This page was not yet optimized for use on mobile devices.

Comparing certificates Experimental feature

You are comparing two certificates. By default, only differing attributes are shown. Use the button below to show/hide all attributes.

Showing only differing attributes.

	ST3 Ace (ST3 Ace Token Manager v1.0.13.927, ST3 Ace Middleware v1.0.13.910, and SecureCOS Firmware v5.2) ISCB-5-RPT-C051-CR-v1a	Junos OS 20.4R1 for SRX345, SRX345-DUAL-AC and SRX380 in Cluster Mode Certificate Number: 2021/136
name	ST3 Ace (ST3 Ace Token Manager v1.0.13.927, ST3 Ace Middleware v1.0.13.910, and SecureCOS Firmware v5.2)	Junos OS 20.4R1 for SRX345, SRX345-DUAL-AC and SRX380 in Cluster Mode
category	Products for Digital Signatures	Network and Network-Related Devices and Systems
scheme	MY	AU
status	archived	active
not_valid_after	20.12.2018	21.09.2026
not_valid_before	20.12.2013	21.09.2021
cert_link		https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/AISEP_Certificate_2021_136_EFT-T018%20Juniper%20Junos%20OS%2020.4R1%20for%20SRX345,%20SRX345-DUAL-AC%20AND%20SRX380%20in%20Cluster%20Mode_OS.pdf
report_link	https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/ISCB-5-RPT-C051-CR-v1a.pdf	https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/EFT-T018-Certification_Report_v1.1.pdf
st_link	https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/SecureMetric%20ST3%20Ace%20Security%20Target%20v1.1.pdf	https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/Juniper%20JunOS%2020.4R1%20SRX345,%20SRX345-DUAL-AC,%20SRX380%20High%20Availability%20SecurityTarget%20v1.3.pdf
manufacturer	SecureMetric Technology Sdn Bhd	HPE Juniper Networking
manufacturer_web	https://www.securemetric.com/	https://www.juniper.net/
security_level	EAL2	{}
dgst	e8f4eb037a6f1f14	afa4f621b3d8415e
heuristics/cert_id	ISCB-5-RPT-C051-CR-v1a	Certificate Number: 2021/136
heuristics/cert_lab	[]	[]
heuristics/cpe_matches	{}	{}
heuristics/verified_cpe_matches	{}	{}
heuristics/related_cves	{}	{}
heuristics/direct_transitive_cves	{}	{}
heuristics/indirect_transitive_cves	{}	{}
heuristics/extracted_sars	ASE_CCL.1, ATE_FUN.1, ASE_OBJ.2, ALC_CMS.2, ASE_INT.1, ASE_REQ.2, AGD_PRE.1, ATE_IND.2, ASE_ECD.1, AVA_VAN.2, ADV_TDS.1, ASE_SPD.1, ALC_CMC.2, ADV_FSP.2, ATE_COV.1, AGD_OPE.1, ALC_DEL.1, ASE_TSS.1, ADV_ARC.1	{}
heuristics/extracted_versions	5.2, 1.0.13.910, 1.0.13.927	20.4
heuristics/prev_certificates	{}	{}
heuristics/next_certificates	{}	{}
heuristics/report_references/directly_referenced_by	{}	{}
heuristics/report_references/directly_referencing	{}	{}
heuristics/report_references/indirectly_referenced_by	{}	{}
heuristics/report_references/indirectly_referencing	{}	{}
heuristics/scheme_data	cert_no: 2013-012-C051 certification_date: 20.12.2013 developer: SecureMetric Technology Sdn Bhd enhanced: assurance_level: EAL2 category: Products for Digital Signatures cert_id: C051 certification_date: 20.12.2013 developer: Yau Wai Chung2-2, Incubator 2, Technology Park MalaysiaLebuhraya Puchong - Sg. Besi, Bukit Jalil57000 Kuala LumpurMALAYSIA URL: http://www.securemetric.comEmail: [email protected]: + 603-8996 8225Fax: + 603-8996 7225 expiration_date: 20.12.2018 mutual_recognition: MyCC product: ST3 Ace (ST3 Ace Token Manager v1.0.13.927, ST3 Ace Middleware v1.0.13.910, and SecureCOS Firmware v5.2) report_link: https://iscb.cybersecurity.my/resources/document/mycc/mycpr/C051/ISCB-5-RPT-C051-CR-v1a.pdf scope: The Target of Evaluation (TOE) is ST3 Ace that consists of ST3 Ace Token Manager v1.0.13.927, ST3 Ace Middleware v1.0.13.910, and SecureCOS Firmware v5.2. The TOE provides secure storage to store digital certificate(s) and cryptographic keys. The ST3 Ace follows the PKCS#11 standard and implements authentication via PIN to prevent unauthorised access to the token. The TOE is comprised of the three following core components of the ST3 Ace product: SecureCOS Operating System: The operating system (firmware) embedded in a microprocessor smart chip based USB token. The firmware provides the core cryptographic functionality of the TOE. ST3 Ace Middleware: Two compiled binaries that utilise exported APIs to provide an interface to the core cryptographic security functionality of the TOE, providing developers with an easily accessible method for engaging PKI-related functionality to support the development of enterprise authentication and integrity solutions. ST3 Ace Token Manager: The TOE provides an application for the user to manage the cryptographic key security of the TOE. The middleware and Token Manager are installed on a host computer for third party application to communicate with SecureCOS and provides key security functionality of the TOE. The scope of evaluation covers major security functions described as below: Cryptographic Operations - The TOE provides cryptographic library, which includes 3DES, RSA, MD5 and SHA-1, for cryptographic operations that can be used by third party applications such as encryption and decryption of email. The third party applications are outside the TOE evaluation scope. The TOE also provides the functionality to digitally sign documents and files. User Authentication - The TOE allows authorised users to access the TOE once the user is successfully identified and authenticated by the TOE. TOE user has to provide correct user PIN in order to access to TOE. The TOE enforces token blocking after 6 failed authentication attempts and Security Officer (SO) PIN is needed to unblock the token and reset the user PIN. The integration with the Token Management System Registration Authority (TMS RA) will allow a user to unblock the TOE and reset the User PIN without to deliver the physical token to the token management team. However, Secure Code is required in order to submit the unblock request or reset user PIN via TMS RA. TMS RA is outside the scope of the evaluation. Security Management - The TOE provides management functions such as token management (name change, PIN change, unblock token) and object management (view object, export/import object). status: Archive target_link: https://iscb.cybersecurity.my/resources/document/mycc/mycpr/C051/SecureMetric%20ST3%20Ace%20Security%20Target%20v1.1.pdf type: PKI-related security solutions that provides secure storage to store digital certificate(s) and cryptographic keys. expiration_date: 20.12.2018 level: EAL2 product: ST3 Ace (ST3 Ace Token Manager v1.0.13.927, ST3 Ace Middleware v1.0.13.910, and SecureCOS Firmware v5.2) recognition: MyCC url: https://iscb.cybersecurity.my/index.php/certification/product-certification/mycc/archived-certified-products-and-systems/submission-view/85
heuristics/st_references/directly_referenced_by	{}	{}
heuristics/st_references/directly_referencing	{}	{}
heuristics/st_references/indirectly_referenced_by	{}	{}
heuristics/st_references/indirectly_referencing	{}	{}
heuristics/protection_profiles	{}	cf18fa171ef6e928, fa0610a54305df78
maintenance_updates
protection_profiles
protection_profile_links	{}	https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/CPP_ND_V2.1.pdf, https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/MOD_VPNGW_V1.0.pdf, https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/MOD_CPP_FW_v1.3.pdf
pdf_data/cert_filename		AISEP_Certificate_2021_136_EFT-T018 Juniper Junos OS 20.4R1 for SRX345, SRX345-DUAL-AC AND SRX380 in Cluster Mode_OS.pdf
pdf_data/cert_frontpage
pdf_data/cert_keywords/cc_cert_id		AU: Certificate Number: 2021/136: 1
pdf_data/cert_keywords/cc_protection_profile_id
pdf_data/cert_keywords/cc_security_level
pdf_data/cert_keywords/cc_sar
pdf_data/cert_keywords/cc_sfr
pdf_data/cert_keywords/cc_claims
pdf_data/cert_keywords/vendor
pdf_data/cert_keywords/eval_facility
pdf_data/cert_keywords/symmetric_crypto
pdf_data/cert_keywords/asymmetric_crypto
pdf_data/cert_keywords/pq_crypto
pdf_data/cert_keywords/hash_function
pdf_data/cert_keywords/crypto_scheme
pdf_data/cert_keywords/crypto_protocol		VPN: VPN: 1
pdf_data/cert_keywords/randomness
pdf_data/cert_keywords/cipher_mode
pdf_data/cert_keywords/ecc_curve
pdf_data/cert_keywords/crypto_engine
pdf_data/cert_keywords/tls_cipher_suite
pdf_data/cert_keywords/crypto_library
pdf_data/cert_keywords/vulnerability
pdf_data/cert_keywords/side_channel_analysis
pdf_data/cert_keywords/technical_report_id
pdf_data/cert_keywords/device_model
pdf_data/cert_keywords/tee_name
pdf_data/cert_keywords/os_name
pdf_data/cert_keywords/cplc_data
pdf_data/cert_keywords/ic_data_group
pdf_data/cert_keywords/standard_id
pdf_data/cert_keywords/javacard_version
pdf_data/cert_keywords/javacard_api_const
pdf_data/cert_keywords/javacard_packages
pdf_data/cert_keywords/certification_process
pdf_data/cert_metadata		/CreationDate: D:20221202143201+11'00' /ModDate: D:20221202143201+11'00' pdf_file_size_bytes: 147089 pdf_hyperlinks: {} pdf_is_encrypted: False pdf_number_of_pages: 1
pdf_data/report_filename	ISCB-5-RPT-C051-CR-v1a.pdf	EFT-T018-Certification_Report_v1.1.pdf
pdf_data/report_frontpage
pdf_data/report_keywords/cc_cert_id	MY: ISCB-5-RPT-C051-CR-v1a: 29
pdf_data/report_keywords/cc_protection_profile_id
pdf_data/report_keywords/cc_security_level	EAL: EAL 2: 2 EAL2: 7
pdf_data/report_keywords/cc_sar
pdf_data/report_keywords/cc_sfr	FCS: FCS_CKM: 2 FCS_CKM.4.1: 1 FCS_COP: 4 FIA: FIA_AFL.1.1: 1 FIA_ATD.1.1: 1 FIA_UAU.2.1: 1 FMT: FMT_SMF.1.1: 1 FMT_SMR.1.1: 1 FMT_SMR.1.2: 1
pdf_data/report_keywords/cc_claims
pdf_data/report_keywords/vendor
pdf_data/report_keywords/eval_facility		Teron: Teron Labs: 4
pdf_data/report_keywords/symmetric_crypto	DES: 3DES: 3DES: 4 TDES: 6 DES: DES: 1
pdf_data/report_keywords/asymmetric_crypto
pdf_data/report_keywords/pq_crypto
pdf_data/report_keywords/hash_function	MD: MD5: MD5: 5 SHA: SHA1: SHA-1: 5
pdf_data/report_keywords/crypto_scheme		KEX: Key Exchange: 1
pdf_data/report_keywords/crypto_protocol		IKE: IKE: 3 IPsec: IPsec: 7 SSH: SSH: 3 SSHv2: 2 VPN: VPN: 12
pdf_data/report_keywords/randomness		RNG: RBG: 1
pdf_data/report_keywords/cipher_mode	CBC: CBC: 2 ECB: ECB: 1
pdf_data/report_keywords/ecc_curve
pdf_data/report_keywords/crypto_engine
pdf_data/report_keywords/tls_cipher_suite
pdf_data/report_keywords/crypto_library
pdf_data/report_keywords/vulnerability
pdf_data/report_keywords/side_channel_analysis
pdf_data/report_keywords/technical_report_id
pdf_data/report_keywords/device_model
pdf_data/report_keywords/tee_name
pdf_data/report_keywords/os_name
pdf_data/report_keywords/cplc_data
pdf_data/report_keywords/ic_data_group
pdf_data/report_keywords/standard_id	FIPS: FIPS 180-2: 3 FIPS 46-3: 2 ISO: ISO/IEC 18045: 2 ISO/IEC15408: 2 PKCS: PKCS#11: 14
pdf_data/report_keywords/javacard_version
pdf_data/report_keywords/javacard_api_const
pdf_data/report_keywords/javacard_packages
pdf_data/report_keywords/certification_process
pdf_data/report_metadata	/Author: ISCB Department /Category: PUBLIC /Caveat: FINAL /Classification: PUBLIC /Company: CyberSecurity Malaysia /CreationDate: D:20131220170040+08'00' /Creator: Acrobat PDFMaker 10.1 for Word /Developer: SecureMetric Technology Sdn Bhd /Document Type: CR /Identifier: ISCB-5-RPT-C051-CR-v1a /Index: MyCB_TMP_002 /Keywords: ST3 Ace /ModDate: D:20131220170049+08'00' /Phase: Release /Producer: Adobe PDF Library 10.0 /Project Code: C051 /Released: 20 December 2013 /ST Date: 21 November 2013 /ST Title: ST3 Ace Security Target /ST Version: 1.1 /SourceModified: D:20131220090019 /Sponsor: SecureMetric Technology Sdn Bhd /Subject: ST3 Ace (ST3 Ace Token Manager v1.0.13.927, ST3 Ace Middleware v1.0.13.910, and SecureCOS Firmware v5.2) /TOE Name: ST3 Ace /TOE Version: ST3 Ace Token Manager (v1.0.13.927), ST3 Ace Middleware (v1.0.13.910), SecureCOS Firmware (v5.2) /Title: C051 Certification Report /Version: v1a pdf_file_size_bytes: 421845 pdf_hyperlinks: mailto:[email protected], http://www.commoncriteriaportal.org/, http://www.cybersecurity.my/mycc pdf_is_encrypted: True pdf_number_of_pages: 29	/CreationDate: D:20220105124420+11'00' /ModDate: D:20220105124420+11'00' pdf_file_size_bytes: 4197485 pdf_hyperlinks: https://www.commoncriteriaportal.org/, https://www.cyber.gov.au/sites/default/files/2019-03/AISEP_Policy_Manual.pdf, https://www.juniper.net/customers/csc/management, https://www.gcsb.govt.nz/, https://www.juniper.net/, https://www.cyber.gov.au/ism, https://www.nzism.gcsb.govt.nz/ism-document/, https://www.juniper.net/documentation pdf_is_encrypted: False pdf_number_of_pages: 20
pdf_data/st_filename	SecureMetric ST3 Ace Security Target v1.1.pdf
pdf_data/st_frontpage
pdf_data/st_keywords/cc_cert_id
pdf_data/st_keywords/cc_protection_profile_id
pdf_data/st_keywords/cc_security_level	EAL: EAL2: 9
pdf_data/st_keywords/cc_sar	ADV: ADV_ARC.1: 1 ADV_FSP.2: 1 ADV_TDS.1: 1 AGD: AGD_OPE.1: 1 AGD_PRE.1: 1 ALC: ALC_CMC.2: 1 ALC_CMS.2: 1 ALC_DEL.1: 1 ASE: ASE_CCL.1: 4 ASE_ECD.1: 1 ASE_INT.1: 4 ASE_OBJ.2: 4 ASE_REQ.2: 4 ASE_SPD.1: 4 ASE_TSS.1: 4 ATE: ATE_COV.1: 1 ATE_FUN.1: 1 ATE_IND.2: 1 AVA: AVA_VAN.2: 1
pdf_data/st_keywords/cc_sfr	FCS: FCS_CKM: 15 FCS_CKM.1: 11 FCS_CKM.2: 4 FCS_CKM.4: 21 FCS_CKM.4.1: 1 FCS_COP: 25 FCS_COP.1: 5 FDP: FDP_IFF: 2 FDP_ITC.1: 10 FDP_ITC.2: 10 FIA: FIA_AFL.1: 6 FIA_AFL.1.1: 1 FIA_AFL.1.2: 1 FIA_ATD.1: 5 FIA_ATD.1.1: 1 FIA_UAU.1: 1 FIA_UAU.2: 7 FIA_UAU.2.1: 1 FIA_UID.1: 4 FMT: FMT_MTD: 18 FMT_MTD.1: 1 FMT_SMF.1: 12 FMT_SMF.1.1: 1 FMT_SMR.1: 15 FMT_SMR.1.1: 1 FMT_SMR.1.2: 1
pdf_data/st_keywords/cc_claims	A: A.HOST: 2 A.USER: 3 O: O.AUTHENTICATE: 5 O.CRYPT: 4 O.DISCLOSURE: 1 O.KEYPROTECT: 3 O.MODIFY: 4 OE: OE.AUTHDATA: 3 OE.INSTALL: 3 T: T.COMINT: 3 T.DISCLOSURE: 2 T.IMPERSON: 3 T.MODIFY: 2
pdf_data/st_keywords/vendor	Microsoft: Microsoft: 2
pdf_data/st_keywords/eval_facility
pdf_data/st_keywords/symmetric_crypto	DES: 3DES: 3-DES: 1 TDES: 12 DES: DES: 3
pdf_data/st_keywords/asymmetric_crypto
pdf_data/st_keywords/pq_crypto
pdf_data/st_keywords/hash_function	MD: MD5: MD5: 8 SHA: SHA1: SHA-1: 5
pdf_data/st_keywords/crypto_scheme
pdf_data/st_keywords/crypto_protocol
pdf_data/st_keywords/randomness
pdf_data/st_keywords/cipher_mode	CBC: CBC: 2 ECB: ECB: 1
pdf_data/st_keywords/ecc_curve
pdf_data/st_keywords/crypto_engine
pdf_data/st_keywords/tls_cipher_suite
pdf_data/st_keywords/crypto_library
pdf_data/st_keywords/vulnerability
pdf_data/st_keywords/side_channel_analysis
pdf_data/st_keywords/technical_report_id
pdf_data/st_keywords/device_model
pdf_data/st_keywords/tee_name
pdf_data/st_keywords/os_name
pdf_data/st_keywords/cplc_data
pdf_data/st_keywords/ic_data_group
pdf_data/st_keywords/standard_id	FIPS: FIPS 180-2: 3 FIPS 46-3: 2 PKCS: PKCS#11: 7
pdf_data/st_keywords/javacard_version
pdf_data/st_keywords/javacard_api_const
pdf_data/st_keywords/javacard_packages
pdf_data/st_keywords/certification_process
pdf_data/st_metadata	/Author: Muzamir Mohamad /Category: ASE /Company: BAE Systems Detica /CreationDate: D:20131121162318+11'00' /Creator: Acrobat PDFMaker 11 for Word /Develop_Fullname: SecureMetric Technology Sdn Bhd /Developer_Shortname: SecureMetric /Document_Classification: COMMERCIAL-IN-CONFIDENCE /Document_ID: ACE_EAL2_ST /Document_Phase: Released /Document_Released: 21-NOV-13 /Document_Version: 1.1 /Evaluation_CC: 3.1 (REV 4) /Evaluation_EAL: EAL2 /ModDate: D:20131121162537+11'00' /Producer: Adobe PDF Library 11.0 /Product_Fullname: ST3 Ace /Product_Shortname: ST3 Ace /Product_Version: ST3_Manager.exe v1.0.13.0927, st3csp11.dll & st3csp11_s.dll v1.0.13.0910 and SecureCOS firmware v5.2 /SourceModified: D:20131121044244 /Subject: ST3 Ace /TOE_Title: ST3 Ace /TOE_Version: ST3 Ace Token Manager v1.0.13.927, ST3 Ace Middleware v1.0.13.910 and SecureCOS Firmware v5.2 /Title: ST3 Ace Security Target pdf_file_size_bytes: 381558 pdf_hyperlinks: http://en.wikipedia.org/wiki/National_Security_Agency, http://en.wikipedia.org/wiki/Federal_Information_Processing_Standard, http://en.wikipedia.org/wiki/National_Institute_of_Standards_and_Technology, http://en.wikipedia.org/wiki/Cryptographic_hash_function, http://en.wikipedia.org/wiki/Bit, http://en.wikipedia.org/wiki/XOR, http://en.wikipedia.org/wiki/Password, http://en.wikipedia.org/wiki/Secure_Hash_Algorithm pdf_is_encrypted: False pdf_number_of_pages: 32
state/cert/convert_garbage	None	None
state/cert/convert_ok	False	True
state/cert/download_ok	False	True
state/cert/extract_ok	False	True
state/cert/pdf_hash	Different	Different
state/cert/txt_hash	Different	Different
state/report/convert_garbage	None	None
state/report/convert_ok	True	True
state/report/download_ok	True	True
state/report/extract_ok	True	True
state/report/pdf_hash	Different	Different
state/report/txt_hash	Different	Different
state/st/convert_garbage	None	None
state/st/convert_ok	True	False
state/st/download_ok	True	False
state/st/extract_ok	True	False
state/st/pdf_hash	Different	Different
state/st/txt_hash	Different	Different