This page was not yet optimized for use on mobile devices.

Comparing certificates Experimental feature

You are comparing two certificates. By default, only differing attributes are shown. Use the button below to show/hide all attributes.

Showing only differing attributes.

	Microsoft Exchange Server 2007 Enterprise Edition (English), Version/Build 08.02.0176.002 BSI-DSZ-CC-0436-2009	Aruba ClearPass Policy Manager 6.9 CCEVS-VR-CC-VID-11074-2020
name	Microsoft Exchange Server 2007 Enterprise Edition (English), Version/Build 08.02.0176.002	Aruba ClearPass Policy Manager 6.9
category	Other Devices and Systems	Network and Network-Related Devices and Systems
scheme	DE	US
status	archived	archived
not_valid_after	01.09.2019	31.08.2022
not_valid_before	16.11.2009	31.08.2020
cert_link		https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/st_vid11074-ci-cc.pdf
report_link	https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/0436a_pdf.pdf	https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/st-vid11074-vr-cc.pdf
st_link	https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/0436b_pdf.pdf	https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/st_vid11074-st-cc.pdf
manufacturer	Microsoft Corporation	Aruba, a Hewlett Packard Enterprise Company
manufacturer_web	https://www.microsoft.com	https://www.arubanetworks.com/
security_level	EAL4+	{}
dgst	95badceef1b711cb	800f3de4270caf34
heuristics/cert_id	BSI-DSZ-CC-0436-2009	CCEVS-VR-CC-VID-11074-2020
heuristics/cert_lab	BSI	US
heuristics/cpe_matches	{}	{}
heuristics/verified_cpe_matches	{}	{}
heuristics/related_cves	{}	{}
heuristics/direct_transitive_cves	{}	{}
heuristics/indirect_transitive_cves	{}	{}
heuristics/extracted_sars	ADV_IMP.1, ATE_IND.2, AVA_SOF.1, ADV_HLD.2, AVA_VLA.2, ADV_RCR.1, ADV_LLD.1, ATE_COV.2, ALC_FLR.3, AGD_USR.1, AVA_MSU.2, ADV_SPM.1, ADV_FSP.2, AGD_ADM.1, ATE_DPT.1, ALC_DVS.1, ALC_TAT.1, ALC_LCD.1, ATE_FUN.1	AGD_OPE.1, ADV_FSP.1, AVA_VAN.1, AGD_PRE.1, ALC_CMS.1, ALC_CMC.1, ATE_IND.1
heuristics/extracted_versions	08.02.0176.002	6.9
heuristics/prev_certificates	{}	{}
heuristics/next_certificates	{}	{}
heuristics/report_references/directly_referenced_by	{}	{}
heuristics/report_references/directly_referencing	{}	{}
heuristics/report_references/indirectly_referenced_by	{}	{}
heuristics/report_references/indirectly_referencing	{}	{}
heuristics/scheme_data
heuristics/st_references/directly_referenced_by	{}	{}
heuristics/st_references/directly_referencing	{}	{}
heuristics/st_references/indirectly_referenced_by	{}	{}
heuristics/st_references/indirectly_referencing	{}	{}
heuristics/protection_profiles	{}	{}
maintenance_updates
protection_profiles
protection_profile_links	{}	https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/CPP_ND_V2.1.pdf
pdf_data/cert_filename		st_vid11074-ci-cc.pdf
pdf_data/cert_frontpage
pdf_data/cert_keywords/cc_cert_id		US: CCEVS-VR-CC-VID11074-2020: 1
pdf_data/cert_keywords/cc_protection_profile_id
pdf_data/cert_keywords/cc_security_level
pdf_data/cert_keywords/cc_sar
pdf_data/cert_keywords/cc_sfr
pdf_data/cert_keywords/cc_claims
pdf_data/cert_keywords/vendor
pdf_data/cert_keywords/eval_facility		Gossamer: Gossamer Security: 1
pdf_data/cert_keywords/symmetric_crypto
pdf_data/cert_keywords/asymmetric_crypto
pdf_data/cert_keywords/pq_crypto
pdf_data/cert_keywords/hash_function
pdf_data/cert_keywords/crypto_scheme
pdf_data/cert_keywords/crypto_protocol
pdf_data/cert_keywords/randomness
pdf_data/cert_keywords/cipher_mode
pdf_data/cert_keywords/ecc_curve
pdf_data/cert_keywords/crypto_engine
pdf_data/cert_keywords/tls_cipher_suite
pdf_data/cert_keywords/crypto_library
pdf_data/cert_keywords/vulnerability
pdf_data/cert_keywords/side_channel_analysis
pdf_data/cert_keywords/technical_report_id
pdf_data/cert_keywords/device_model
pdf_data/cert_keywords/tee_name
pdf_data/cert_keywords/os_name
pdf_data/cert_keywords/cplc_data
pdf_data/cert_keywords/ic_data_group
pdf_data/cert_keywords/standard_id
pdf_data/cert_keywords/javacard_version
pdf_data/cert_keywords/javacard_api_const
pdf_data/cert_keywords/javacard_packages
pdf_data/cert_keywords/certification_process
pdf_data/cert_metadata		/CreationDate: D:20200929115323-04'00' /ModDate: D:20200929120347-04'00' /Producer: iText 2.1.0 (by lowagie.com) pdf_file_size_bytes: 209154 pdf_hyperlinks: {} pdf_is_encrypted: False pdf_number_of_pages: 1
pdf_data/report_filename	0436a_pdf.pdf	st-vid11074-vr-cc.pdf
pdf_data/report_frontpage	DE: cert_id: BSI-DSZ-CC-0436-2009 cert_item: Microsoft Exchange Server 2007 Enterprise Edition (English) Version/Build 08.02.0176.002 cert_lab: BSI developer: Microsoft Corporation match_rules: *['(BSI-DSZ-CC-.+?) (?:for\|For) (.+?) from (.)']** US:	DE: US: cert_id: cert_item: Aruba ClearPass Policy Manager 6.9 cert_lab: US NIAP
pdf_data/report_keywords/cc_cert_id	DE: BSI-DSZ-CC-0436-2009: 17	US: CCEVS-VR-CC-11074-2020: 1
pdf_data/report_keywords/cc_protection_profile_id
pdf_data/report_keywords/cc_security_level	EAL: EAL 1: 1 EAL 4: 3 EAL 4 augmented: 2 EAL 7: 1 EAL1: 5 EAL2: 3 EAL3: 4 EAL4: 8 EAL4 augmented: 1 EAL5: 6 EAL6: 3 EAL7: 4
pdf_data/report_keywords/cc_sar	ACM: ACM_AUT: 2 ACM_CAP: 2 ACM_SCP: 2 ADO: ADO_DEL: 2 ADO_IGS: 2 ADV: ADV_FSP: 2 ADV_HLD: 2 ADV_IMP: 2 ADV_INT: 2 ADV_LLD: 2 ADV_RCR: 2 ADV_SPM: 2 AGD: AGD_ADM: 2 AGD_USR: 2 ALC: ALC_DVS: 2 ALC_FLR: 2 ALC_FLR.3: 4 ALC_LCD: 1 ALC_TAT: 2 APE: APE_DES: 1 APE_ENV: 1 APE_INT: 1 APE_OBJ: 1 APE_REQ: 1 APE_SRE: 1 ASE: ASE_DES: 1 ASE_ENV: 1 ASE_INT: 1 ASE_OBJ: 1 ASE_PPC: 1 ASE_REQ: 1 ASE_SRE: 1 ASE_TSS: 1 ATE: ATE_COV: 2 ATE_DPT: 2 ATE_FUN: 2 ATE_IND: 2 AVA: AVA_CCA: 2 AVA_MSU: 2 AVA_SOF: 3 AVA_VLA: 3 AVA_VLA.2: 1 AVA_VLA.3: 1 AVA_VLA.4: 1
pdf_data/report_keywords/cc_sfr
pdf_data/report_keywords/cc_claims
pdf_data/report_keywords/vendor	Microsoft: Microsoft: 17 Microsoft Corporation: 5	Microsoft: Microsoft: 1
pdf_data/report_keywords/eval_facility	TUV: TÜV Informationstechnik: 3 tuvit: 12	Gossamer: Gossamer Security: 4
pdf_data/report_keywords/symmetric_crypto
pdf_data/report_keywords/asymmetric_crypto
pdf_data/report_keywords/pq_crypto
pdf_data/report_keywords/hash_function	SHA: SHA1: SHA-1: 5
pdf_data/report_keywords/crypto_scheme
pdf_data/report_keywords/crypto_protocol	TLS: TLS: TLS: 1	IPsec: IPsec: 6 SSH: SSH: 5 SSHv2: 1 TLS: SSL: SSL: 1 TLS: TLS: 2 VPN: VPN: 1
pdf_data/report_keywords/randomness
pdf_data/report_keywords/cipher_mode
pdf_data/report_keywords/ecc_curve
pdf_data/report_keywords/crypto_engine
pdf_data/report_keywords/tls_cipher_suite
pdf_data/report_keywords/crypto_library		OpenSSL: OpenSSL: 1
pdf_data/report_keywords/vulnerability
pdf_data/report_keywords/side_channel_analysis
pdf_data/report_keywords/technical_report_id	BSI: BSI 7125: 2 BSI 7148: 1 BSI 7149: 1
pdf_data/report_keywords/device_model
pdf_data/report_keywords/tee_name
pdf_data/report_keywords/os_name
pdf_data/report_keywords/cplc_data
pdf_data/report_keywords/ic_data_group
pdf_data/report_keywords/standard_id	BSI: AIS 32: 1 AIS 34: 1 ISO: ISO/IEC 15408:2005: 2
pdf_data/report_keywords/javacard_version
pdf_data/report_keywords/javacard_api_const
pdf_data/report_keywords/javacard_packages
pdf_data/report_keywords/certification_process	ConfidentialDocument: 02.0176.002, EVALUATION TECHNICAL REPORT, Version 3, Date 2009-10-01, TÜV Informationstechnik GmbH (confidential document) [8] Configuration list for the TOE: Exchange Server 2007 Common Criteria Evaluation, Configuration: 1 Server, Version: 1.05, Date: 2009-09-28; including all document as referenced in chapter 3.2. (confidential documents) [9] Microsoft Exchange Server 2007 Enterprise Edition Common Criteria Evaluation – Guidance: 1 OutOfScope: TOE in the certified version and configuration. The version of the help-file on the product DVD is out of scope of the certification. The TOE has to be installed and configured according to the Guidance Addendum: 1 any client. The way external lists for filtering of messages are compiled and transferred is also out of scope of the evaluation. Some security functionality of the TOE environment, namely of the operating: 1 out of scope: 2
pdf_data/report_metadata	/Author: Bundesamt für Sicherheit in der Informationstechnik /CreationDate: D:20091209111723+01'00' /Creator: Writer /Keywords: "Microsoft Exchange Server 2007 Enterprise Edition (English) Version/Build 08.02.0176.002, Microsoft Corporation, Common Criteria, Certification, Zertifzierung" /ModDate: D:20091218092509+01'00' /Producer: StarOffice 9 /Subject: Common Criteria Certification /Title: Certification Report BSI-DSZ-CC-0436-2009 pdf_file_size_bytes: 966828 pdf_hyperlinks: http://www.bsi.bund.de/ pdf_is_encrypted: False pdf_number_of_pages: 34	/CreationDate: D:20200918090905-04'00' /ModDate: D:20200918095419-04'00' pdf_file_size_bytes: 825709 pdf_hyperlinks: http://nessus.org/plugins/index.php?view=search, http://www.arubanetworks.com/pdf/products/DS_ClearPass_PolicyManager.pdf, http://www.exploitsearch.net/, https://www.rapid7.com/db/vulnerabilities, http://www.securiteam.com/, http://www.zerodayinitiative.com/advisories, http://www.kb.cert.org/vuls/, https://www.exploit-db.com/, https://web.nvd.nist.gov/vuln/search pdf_is_encrypted: False pdf_number_of_pages: 15
pdf_data/st_filename	0436b_pdf.pdf	st_vid11074-st-cc.pdf
pdf_data/st_frontpage
pdf_data/st_keywords/cc_cert_id
pdf_data/st_keywords/cc_protection_profile_id
pdf_data/st_keywords/cc_security_level	EAL: EAL4: 9 EAL4 augmented: 4	EAL: EAL 1: 2
pdf_data/st_keywords/cc_sar	ACM: ACM_AUT.1: 2 ACM_CAP.4: 1 ACM_SCP.2: 2 ADO: ADO_DEL.2: 2 ADO_IGS.1: 2 ADV: ADV_FSP.2: 2 ADV_HLD.2: 2 ADV_IMP.1: 2 ADV_LLD.1: 2 ADV_RCR.1: 2 ADV_SPM.1: 2 AGD: AGD_ADD: 2 AGD_ADM.1: 2 AGD_USR.1: 1 ALC: ALC_DVS.1: 2 ALC_FLR.3: 8 ALC_LCD.1: 2 ALC_TAT.1: 2 ATE: ATE_COV.2: 2 ATE_DPT.1: 1 ATE_FUN.1: 2 ATE_IND.2: 2 AVA: AVA_MSU.2: 2 AVA_SOF.1: 2 AVA_VLA.2: 3	ADV: ADV_FSP: 1 ADV_FSP.1: 9 AGD: AGD_OPE: 1 AGD_OPE.1: 10 AGD_PRE: 1 AGD_PRE.1: 6 ALC: ALC_CMC: 1 ALC_CMC.1: 4 ALC_CMS: 1 ALC_CMS.1: 5 ATE: ATE_IND: 1 ATE_IND.1: 5 AVA: AVA_VAN: 1 AVA_VAN.1: 6
pdf_data/st_keywords/cc_sfr	FAU: FAU_GEN: 2 FDP: FDP_ACC: 26 FDP_ACC.1: 13 FDP_ACF: 21 FDP_ACF.1: 16 FDP_IFC: 45 FDP_IFC.1: 17 FDP_IFF: 43 FDP_IFF.1: 35 FIA: FIA_AFL: 1 FIA_ATD.1: 7 FIA_ATD.1.1: 1 FIA_SOS.1: 7 FIA_SOS.1.1: 1 FIA_UAU: 1 FIA_UAU.8: 30 FIA_UID: 1 FIA_UID.1: 3 FIA_UID.2: 2 FIA_UID.3: 34 FIA_USB.1: 7 FIA_USB.1.1: 1 FIA_USB.1.2: 1 FIA_USB.1.3: 1 FMT: FMT_MSA: 95 FMT_MSA.1: 14 FMT_MSA.3: 22 FMT_SMF.1: 32 FMT_SMF.1.1: 1 FMT_SMR.1: 22 FMT_SMR.1.1: 1 FMT_SMR.1.2: 1 FRU: FRU_RSA: 18 FRU_RSA.1: 2	FCS: FCS_CKM.1: 1 FCS_CKM.2: 1 FCS_COP: 4 FCS_RBG_EXT.1: 3 FDP: FDP_ACC.1: 3 FIA: FIA_AFL.1: 3 FPT: FPT_STM_EXT.1: 1 FTA: FTA_TAB.1: 1 FTP: FTP_ITC.1: 1
pdf_data/st_keywords/cc_claims	A: A.BLOCKLIST: 4 A.COM_PROT: 3 A.INSTALL: 3 A.NO_EVIL_ADM: 1 A.NO_EVIL_ADMIN: 2 A.PHYS_PROTECT: 4 A.PLATFORM: 4 O: O.CONBLK: 7 O.DAC: 11 O.MAIL_FLOW: 5 O.QUOTA: 7 O.REDUCE_SPAM: 6 O.RESTDIST: 7 OE: OE.BLOCKLIST: 3 OE.COM_PROT: 3 OE.INSTALL: 7 OE.PHYSICAL: 3 OE.PLATFORM: 16 OSP: OSP.MAIL_FLOW: 3 T: T.AUTH_DAC: 4 T.DL_MISUSE: 4 T.OVERFLOW: 4 T.SPAM: 7 T.UNAUTHUSE: 3 T.UNAUTH_DAC: 3	OE: OE.ADMIN_CREDENTIALS_SECURE: 1 OE.COMPONENTS_RUNNING: 1 OE.NO_GENERAL_PURPOSE: 1 OE.NO_THRU_TRAFFIC_PROTECTION: 1 OE.PHYSICAL: 1 OE.RESIDUAL_INFORMATION: 1 OE.TRUSTED_ADMIN: 1 OE.UPDATES: 1
pdf_data/st_keywords/vendor	Microsoft: Microsoft: 42 Microsoft Corporation: 2	Microsoft: Microsoft: 1
pdf_data/st_keywords/eval_facility	TUV: tuvit: 1
pdf_data/st_keywords/symmetric_crypto	AES_competition: RC: RC4: 1	AES_competition: AES: AES: 10 AES-256: 2 constructions: MAC: HMAC: 1 HMAC-SHA-256: 4 HMAC-SHA-384: 3 HMAC-SHA-512: 1
pdf_data/st_keywords/asymmetric_crypto		ECC: ECC: ECC: 5 ECDSA: ECDSA: 7 FF: DH: DH: 5 Diffie-Hellman: 12 DSA: DSA: 1
pdf_data/st_keywords/pq_crypto
pdf_data/st_keywords/hash_function		PBKDF: PBKDF2: 1 SHA: SHA1: SHA-1: 2 SHA1: 2 SHA2: SHA-256: 1 SHA-384: 2 SHA-512: 1 SHA256: 3
pdf_data/st_keywords/crypto_scheme		KEX: Key Exchange: 2 MAC: MAC: 5
pdf_data/st_keywords/crypto_protocol	TLS: SSL: SSL: 3 SSL 3.0: 1 TLS: TLS: 19	IKE: IKE: 8 IKEv1: 13 IKEv2: 13 IPsec: IPsec: 39 SSH: SSH: 39 SSHv2: 5 TLS: SSL: SSL: 3 SSL 2.0: 1 SSL 3.0: 1 TLS: TLS: 27 TLS 1.0: 1 TLS 1.1: 1 TLS 1.2: 1 TLSv1.2: 2 VPN: VPN: 5
pdf_data/st_keywords/randomness		PRNG: PRNG: 1 RNG: RBG: 2 RNG: 2
pdf_data/st_keywords/cipher_mode		CBC: CBC: 4 CTR: CTR: 3 GCM: GCM: 5
pdf_data/st_keywords/ecc_curve		NIST: P-256: 6 P-384: 6 secp256r1: 3 secp384r1: 3
pdf_data/st_keywords/crypto_engine
pdf_data/st_keywords/tls_cipher_suite		TLS: TLS_DHE_RSA_WITH_AES_128_CBC_SHA: 1 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: 1 TLS_DHE_RSA_WITH_AES_256_CBC_SHA: 1 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384: 1 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: 1 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: 1 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: 1 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: 1 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384: 1 TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384: 1 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: 1 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: 1 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: 1 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: 1 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384: 1 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384: 1 TLS_RSA_WITH_AES_128_CBC_SHA: 1 TLS_RSA_WITH_AES_128_CBC_SHA256: 1 TLS_RSA_WITH_AES_128_GCM_SHA256: 1 TLS_RSA_WITH_AES_256_CBC_SHA: 1 TLS_RSA_WITH_AES_256_GCM_SHA384: 1
pdf_data/st_keywords/crypto_library
pdf_data/st_keywords/vulnerability
pdf_data/st_keywords/side_channel_analysis	other: reverse engineering: 1
pdf_data/st_keywords/technical_report_id
pdf_data/st_keywords/device_model
pdf_data/st_keywords/tee_name
pdf_data/st_keywords/os_name
pdf_data/st_keywords/cplc_data
pdf_data/st_keywords/ic_data_group
pdf_data/st_keywords/standard_id	RFC: RFC 1725: 1 RFC 1730: 1 RFC 2821: 11 RFC 2822: 7 RFC1725: 1 RFC1730: 1	FIPS: FIPS 140-2: 1 FIPS PUB 186-4: 5 ISO: ISO/IEC 14888-3: 1 ISO/IEC 18031:2011: 1 ISO/IEC 9796-2: 1 NIST: NIST SP 800-56A: 1 PKCS: PKCS #1: 1 RFC: RFC 2818: 2 RFC 2986: 1 RFC 3268: 4 RFC 3447: 3 RFC 3526: 3 RFC 3602: 2 RFC 4106: 1 RFC 4109: 1 RFC 4253: 1 RFC 4301: 2 RFC 4303: 1 RFC 4304: 1 RFC 4492: 4 RFC 4868: 2 RFC 4945: 1 RFC 5246: 6 RFC 5280: 2 RFC 5282: 1 RFC 5288: 4 RFC 5289: 8 RFC 5759: 1 RFC 5905: 1 RFC 5996: 2 RFC 6960: 1 X509: X.509: 9
pdf_data/st_keywords/javacard_version
pdf_data/st_keywords/javacard_api_const
pdf_data/st_keywords/javacard_packages
pdf_data/st_keywords/certification_process	OutOfScope: it should be noted that the way these external lists are compiled and transferred to the TOE are out of scope of the evaluation. Security Target Page 14/83 2.3.4 Important functionality of the environment The: 1 out of scope: 1
pdf_data/st_metadata	/Author: Amy Blumenfield /CreationDate: D:20091210164950 /Creator: Microsoft® Office Word 2007 /Keywords: Common Criteria, Exchange, Security, Evaluation, Security Target /ModDate: D:20091210164950 /Producer: Microsoft® Office Word 2007 /Title: Exchange Server 2007 Common Criteria Evaluation Security Target pdf_file_size_bytes: 876079 pdf_hyperlinks: http://www.ietf.org/rfc/rfc2821.txt, http://en.wikipedia.org/wiki/Telephone_exchange, https://secure.tuvit.de/ pdf_is_encrypted: False pdf_number_of_pages: 83	/CreationDate: D:20200918090723-04'00' /ModDate: D:20200918090723-04'00' pdf_file_size_bytes: 1533718 pdf_hyperlinks: http://www.arubanetworks.com/pdf/products/DS_ClearPass_PolicyManager.pdf, mailto:[email protected] pdf_is_encrypted: False pdf_number_of_pages: 36
state/cert/convert_garbage	False	True
state/cert/convert_ok	False	True
state/cert/download_ok	False	True
state/cert/extract_ok	False	True
state/cert/pdf_hash	Different	Different
state/cert/txt_hash	Different	Different
state/report/convert_garbage	False	False
state/report/convert_ok	True	True
state/report/download_ok	True	True
state/report/extract_ok	True	True
state/report/pdf_hash	Different	Different
state/report/txt_hash	Different	Different
state/st/convert_garbage	False	False
state/st/convert_ok	True	True
state/st/download_ok	True	True
state/st/extract_ok	True	True
state/st/pdf_hash	Different	Different
state/st/txt_hash	Different	Different