Comparing certificates Experimental feature

You are comparing two certificates. By default, only differing attributes are shown. Use the button below to show/hide all attributes.

Showing only differing attributes.
Database Engine of Microsoft SQL Server 2005 SP2, Enterprise Edition (English) Version 9.00.3068.00
BSI-DSZ-CC-0366-2008 		Citrix XenDesktop 7.6 Platinum Edition
CRP281
name Database Engine of Microsoft SQL Server 2005 SP2, Enterprise Edition (English) Version 9.00.3068.00 Citrix XenDesktop 7.6 Platinum Edition
category Databases Access Control Devices and Systems
scheme DE UK
not_valid_after 01.09.2019 19.03.2020
not_valid_before 24.10.2008 19.03.2015
report_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/0366a.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/CRP281%20v1.0%20Final%20(NWA).pdf
st_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/0366b.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/XenDesktop7-STv1-0.pdf
manufacturer Microsoft Corporation Citrix Systems, Inc.
manufacturer_web https://www.microsoft.com https://www.citrix.com
security_level EAL4+, ALC_FLR.2 EAL2+, ALC_FLR.2
dgst e3e8d64b1e2d40d5 88824cfee521186a
heuristics/cert_id BSI-DSZ-CC-0366-2008 CRP281
heuristics/cert_lab BSI []
heuristics/cpe_matches {} cpe:2.3:a:citrix:xendesktop:7.6:*:*:*:*:*:*:*
heuristics/related_cves {} CVE-2016-6493, CVE-2016-4810, CVE-2014-4700
heuristics/direct_transitive_cves {} CVE-2016-6493, CVE-2016-4810
heuristics/indirect_transitive_cves {} CVE-2016-6493, CVE-2016-4810, CVE-2014-4700
heuristics/extracted_sars ADV_RCR.1, AVA_VLA.2, ADV_HLD.2, AGD_USR.1, AVA_SOF.1, ADV_FSP.2, ADV_IMP.1, ATE_COV.2, ALC_TAT.1, AVA_MSU.2, AGD_ADM.1, ALC_LCD.1, ATE_FUN.1, ATE_DPT.1, ALC_FLR.2, ALC_DVS.1, ATE_IND.2, ADV_LLD.1, ADV_SPM.1 ASE_INT.1, AVA_VAN.2, ADV_FSP.2, ASE_ECD.1, ASE_TSS.1, ASE_SPD.1, ALC_DEL.1, AGD_OPE.1, AGD_PRE.1, ALC_CMS.2, ADV_TDS.1, ATE_FUN.1, ATE_COV.1, ADV_ARC.1, ASE_OBJ.2, ALC_FLR.2, ASE_REQ.2, ALC_CMC.2, ATE_IND.2, ASE_CCL.1
heuristics/extracted_versions 9.00.3068.00 7.6
heuristics/report_references/directly_referenced_by {} CRP282
heuristics/report_references/directly_referencing CCEVS-VR-0131-2005 CRP271, CRP282
heuristics/report_references/indirectly_referenced_by {} CRP282, CRP281
heuristics/report_references/indirectly_referencing CCEVS-VR-0131-2005 CRP257, CRP241, CRP271, CRP256, CRP282, CRP281
heuristics/protection_profiles 7d1054ebab3d212f {}
protection_profile_links https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/PP_DBMS_BR_V1.0.pdf {}
pdf_data/report_filename 0366a.pdf CRP281 v1.0 Final (NWA).pdf
pdf_data/report_frontpage
  • DE:
    • cert_id: BSI-DSZ-CC-0366-2008
    • cert_item: Database Engine of Microsoft SQL Server 2005 SP2, Enterprise Edition (English) Version 9.00.3068.00
    • cert_lab: BSI
    • developer: Microsoft Corporation
    • match_rules: ['(BSI-DSZ-CC-.+?) (?:for|For) (.+?) from (.*)']
  • DE:
pdf_data/report_keywords/cc_cert_id
  • DE:
    • BSI-DSZ-CC-0366: 1
    • BSI-DSZ-CC-0366-2008: 18
  • US:
    • CCEVS-VR-05-0131: 1
  • UK:
    • CRP271: 3
    • CRP281: 2
    • CRP282: 2
pdf_data/report_keywords/cc_security_level
  • EAL:
    • EAL 1: 1
    • EAL 4: 7
    • EAL 4 augmented: 4
    • EAL 7: 1
    • EAL1: 5
    • EAL2: 3
    • EAL3: 4
    • EAL4: 6
    • EAL5: 6
    • EAL6: 3
    • EAL7: 4
  • EAL:
    • EAL1: 1
    • EAL2: 5
    • EAL2 augmented: 1
    • EAL7: 1
pdf_data/report_keywords/cc_sar
  • ACM:
    • ACM_AUT: 2
    • ACM_CAP: 2
    • ACM_SCP: 2
  • ADO:
    • ADO_DEL: 2
    • ADO_IGS: 2
  • ADV:
    • ADV_FSP: 2
    • ADV_HLD: 2
    • ADV_IMP: 2
    • ADV_INT: 2
    • ADV_LLD: 2
    • ADV_RCR: 2
    • ADV_SPM: 2
  • AGD:
    • AGD_ADM: 2
    • AGD_USR: 2
  • ALC:
    • ALC_DVS: 2
    • ALC_FLR: 2
    • ALC_FLR.2: 5
    • ALC_LCD: 1
    • ALC_TAT: 2
  • APE:
    • APE_DES: 1
    • APE_ENV: 1
    • APE_INT: 1
    • APE_OBJ: 1
    • APE_REQ: 1
    • APE_SRE: 1
  • ASE:
    • ASE_DES: 1
    • ASE_ENV: 1
    • ASE_INT: 1
    • ASE_OBJ: 1
    • ASE_PPC: 1
    • ASE_REQ: 1
    • ASE_SRE: 1
    • ASE_TSS: 1
  • ATE:
    • ATE_COV: 2
    • ATE_DPT: 2
    • ATE_FUN: 2
    • ATE_IND: 2
  • AVA:
    • AVA_CCA: 2
    • AVA_MSU: 2
    • AVA_SOF: 3
    • AVA_VLA: 3
    • AVA_VLA.2: 1
    • AVA_VLA.3: 1
    • AVA_VLA.4: 1
  • ALC:
    • ALC_FLR.2: 5
pdf_data/report_keywords/vendor
  • Microsoft:
    • Microsoft: 23
    • Microsoft Corporation: 11
  • Microsoft:
    • Microsoft: 30
pdf_data/report_keywords/eval_facility
  • TUV:
    • TÜV Informationstechnik: 2
pdf_data/report_keywords/hash_function
  • SHA:
    • SHA1:
      • SHA-1: 5
  • MD:
    • MD5:
      • MD5: 1
pdf_data/report_keywords/technical_report_id
  • BSI:
    • BSI 7125: 2
    • BSI 7148: 1
    • BSI 7149: 1
pdf_data/report_keywords/tee_name
  • IBM:
    • SE: 1
pdf_data/report_keywords/standard_id
  • BSI:
    • AIS 32: 1
    • AIS 34: 1
    • AIS1: 1
    • AIS11: 1
    • AIS14: 1
    • AIS19: 1
    • AIS23: 1
  • ISO:
    • ISO/IEC 15408:2005: 2
  • CC:
    • CCMB-2012-09-001: 1
    • CCMB-2012-09-002: 1
    • CCMB-2012-09-003: 1
    • CCMB-2012-09-004: 1
  • ISO:
    • ISO/IEC 17065:2012: 2
pdf_data/report_keywords/certification_process
  • ConfidentialDocument:
    • Server 2005, Enterprise Edition (English), Version 9.00.3068.00, Size: 360573 bytes, 2008-07-23 (confidential documents) [9] U.S. Government Protection Profile for Database Management Systems in Basic Robustness: 1
    • of Microsoft SQL Server 2005, Enterprise Edition (English) Version 9.00.3068.00, ITSEF: TÜVIT (confidential document) [8] Configuration Management Microsoft SQL Server 2005 Database, Engine Common Criteria Evaluation: 1
pdf_data/report_metadata
  • /Author: Bundesamt für Sicherheit in der Informationstechnik
  • /CreationDate: D:20081113135858+01'00'
  • /Creator: Writer
  • /Keywords: "BSI-DSZ-CC-0366-2008, Common Criteria, Certification, Zertifizierung, One Microsoft Way, Redmond, WA 98052-6399, USA, Database Engine of Microsoft SQL Server 2005, Enterprise Edition (English) Version 9.00.3068.00"
  • /ModDate: D:20081117153915+01'00'
  • /Producer: StarOffice 8
  • /Subject: Common Criteria, Certification
  • /Title: Certification Report BSI-DSZ-CC-0366-2008
  • pdf_file_size_bytes: 676834
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 36
pdf_data/st_filename 0366b.pdf XenDesktop7-STv1-0.pdf
pdf_data/st_keywords/cc_cert_id
  • DE:
    • BSI-DSZ-CC-366: 1
pdf_data/st_keywords/cc_security_level
  • EAL:
    • EAL 4: 9
    • EAL 4 augmented: 7
    • EAL1: 1
    • EAL4: 3
    • EAL4 augmented: 3
    • EAL4+: 1
  • EAL:
    • EAL2: 5
    • EAL2 augmented: 2
pdf_data/st_keywords/cc_sar
  • ACM:
    • ACM_AUT.1: 1
    • ACM_CAP.4: 1
    • ACM_SCP.2: 1
  • ADO:
    • ADO_DEL.2: 2
    • ADO_IGS.1: 2
  • ADV:
    • ADV_FSP.2: 2
    • ADV_HLD.2: 2
    • ADV_IMP.1: 2
    • ADV_LLD.1: 2
    • ADV_RCR.1: 2
    • ADV_SPM.1: 1
  • AGD:
    • AGD_ADM.1: 2
    • AGD_USR.1: 1
  • ALC:
    • ALC_DVS.1: 1
    • ALC_FLR.2: 16
    • ALC_LCD.1: 1
    • ALC_TAT.1: 1
  • ATE:
    • ATE_COV.2: 2
    • ATE_DPT.1: 1
    • ATE_FUN.1: 2
    • ATE_IND.2: 2
  • AVA:
    • AVA_MSU.2: 2
    • AVA_SOF.1: 2
    • AVA_VLA.2: 6
  • ADV:
    • ADV_ARC.1: 1
    • ADV_FSP.2: 1
    • ADV_TDS.1: 1
  • AGD:
    • AGD_OPE.1: 1
    • AGD_PRE.1: 1
  • ALC:
    • ALC_CMC.2: 1
    • ALC_CMS.2: 1
    • ALC_DEL.1: 1
    • ALC_FLR.2: 5
  • ASE:
    • ASE_CCL.1: 1
    • ASE_ECD.1: 1
    • ASE_INT.1: 1
    • ASE_OBJ.2: 1
    • ASE_REQ.2: 1
    • ASE_SPD.1: 1
    • ASE_TSS.1: 1
  • ATE:
    • ATE_COV.1: 1
    • ATE_FUN.1: 1
    • ATE_IND.2: 1
  • AVA:
    • AVA_VAN.2: 1
pdf_data/st_keywords/cc_sfr
  • FAU:
    • FAU_GEN: 12
    • FAU_GEN.1: 4
    • FAU_GEN.2: 2
    • FAU_GEN_EXP.2: 10
    • FAU_GEN_EXP.2.1: 1
    • FAU_SEL: 9
    • FAU_SEL.1: 2
    • FAU_STG.1: 1
    • FAU_STG.4: 1
    • FAU_STG_EXP.4: 8
    • FAU_STG_EXP.4.1: 3
  • FCS:
    • FCS_COP.1: 1
  • FDP:
    • FDP_ACC.1: 12
    • FDP_ACC.1.1: 1
    • FDP_ACC.2: 1
    • FDP_ACF: 10
    • FDP_ACF.1: 7
    • FDP_ACF.1.3: 1
    • FDP_IFC.1: 1
    • FDP_RIP.1: 3
    • FDP_RIP.2: 11
    • FDP_RIP.2.1: 1
  • FIA:
    • FIA_ATD.1: 10
    • FIA_ATD.1.1: 2
    • FIA_UAU.1: 1
    • FIA_UAU.2: 9
    • FIA_UAU.2.1: 1
    • FIA_UAU.5: 10
    • FIA_UAU.5.1: 1
    • FIA_UAU.5.2: 1
    • FIA_UID.1: 10
    • FIA_UID.2: 11
    • FIA_UID.2.1: 1
  • FMT:
    • FMT_MOF.1: 8
    • FMT_MOF.1.1: 1
    • FMT_MSA.1: 9
    • FMT_MSA.1.1: 1
    • FMT_MSA.3: 4
    • FMT_MSA.3.2: 1
    • FMT_MSA_EXP.3: 10
    • FMT_MSA_EXP.3.1: 1
    • FMT_MTD.1: 8
    • FMT_MTD.1.1: 1
    • FMT_REV.1: 17
    • FMT_REV.1.1: 2
    • FMT_REV.1.2: 4
    • FMT_SMF.1: 11
    • FMT_SMF.1.1: 2
    • FMT_SMR.1: 16
    • FMT_SMR.1.1: 2
    • FMT_SMR.1.2: 1
  • FPT:
    • FPT_RVM.1: 1
    • FPT_SEP: 1
    • FPT_SEP.1: 4
    • FPT_SEP_EXP.1: 11
    • FPT_SEP_EXP.1.1: 1
    • FPT_SEP_EXP.1.2: 1
    • FPT_STM.1: 2
    • FPT_TRC.1: 1
    • FPT_TRC.1.1: 1
    • FPT_TRC.1.2: 1
    • FPT_TRC_EXP.1: 11
    • FPT_TRC_EXP.1.1: 1
  • FTA:
    • FTA_MCS.1: 9
    • FTA_MCS.1.1: 1
    • FTA_MCS.1.2: 2
    • FTA_TAH.1: 1
    • FTA_TAH_EXP.1: 10
    • FTA_TAH_EXP.1.1: 1
    • FTA_TAH_EXP.1.2: 1
    • FTA_TSE.1: 9
    • FTA_TSE.1.1: 2
  • FCO:
    • FCO_SCO: 41
    • FCO_SCO.1: 21
    • FCO_SCO.1.1: 1
    • FCO_SCO.1.2: 1
    • FCO_SCO.1.3: 2
    • FCO_SCO.1.4: 1
  • FCS:
    • FCS_ECA: 21
    • FCS_ECA.1: 10
    • FCS_ECA.1.1: 1
  • FDP:
    • FDP_ACC: 36
    • FDP_ACC.1: 8
    • FDP_ACF: 34
    • FDP_ACF.1: 15
    • FDP_IFC.1: 2
  • FIA:
    • FIA_ATD: 10
    • FIA_ATD.1: 1
    • FIA_UAU: 8
    • FIA_UAU.2: 1
    • FIA_UID: 10
    • FIA_UID.1: 2
    • FIA_UID.2: 1
  • FMT:
    • FMT_MOF: 10
    • FMT_MOF.1: 1
    • FMT_MSA: 61
    • FMT_MSA.1: 5
    • FMT_MSA.3: 9
    • FMT_SMF: 20
    • FMT_SMF.1: 5
    • FMT_SMR: 22
    • FMT_SMR.1: 8
pdf_data/st_keywords/cc_claims
  • A:
    • A.COMM: 5
    • A.NO_EVIL: 3
    • A.NO_GENERAL_PURPOSE: 3
    • A.OS_PP_VALIDATED: 5
    • A.PHYSICAL: 3
  • O:
    • O.ACCESS_HISTORY: 5
    • O.ADMIN_GUIDANCE: 8
    • O.ADMIN_ROLE: 5
    • O.AUDIT_GENERATION: 4
    • O.CONFIGURATION_IDENTIFICAT: 2
    • O.CONFIGURATION_IDENTIFICATI: 2
    • O.CONFIGURATION_IDENTIFICATIO: 1
    • O.CONFIGURATION_IDENTIFICATION: 3
    • O.DOCUMENTED_DESIGN: 6
    • O.INTERNAL_TOE_DOMAINS: 5
    • O.MANAGE: 5
    • O.MEDIATE: 5
    • O.PARTIAL_FUNCTIONAL_T: 2
    • O.PARTIAL_FUNCTIONAL_TEST: 4
    • O.PARTIAL_SELF_PROTECTI: 2
    • O.PARTIAL_SELF_PROTECTION: 3
    • O.RESIDUAL_INFORMATION: 7
    • O.TOE_ACCESS: 7
    • O.VULNERABILITY_ANALSIS: 1
    • O.VULNERABILITY_ANALY: 1
    • O.VULNERABILITY_ANALYSI: 3
    • O.VULNERABILITY_ANALYSIS: 3
  • OE:
    • OE.COMM: 6
    • OE.NO_EVIL: 4
    • OE.NO_GENERAL_: 2
    • OE.NO_GENERAL_PURPOSE: 1
    • OE.OS_PP_VALIDATED: 5
    • OE.PHYSICAL: 3
  • R:
    • R.COMM: 3
    • R.EVL: 4
  • T:
    • T.ACCIDENTAL_ADMIN_ERR: 1
    • T.ACCIDENTAL_ADMIN_ERROR: 1
    • T.MASQUERADE: 3
    • T.POOR_DESIGN: 3
    • T.POOR_IMPLEMENTATIO: 1
    • T.POOR_IMPLEMENTATION: 2
    • T.POOR_TEST: 3
    • T.RESIDUAL_DATA: 4
    • T.TSF_COMPROMISE: 3
    • T.UNAUTHORIZED_ACCESS: 2
    • T.UNAUTHORIZED_ACCSS: 1
    • T.UNIDENTIFIED_ACTIONS: 3
  • OE:
    • OE.TLS: 7
pdf_data/st_keywords/vendor
  • Microsoft:
    • Microsoft: 104
    • Microsoft Corporation: 2
  • Microsoft:
    • Microsoft: 42
pdf_data/st_keywords/symmetric_crypto
  • AES_competition:
    • AES:
      • AES: 6
  • constructions:
    • MAC:
      • HMAC: 1
pdf_data/st_keywords/hash_function
  • SHA:
    • SHA1:
      • SHA-1: 1
pdf_data/st_keywords/crypto_protocol
  • TLS:
    • TLS:
      • TLS: 22
pdf_data/st_keywords/tls_cipher_suite
  • TLS:
    • TLS_RSA_WITH_AES_128_CBC_SHA: 5
pdf_data/st_keywords/tee_name
  • IBM:
    • SE: 16
pdf_data/st_keywords/standard_id
  • CC:
    • CCIMB-2005-08-002: 1
    • CCIMB-2005-08-003: 1
    • CCIMB-2005-08-004: 1
  • CC:
    • CCMB-2012-09-001: 1
    • CCMB-2012-09-002: 1
    • CCMB-2012-09-003: 1
    • CCMB-2012-09-004: 1
  • FIPS:
    • FIPS 140: 2
    • FIPS 140-2: 10
    • FIPS PUB 140-2: 1
    • FIPS140-2: 10
  • RFC:
    • RFC 2246: 5
pdf_data/st_keywords/certification_process
  • OutOfScope:
    • 19 1.4.3 Summary of items out of scope of the TOE : 2
    • XenApp integrate, as detailed in section 1.2.3. Also out of scope of the TOE are the following Citrix components which are included in XenDesktop Platinum Edition: 1
    • out of scope: 4
    • shown shaded are components of the TOE. Figure 4: Logical boundaries 1.4.3 Summary of items out of scope of the TOE The items out of scope of the TOE include the Microsoft components with which XenDesktop: 1
pdf_data/st_metadata
  • /Author: Roger French, Microsoft Corporation
  • /CreationDate: D:20080909105655+02'00'
  • /Creator: Acrobat PDFMaker 6.0 for Word
  • /Keywords: CC, ST, Common Criteria, SQL, Security Target
  • /ModDate: D:20081117154129+01'00'
  • /Producer: Acrobat Distiller 6.0.1 (Windows)
  • /SourceModified: D:20080729064854
  • /Subject: Security Target
  • /Title: Microsoft SQL Server 2005 Database Engine Common Criteria Evaluation
  • pdf_file_size_bytes: 1046402
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 90
state/report/pdf_hash Different Different
state/report/txt_hash Different Different
state/st/pdf_hash Different Different
state/st/txt_hash Different Different