Comparing certificates Experimental feature

You are comparing two certificates. By default, only differing attributes are shown. Use the button below to show/hide all attributes.

Showing only differing attributes.
CyberArk Privileged Access Manager – Digital Vault Server v14.0.0.40
NSCIB-CC-2400013-01-CR
Huawei FusionSphere 6.5.RC1.T7
2018-58-INF-3355
name CyberArk Privileged Access Manager – Digital Vault Server v14.0.0.40 Huawei FusionSphere 6.5.RC1.T7
category Access Control Devices and Systems Operating Systems
scheme NL ES
not_valid_after 03.07.2029 03.02.2026
not_valid_before 03.07.2024 04.02.2021
cert_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/NSCIB-CC-2400013-01-Cert.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/2018-58%20CCRA.pdf
report_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/NSCIB-CC-2400013-01-CR.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/2018-58%20INF-3355.pdf
st_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/NSCIB-CC-2400013-01-ST_1.8.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/2018-58%20ST.pdf
manufacturer CyberArk Software, Ltd Huawei Technologies Co. Ltd.
manufacturer_web https://www.cyberark.com/ https://www.huawei.com
security_level ASE_SPD.1, ATE_IND.1, ALC_CMS.1, ASE_INT.1, AGD_OPE.1, ALC_CMC.1, ADV_FSP.1, ASE_ECD.1, ASE_TSS.1, ASE_CCL.1, AGD_PRE.1, AVA_VAN.1 EAL2+, ALC_FLR.2
dgst f4123aeccf86806e 1978c3be06f0e1a7
heuristics/cert_id NSCIB-CC-2400013-01-CR 2018-58-INF-3355
heuristics/cert_lab []
heuristics/cpe_matches cpe:2.3:a:cyberark:privileged_access_manager:14.0:*:*:*:*:*:*:* {}
heuristics/related_cves CVE-2024-54840 {}
heuristics/extracted_sars ASE_TSS.1, ADV_FSP.1, ALC_CMC.1, ASE_INT.1, ASE_SPD.1, ASE_OBJ.1, AVA_VAN.1, ATE_IND.1, ALC_CMS.1, AGD_OPE.1, ASE_REQ.1, ASE_CCL.1, ASE_ECD.1, ALC_TSU_EXT.1, AGD_PRE.1 ASE_TSS.1, ADV_TDS.1, ASE_INT.1, ALC_DEL.1, ALC_CMC.2, ATE_IND.2, ATE_COV.1, AGD_OPE.1, ADV_ARC.1, AVA_VAN.2, ASE_CCL.1, ALC_FLR.2, ASE_REQ.2
heuristics/extracted_versions 14.0.0.40 6.5
heuristics/scheme_data
  • category: Operating systems
  • certification_date: 04.02.2021
  • enhanced:
    • category: Operating systems
    • cc_version: Common Criteria 3.1 release 5
    • cert_link: https://oc.ccn.cni.es/en/component/djcatalog2/?format=raw&task=download&fid=1084
    • certification_date: 04.02.2021
    • description: The Target of Evaluation (TOE) Huawei FusionSphere 6.5.RC1.T7 is a cloud operating system (OS) solution. The TOE provides the following key security features: VM Network Separation: The TOE supports virtual switches and virtual networks. VMs can be separated by creating different networks. Administrators can configure network isolation policies. VM isolation: The hypervisor isolates VMs running on the same physical server to prevent data theft and malicious attacks. VM users can only access resources (hardware and software resources and data) that belong to their own VMs. User and Privilege Management: The TOE supports role-based access control, used for the system maintenance personnel to access the virtualization platform and VMs. The table below shows list of roles defined in the TOE and the description of each role. TOE Access: The TOE offers functionality for terminating active sessions automatically after an inactivity period of time. Communications security: The TOE can be remotely accessed using a SSH connection, creating a trusted path between the TOE and the authorized users. Security audit: Operation logs record the security-relevant events performed by users on the system and the result of the operation and is used for tracing and auditing. Access control: Huawei FusionSphere software implements rolebased access control, limiting access to different management functions to different roles as defined in administrator-defined access control associations. Authentication: Operators who access the TOE locally or remotely in order to execute device management functions are identified by individual user names and authenticated by passwords.
    • evaluation_facility: DEKRA Testing and Certification S.A.U.
    • level: EAL2 + (ALC_FLR.2)
    • manufacturer: Huawei Technologies Co., Ltd.
    • report_link: https://oc.ccn.cni.es/en/component/djcatalog2/?format=raw&task=download&fid=1083
    • status: Certified
    • target_link: https://oc.ccn.cni.es/en/component/djcatalog2/?format=raw&task=download&fid=1082
    • type: Product
  • manufacturer: Huawei Technologies Co., Ltd.
  • product: Huawei FusionSphere 6.5.RC1.T7
  • product_link: https://oc.ccn.cni.es/en/certified-products/certified-products/399-huawei-fusionsphere-6-5-rc1-t7
heuristics/protection_profiles 90c116e62a19bc4d, c40ae795865a0dba {}
protection_profile_links https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/PP_APP_V1.4.pdf, https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/PKG_TLS_V1.1.pdf {}
pdf_data/cert_filename NSCIB-CC-2400013-01-Cert.pdf 2018-58 CCRA.pdf
pdf_data/cert_keywords/cc_cert_id
  • NL:
    • NSCIB-2400013-01: 1
    • NSCIB-CC-2400013-01: 1
pdf_data/cert_keywords/cc_security_level
  • EAL:
    • EAL2: 1
    • EAL4: 1
  • EAL:
    • EAL 2: 1
    • EAL 4: 1
    • EAL2: 1
pdf_data/cert_keywords/cc_sar
  • ADV:
    • ADV_FSP.1: 1
  • AGD:
    • AGD_OPE.1: 1
    • AGD_PRE.1: 1
  • ALC:
    • ALC_CMC.1: 1
    • ALC_CMS.1: 1
    • ALC_FLR: 1
    • ALC_FLR.3: 1
    • ALC_TSU_EXT.1: 1
  • ASE:
    • ASE_CCL.1: 1
    • ASE_ECD.1: 1
    • ASE_INT.1: 1
    • ASE_OBJ.1: 1
    • ASE_SPD.1: 1
  • ATE:
    • ATE_IND.1: 1
  • AVA:
    • AVA_VAN.1: 1
  • ALC:
    • ALC_FLR: 2
    • ALC_FLR.2: 1
pdf_data/cert_keywords/cc_claims
  • A:
    • A.U: 1
  • O:
    • O.E: 1
  • T:
    • T.I: 1
pdf_data/cert_keywords/vendor
  • Huawei:
    • Huawei: 2
    • Huawei Technologies Co: 2
pdf_data/cert_keywords/eval_facility
  • BrightSight:
    • Brightsight: 1
  • SGS:
    • SGS: 1
    • SGS Brightsight: 1
  • DEKRA:
    • DEKRA Testing and Certification: 1
pdf_data/cert_keywords/standard_id
  • ISO:
    • ISO/IEC 15408-1: 2
    • ISO/IEC 18045: 4
    • ISO/IEC 18045:2008: 1
pdf_data/cert_metadata
  • /Author: brian
  • /CreationDate: D:20240717191034+01'00'
  • /Creator: Microsoft® Word 2021
  • /ModDate: D:20240717191034+01'00'
  • /Producer: Microsoft® Word 2021
  • /Title: NSCIB Certificate
  • pdf_file_size_bytes: 127943
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 1
  • /Author:
  • /CreationDate:
  • /Creator:
  • /Keywords:
  • /ModDate:
  • /Producer:
  • /Subject:
  • /Title:
  • /Trapped:
  • pdf_file_size_bytes: 738373
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 2
pdf_data/report_filename NSCIB-CC-2400013-01-CR.pdf 2018-58 INF-3355.pdf
pdf_data/report_frontpage
  • NL:
    • cert_id: NSCIB-CC-2400013-01-CR
    • cert_item: CyberArk Privileged Access Manager – Digital Vault Server v14.0.0.40
    • cert_lab: SGS Brightsight B.V.
    • developer: CyberArk Software Ltd
  • NL:
pdf_data/report_keywords/cc_cert_id
  • NL:
    • NSCIB-2400013-01: 1
    • NSCIB-CC-2400013-01-CR: 12
  • ES:
    • 2018-58-INF-3355-v1: 1
pdf_data/report_keywords/cc_security_level
  • EAL:
    • EAL4: 1
  • EAL:
    • EAL 1: 1
    • EAL 2: 1
    • EAL 4: 2
    • EAL2: 9
  • ITSEC:
    • ITSEC Evaluation: 1
pdf_data/report_keywords/cc_sar
  • ADV:
    • ADV_FSP.1: 1
  • AGD:
    • AGD_OPE.1: 1
    • AGD_PRE.1: 1
  • ALC:
    • ALC_CMC.1: 1
    • ALC_CMS.1: 1
    • ALC_TSU_EXT.1: 1
  • ASE:
    • ASE_CCL.1: 1
    • ASE_ECD.1: 1
    • ASE_INT.1: 1
    • ASE_OBJ.1: 1
    • ASE_SPD.1: 1
  • ATE:
    • ATE_IND.1: 1
  • AVA:
    • AVA_VAN: 1
    • AVA_VAN.1: 1
  • ADV:
    • ADV_ARC.1: 1
    • ADV_TDS.1: 1
  • AGD:
    • AGD_OPE.1: 1
  • ALC:
    • ALC_CMC.2: 1
    • ALC_DEL.1: 1
    • ALC_FLR: 4
    • ALC_FLR.2: 6
  • ASE:
    • ASE_CCL.1: 1
    • ASE_INT.1: 1
    • ASE_REQ.2: 1
    • ASE_TSS.1: 1
  • ATE:
    • ATE_COV.1: 1
    • ATE_IND.2: 1
  • AVA:
    • AVA_VAN.2: 1
pdf_data/report_keywords/cc_sfr
  • FAU:
    • FAU_GEN.1: 1
    • FAU_SAR.1: 1
    • FAU_STG.1: 1
  • FDP:
    • FDP_ACC.1: 1
    • FDP_IFC: 2
    • FDP_IFF: 2
    • FDP_RIP.1: 1
  • FIA:
    • FIA_AFL.1: 1
    • FIA_ATD.1: 1
    • FIA_UAU.2: 1
  • FMT:
    • FMT_MOF.1: 1
    • FMT_MSA.1: 1
    • FMT_SMR.1: 1
  • FTA:
    • FTA_SSL.3: 1
  • FTP:
    • FTP_TRP.1: 1
pdf_data/report_keywords/cc_claims
  • A:
    • A.U: 5
pdf_data/report_keywords/vendor
  • Huawei:
    • Huawei: 21
    • Huawei Technologies Co: 3
pdf_data/report_keywords/eval_facility
  • BrightSight:
    • Brightsight: 2
  • SGS:
    • SGS: 2
    • SGS Brightsight: 2
  • DEKRA:
    • DEKRA Testing and Certification: 5
pdf_data/report_keywords/crypto_protocol
  • SSH:
    • SSH: 2
  • TLS:
    • TLS:
      • TLS: 3
      • TLS v1.2: 1
  • SSH:
    • SSH: 2
pdf_data/report_keywords/crypto_library
  • OpenSSL:
    • OpenSSL: 1
pdf_data/report_keywords/side_channel_analysis
  • other:
    • JIL: 1
pdf_data/report_keywords/certification_process
  • OutOfScope:
    • following proprietary or non-standard algorithms, protocols and implementations: none, which are out of scope as there are no security claims relating to these. Page: 11/12 of report number: 1
    • out of scope: 1
pdf_data/report_metadata
pdf_data/st_filename NSCIB-CC-2400013-01-ST_1.8.pdf 2018-58 ST.pdf
pdf_data/st_keywords/cc_security_level
  • EAL:
    • EAL 2: 1
    • EAL2: 1
pdf_data/st_keywords/cc_sar
  • ADV:
    • ADV_FSP.1: 1
  • AGD:
    • AGD_OPE.1: 1
    • AGD_PRE.1: 1
  • ALC:
    • ALC_CMC.1: 1
    • ALC_CMS.1: 1
    • ALC_TSU_EXT.1: 1
  • ASE:
    • ASE_CCL.1: 1
    • ASE_ECD.1: 1
    • ASE_INT.1: 1
    • ASE_OBJ.1: 1
    • ASE_REQ.1: 1
    • ASE_SPD.1: 1
    • ASE_TSS.1: 1
  • ATE:
    • ATE_IND.1: 1
  • AVA:
    • AVA_VAN.1: 1
  • ALC:
    • ALC_FLR.2: 3
pdf_data/st_keywords/cc_sfr
  • FCS:
    • FCS_CKM: 3
    • FCS_CKM.1: 1
    • FCS_CKM.2: 2
    • FCS_CKM.2.1: 1
    • FCS_CKM_EXT.1: 3
    • FCS_CKM_EXT.1.1: 1
    • FCS_COP: 13
    • FCS_COP.1: 4
    • FCS_RBG_EXT.1: 3
    • FCS_RBG_EXT.1.1: 1
    • FCS_STO_EXT.1: 4
    • FCS_STO_EXT.1.1: 1
    • FCS_TLSS_EXT: 1
    • FCS_TLSS_EXT.1: 1
    • FCS_TLSS_EXT.1.1: 2
    • FCS_TLSS_EXT.1.2: 1
    • FCS_TLSS_EXT.1.3: 1
    • FCS_TLS_EXT.1: 3
    • FCS_TLS_EXT.1.1: 1
  • FDP:
    • FDP_DAR_EXT.1: 2
    • FDP_DAR_EXT.1.1: 1
    • FDP_DEC_EXT.1: 4
    • FDP_DEC_EXT.1.1: 1
    • FDP_DEC_EXT.1.2: 1
    • FDP_NET_EXT.1: 3
    • FDP_NET_EXT.1.1: 1
  • FMT:
    • FMT_CFG_EXT.1: 3
    • FMT_CFG_EXT.1.1: 1
    • FMT_CFG_EXT.1.2: 1
    • FMT_MEC_EXT.1: 3
    • FMT_MEC_EXT.1.1: 1
    • FMT_SMF.1: 3
    • FMT_SMF.1.1: 1
  • FPR:
    • FPR_ANO_EXT.1: 3
    • FPR_ANO_EXT.1.1: 1
  • FPT:
    • FPT_AEX_EXT.1: 3
    • FPT_AEX_EXT.1.1: 1
    • FPT_AEX_EXT.1.2: 1
    • FPT_AEX_EXT.1.3: 2
    • FPT_AEX_EXT.1.4: 1
    • FPT_AEX_EXT.1.5: 2
    • FPT_API_EXT.1: 3
    • FPT_API_EXT.1.1: 1
    • FPT_IDV_EXT.1: 3
    • FPT_IDV_EXT.1.1: 1
    • FPT_LIB_EXT.1: 3
    • FPT_LIB_EXT.1.1: 1
    • FPT_TUD_EXT: 1
    • FPT_TUD_EXT.1: 2
    • FPT_TUD_EXT.1.1: 1
    • FPT_TUD_EXT.1.2: 1
    • FPT_TUD_EXT.1.3: 1
    • FPT_TUD_EXT.1.4: 1
    • FPT_TUD_EXT.1.5: 1
    • FPT_TUD_EXT.2: 2
    • FPT_TUD_EXT.2.1: 1
    • FPT_TUD_EXT.2.2: 2
    • FPT_TUD_EXT.2.3: 1
  • FTP:
    • FTP_DIT_EXT.1: 3
    • FTP_DIT_EXT.1.1: 2
  • FAU:
    • FAU_GEN.1: 8
    • FAU_GEN.1.2: 1
    • FAU_GEN.2: 5
    • FAU_SAR.1: 6
    • FAU_SAR.1.2: 1
    • FAU_SAR.2: 4
    • FAU_STG.1: 6
    • FAU_STG.1.2: 1
    • FAU_STG.3: 4
  • FDP:
    • FDP_ACC: 1
    • FDP_ACC.1: 8
    • FDP_ACF.1: 6
    • FDP_ACF.1.2: 1
    • FDP_ACF.1.3: 1
    • FDP_ACF.1.4: 1
    • FDP_IFC: 12
    • FDP_IFC.1: 3
    • FDP_IFC.1.1: 2
    • FDP_IFF: 10
    • FDP_IFF.1: 2
    • FDP_IFF.1.1: 2
    • FDP_IFF.1.2: 2
    • FDP_IFF.1.3: 2
    • FDP_IFF.1.4: 2
    • FDP_IFF.1.5: 2
    • FDP_RIP.1: 5
  • FIA:
    • FIA_AFL.1: 5
    • FIA_AFL.1.2: 1
    • FIA_ATD.1: 5
    • FIA_SOS.1: 4
    • FIA_UAU.2: 5
    • FIA_UID.1: 2
    • FIA_UID.2: 6
  • FMT:
    • FMT_MOF.1: 5
    • FMT_MSA.1: 7
    • FMT_MSA.3: 14
    • FMT_MSA.3.2: 1
    • FMT_SMF.1: 9
    • FMT_SMR.1: 9
    • FMT_SMR.1.2: 1
  • FPT:
    • FPT_STM.1: 1
  • FTA:
    • FTA_SSL.3: 5
  • FTP:
    • FTP_TRP.1: 5
    • FTP_TRP.1.2: 1
    • FTP_TRP.1.3: 1
pdf_data/st_keywords/cc_claims
  • A:
    • A.PLATFORM: 3
    • A.PROPER_ADMIN: 3
    • A.PROPER_USER: 3
  • O:
    • O.INTEGRITY: 3
    • O.MANAGEMENT: 5
    • O.PROTECTED_COMMS: 5
    • O.PROTECTED_STORAG: 1
    • O.PROTECTED_STORAGE: 2
    • O.QUALITY: 5
  • OE:
    • OE.PLATFORM: 3
    • OE.PROPER_ADMIN: 3
    • OE.PROPER_USER: 3
  • T:
    • T.LOCAL_ATTACK: 2
    • T.NETWORK_ATTACK: 5
    • T.NETWORK_EAVES: 1
    • T.NETWORK_EAVESDROP: 3
    • T.PHYSICAL_ACCESS: 2
  • A:
    • A.ADMIN_NOEVIL: 1
    • A.ADMIN_NO_EVIL: 2
    • A.OS_TRUSTED: 2
    • A.PHY_PROPECT: 1
    • A.PHY_PROTECT: 2
    • A.SEP_PHY_NETWORK: 2
    • A.TIME_SRC: 2
  • O:
    • O.VNETWORK_ISO: 4
  • OE:
    • OE.OS_TRUSTED: 2
    • OE.PHY_PROTECTION: 2
    • OE.SEP_PHY_NETWORK: 2
    • OE.TIME_SRC: 2
    • OE.TRUST_WORTHY_USER: 2
  • T:
    • T.HOST_BYPASS: 3
    • T.NOAUTH: 3
    • T.NOIDENTIFY: 2
    • T.VM_BYPASS: 2
    • T.VNETWORK_BYPASS: 2
pdf_data/st_keywords/vendor
  • Microsoft:
    • Microsoft: 2
  • Huawei:
    • Huawei: 16
    • Huawei Technologies Co: 51
pdf_data/st_keywords/eval_facility
  • Lightship:
    • Lightship Security: 1
pdf_data/st_keywords/symmetric_crypto
  • AES_competition:
    • AES:
      • AES: 4
  • constructions:
    • MAC:
      • HMAC: 4
      • HMAC-SHA-256: 2
      • HMAC-SHA-384: 2
      • HMAC-SHA-512: 2
pdf_data/st_keywords/asymmetric_crypto
  • ECC:
    • ECC:
      • ECC: 2
    • ECDH:
      • ECDHE: 3
    • ECDSA:
      • ECDSA: 1
  • FF:
    • DH:
      • DHE: 2
      • Diffie-Hellman: 1
  • RSA:
    • RSA 2048: 1
pdf_data/st_keywords/hash_function
  • SHA:
    • SHA2:
      • SHA-256: 2
      • SHA-384: 2
      • SHA-512: 2
      • SHA256: 3
      • SHA384: 3
      • SHA512: 3
pdf_data/st_keywords/crypto_scheme
  • KA:
    • Key agreement: 1
  • KEX:
    • Key Exchange: 1
  • MAC:
    • MAC: 2
pdf_data/st_keywords/crypto_protocol
  • SSH:
    • SSH: 3
  • TLS:
    • SSL:
      • SSL: 1
      • SSL 2.0: 1
      • SSL 3.0: 1
    • TLS:
      • TLS: 39
      • TLS 1.0: 1
      • TLS 1.1: 2
      • TLS 1.2: 1
      • TLS v1.2: 1
      • TLSv1.2: 1
  • SSH:
    • SSH: 16
pdf_data/st_keywords/randomness
  • PRNG:
    • DRBG: 8
pdf_data/st_keywords/cipher_mode
  • CTR:
    • CTR: 1
pdf_data/st_keywords/ecc_curve
  • NIST:
    • P-256: 2
    • P-384: 2
    • secp256r1: 1
    • secp384r1: 1
pdf_data/st_keywords/tls_cipher_suite
  • TLS:
    • TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: 1
    • TLS_DHE_RSA_WITH_AES_256_GCM_SHA384: 3
    • TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384: 1
    • TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: 1
    • TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384: 5
pdf_data/st_keywords/crypto_library
  • OpenSSL:
    • OpenSSL: 3
pdf_data/st_keywords/standard_id
  • CC:
    • CCMB-2017-04-002: 1
    • CCMB-2017-04-003: 1
  • FIPS:
    • FIPS PUB 186-4: 4
  • NIST:
    • NIST SP 800-38A: 1
    • NIST SP 800-38D: 1
    • SP 800-90: 1
  • RFC:
    • RFC 5246: 1
    • RFC 5288: 2
    • RFC 5289: 2
    • RFC 7919: 1
pdf_data/st_metadata
state/cert/convert_garbage False True
state/cert/pdf_hash Different Different
state/cert/txt_hash Different Different
state/report/pdf_hash Different Different
state/report/txt_hash Different Different
state/st/extract_ok True False
state/st/pdf_hash Different Different
state/st/txt_hash Different Different