    • FIA_UAU_EXT.2.1: 1
  • FMT:
    • FMT_SMF: 1
  • FPT:
    • FPT_APW_EXT.1: 2
    • FPT_ITT: 1
    • FPT_STM_EXT.1: 1
    • FPT_TUD_EXT.1: 3
    • FPT_TUD_EXT.1.3: 1
  • FTA:
    • FTA_SSL.3: 3
    • FTA_SSL_EXT: 1
    • FTA_SSL_EXT.1: 2
    • FTA_TAB.1: 1
  • FTP:
    • FTP_ITC: 1
    • FTP_ITC.1: 7
    • FTP_TRP: 2
    • FTP_TUD.1: 1
  • FCS:
    • FCS_AFA_EXT: 4
    • FCS_AFA_EXT.1: 7
    • FCS_AFA_EXT.1.1: 2
    • FCS_AFA_EXT.2: 6
    • FCS_AFA_EXT.2.1: 1
    • FCS_CKM.1: 9
    • FCS_CKM.1.1: 1
    • FCS_CKM.4: 16
    • FCS_CKM.4.1: 2
    • FCS_CKM_EXT.4: 16
    • FCS_CKM_EXT.4.1: 2
    • FCS_COP.1: 45
    • FCS_COP.1.1: 9
    • FCS_KDF_EXT: 4
    • FCS_KDF_EXT.1: 7
    • FCS_KDF_EXT.1.1: 1
    • FCS_KYC_EXT: 4
    • FCS_KYC_EXT.1: 4
    • FCS_KYC_EXT.1.1: 1
    • FCS_KYC_EXT.1.2: 1
    • FCS_KYC_EXT.2: 2
    • FCS_PCC_EXT: 4
    • FCS_PCC_EXT.1: 8
    • FCS_PCC_EXT.1.1: 1
    • FCS_RBG_EXT: 1
    • FCS_RBG_EXT.1: 12
    • FCS_RBG_EXT.1.1: 1
    • FCS_RBG_EXT.1.2: 1
    • FCS_SNI_EXT: 2
    • FCS_SNI_EXT.1: 7
    • FCS_SNI_EXT.1.1: 1
    • FCS_SNI_EXT.1.2: 1
    • FCS_SNI_EXT.1.3: 1
    • FCS_VAL_EXT: 2
    • FCS_VAL_EXT.1: 9
    • FCS_VAL_EXT.1.1: 1
    • FCS_VAL_EXT.1.2: 1
    • FCS_VAL_EXT.1.3: 1
  • FMT:
    • FMT_MOF: 2
    • FMT_MOF.1: 6
    • FMT_MOF.1.1: 1
    • FMT_SMF: 4
    • FMT_SMF.1: 4
    • FMT_SMF.1.1: 1
    • FMT_SMR: 4
    • FMT_SMR.1: 3
    • FMT_SMR.1.1: 1
    • FMT_SMR.1.2: 1
  • FPT:
    • FPT_KYP_EXT: 4
    • FPT_KYP_EXT.1: 5
    • FPT_KYP_EXT.1.1: 2
    • FPT_PWR_EXT: 8
    • FPT_PWR_EXT.1: 8
    • FPT_PWR_EXT.1.1: 1
    • FPT_PWR_EXT.2: 4
    • FPT_PWR_EXT.2.1: 1
    • FPT_TST_EXT: 4
    • FPT_TST_EXT.1: 6
    • FPT_TST_EXT.1.1: 1
    • FPT_TUD_EXT: 4
    • FPT_TUD_EXT.1: 4
    • FPT_TUD_EXT.1.1: 1
    • FPT_TUD_EXT.1.2: 1
    • FPT_TUD_EXT.1.3: 1
pdf_data/st_keywords/cc_claims
  • A:
    • A.CONNECTIONS: 1
  • OE:
    • OE.ADMIN_CREDENTIALS_SECURE: 1
    • OE.CONNECTIONS: 1
    • OE.NO_GENERAL_PURPOSE: 1
    • OE.NO_THRU_TRAFFIC_PROTECTION: 1
    • OE.PHYSICAL: 1
    • OE.RESIDUAL_INFORMATION: 1
    • OE.TRUSTED_ADMIN: 1
    • OE.UPDATES: 1
  • OE:
    • OE.INITIAL_DRIVE_STATE: 1
    • OE.PASSPHRASE_STRENGTH: 1
    • OE.PHYSICAL: 1
    • OE.PLATFORM_STATE: 1
    • OE.POWER_DOWN: 1
    • OE.SINGLE_USE_ET: 1
    • OE.STRONG_ENVIRONMENT_CRYPTO: 1
    • OE.TRAINED_USERS: 1
    • OE.TRUSTED_CHANNEL: 1
pdf_data/st_keywords/vendor
  • Cisco:
    • Cisco: 13
  • Microsoft:
    • Microsoft: 1
pdf_data/st_keywords/symmetric_crypto
  • AES_competition:
    • AES:
      • AES: 14
      • AES-: 2
      • AES-256: 1
  • constructions:
    • MAC:
      • HMAC: 3
      • HMAC-SHA-256: 8
      • HMAC-SHA-384: 6
      • HMAC-SHA-512: 4
  • miscellaneous:
    • Skinny:
      • Skinny: 2
  • AES_competition:
    • AES:
      • AES: 8
      • AES-128: 1
      • AES-256: 5
  • constructions:
    • MAC:
      • HMAC: 5
      • HMAC-SHA-512: 6
pdf_data/st_keywords/asymmetric_crypto
  • ECC:
    • ECC:
      • ECC: 6
    • ECDSA:
      • ECDSA: 16
  • FF:
    • DH:
      • DH: 10
      • Diffie-Hellman: 7
    • DSA:
      • DSA: 1
  • RSA:
    • RSA-2048: 1
  • ECC:
    • ECC:
      • ECC: 1
    • ECDSA:
      • ECDSA: 1
  • RSA:
    • RSA 3072: 1
pdf_data/st_keywords/hash_function
  • SHA:
    • SHA1:
      • SHA-1: 3
      • SHA1: 1
    • SHA2:
      • SHA-256: 4
      • SHA-384: 4
      • SHA-512: 6
      • SHA256: 4
  • PBKDF:
    • PBKDF2: 5
  • SHA:
    • SHA2:
      • SHA-256: 9
      • SHA-384: 5
      • SHA-512: 9
pdf_data/st_keywords/crypto_scheme
  • KEX:
    • Key Exchange: 2
  • MAC:
    • MAC: 3
  • MAC:
    • MAC: 2
pdf_data/st_keywords/crypto_protocol
  • IKE:
    • IKE: 35
    • IKEv2: 20
  • IPsec:
    • IPsec: 90
  • SSH:
    • SSH: 39
    • SSHv2: 15
  • TLS:
    • SSL:
      • SSL: 2
      • SSL 2.0: 1
      • SSL 3.0: 1
    • TLS:
      • TLS: 42
      • TLS 1.0: 1
      • TLS 1.1: 2
      • TLS 1.2: 2
      • TLS v1.2: 5
      • TLS1.1: 1
      • TLS1.2: 1
      • TLSv1.1: 2
      • TLSv1.2: 5
  • VPN:
    • VPN: 71
  • SSH:
    • SSH: 2
pdf_data/st_keywords/randomness
  • PRNG:
    • DRBG: 2
  • RNG:
    • RBG: 1
  • PRNG:
    • DRBG: 19
  • RNG:
    • RBG: 4
    • RNG: 1
pdf_data/st_keywords/cipher_mode
  • CBC:
    • CBC: 6
  • CTR:
    • CTR: 1
  • GCM:
    • GCM: 7
  • CBC:
    • CBC: 4
  • CCM:
    • CCM: 1
  • GCM:
    • GCM: 1
  • XEX:
    • XEX: 1
  • XTS:
    • XTS: 2
pdf_data/st_keywords/ecc_curve
  • NIST:
    • P-256: 12
    • P-348: 2
    • P-384: 6
    • P-521: 8
    • secp256r1: 3
    • secp384r1: 3
    • secp521r1: 3
pdf_data/st_keywords/tls_cipher_suite
  • TLS:
    • TLS_DHE_RSA_WITH_AES_128_CBC_SHA: 2
    • TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: 1
    • TLS_DHE_RSA_WITH_AES_256_CBC_SHA: 4
    • TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: 1
    • TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: 3
    • TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384: 3
pdf_data/st_keywords/crypto_library
  • Generic:
    • Crypto Library v2.24: 1
  • OpenSSL:
    • OpenSSL: 1
pdf_data/st_keywords/standard_id
  • FIPS:
    • FIPS 140-2: 3
    • FIPS PUB 186-4: 8
  • ISO:
    • ISO/IEC 18031:2011: 1
    • ISO/IEC 9796-2: 1
  • NIST:
    • NIST SP 800-56A: 1
    • SP 800-90: 1
  • PKCS:
    • PKCS #1: 1
  • RFC:
    • RFC 1305: 1
    • RFC 2460: 5
    • RFC 2818: 1
    • RFC 2986: 2
    • RFC 3268: 4
    • RFC 3513: 2
    • RFC 3526: 3
    • RFC 3602: 3
    • RFC 4106: 2
    • RFC 4253: 1
    • RFC 4301: 1
    • RFC 4303: 3
    • RFC 4346: 3
    • RFC 4443: 2
    • RFC 4868: 1
    • RFC 4945: 1
    • RFC 5246: 7
    • RFC 5280: 5
    • RFC 5282: 1
    • RFC 5289: 4
    • RFC 5735: 2
    • RFC 5759: 1
    • RFC 5996: 2
    • RFC 6125: 1
    • RFC 6960: 1
    • RFC 768: 5
    • RFC 791: 5
    • RFC 792: 2
    • RFC 793: 5
  • X509:
    • X.509: 15
  • FIPS:
    • FIPS 186-4: 1
    • FIPS PUB 186-4: 2
  • ISO:
    • ISO/IEC 10118: 2
    • ISO/IEC 18031:2011: 1
    • ISO/IEC 18033-3: 1
    • ISO/IEC 9796-2: 2
  • NIST:
    • NIST SP 800-132: 5
    • NIST SP 800-38F: 2
    • NIST SP 800-90A: 3
  • PKCS:
    • PKCS #1: 2
pdf_data/st_keywords/certification_process
  • OutOfScope:
    • including ECDSA-based and DH-based schemes. The RSA-based implementation is vendor affirmation (out of scope) and the KAS ECC and FFC. Scheme SFR Services RSA FCS_TLSS_EXT.1, FCS_IPSEC_EXT.1, FCS_SSHS_EXT.1: 1
    • out of scope: 1
  • OutOfScope:
    • not tested in the evaluated configuration. System Manager GUI The System Manager GUI is considered out of scope and all management is performed via the command line interface. VMware Virtualization VMware: 1
    • out of scope: 2
    • to the security functional requirements specified in this Security Target. The features below are out of scope. Feature Description SnapLock NetApp SnapLock is the WORM (write once, read many) compliance: 1
pdf_data/st_metadata
state/cert/pdf_hash Different Different
state/cert/txt_hash Different Different
state/report/pdf_hash Different Different
state/report/txt_hash Different Different
state/st/pdf_hash Different Different
state/st/txt_hash Different Different