BlackBerry Unified Endpoint Management (UEM) Server

CSV information

Status active
Valid from 08.09.2025
Valid until 08.09.2030
Scheme πŸ‡©πŸ‡ͺ DE
Manufacturer BlackBerry Ltd.
Category Mobility
Security level ALC_FLR.3, EAL4+
Protection profiles

Heuristics summary

Certificate ID: BSI-DSZ-CC-1235-2025

Certificate

Extracted keywords

Security level
EAL 4, EAL 2, EAL 4 augmented
Security Assurance Requirements (SAR)
ALC_FLR.3, ALC_FLR
Protection profiles
BSI-CC-PP-0115-2021, BSI-CC-PP-0116-
Certificates
BSI-DSZ-CC-1235-2025

File metadata

Title Certificate BSI-DSZ-CC-1235-2025
Subject Common Criteria, Certification, Zertifizierung, Mobile Device Management, MDM, BlackBerry Unified Endpoint Management (UEM)
Keywords "Common Criteria, Certification, Zertifizierung, Mobile Device Management, MDM, BlackBerry Unified Endpoint Management (UEM)"
Author Federal Office for Information Security
Pages 1

Certification report

Extracted keywords

Symmetric Algorithms
AES, HMAC
Asymmetric Algorithms
ECDH, ECDSA, ECC, Diffie-Hellman
Hash functions
SHA-256, SHA-384, SHA-512, SHA-2
Schemes
Key agreement
Protocols
TLS, TLS v1.2, TLSv1.2
Randomness
DRBG, RNG
Elliptic Curves
P-256, P-384, P-521, NIST P-256
Block cipher modes
CBC, GCM

Vendor
Samsung, Microsoft

Security level
EAL 4, EAL 2, EAL 1, EAL 4 augmented
Claims
OE.PROPERSTAFF, OE.PROPERUSER, OE.PROPERMANAGEMENT, OE.RESILIENCE, OE.DEVICELIFECYCLE, OE.SUPPORTINGSERVICES, OE.RELIABLETIMESTAMPS, OE.AUDITTRAIL
Security Assurance Requirements (SAR)
ALC_FLR.3, ALC_FLR
Protection profiles
BSI-CC-PP-0115-2021, BSI-CC-PP-0116-, BSI-CC-PP-0115-, BSI-CC-PP-0116-2021
Certificates
BSI-DSZ-CC-1235-2025
Evaluation facilities
atsec

Certification process
being maintained, is not given any longer. In particular, prior to the dissemination of confidential documentation and information related to the TOE or resulting from the evaluation and certification, Report, Version 1, 2025-08-19, Final Evaluation Technical Report, atsec information security GmbH, (confidential document) [7] Protection Profile Mobile Device Management - Trusted Server (MDM-TS). Version 1.0, 2021-09-27, for the TOE, Archive β€œalc/ALC_CI_List_2025-06-16.zip”, dated 2025-06-16, BSI Evaluation CI list (confidential document) [10] Guidance documentation for the TOE, Version 1.14, 2025-08-18, BlackBerry UEM Administrative

File metadata

Title Certification Report BSI-DSZ-CC-1235-2025
Subject Common Criteria, Certification, Zertifizierung, Mobile Device Management, MDM, BlackBerry Unified Endpoint Management (UEM)
Keywords "Common Criteria, Certification, Zertifizierung, Mobile Device Management, MDM, BlackBerry Unified Endpoint Management (UEM)"
Author Federal Office for Information Security
Pages 25

Frontpage

Certificate ID BSI-DSZ-CC-1235-2025
Certified item BlackBerry Unified Endpoint Management (UEM) Server Version 12.21.1 (40.32.0
Certification lab BSI
Developer BlackBerry Ltd

Security target

Extracted keywords

Symmetric Algorithms
AES, AES-256, HMAC, HMAC-SHA-256, HMAC-SHA-384
Asymmetric Algorithms
RSA 4096, RSA 3072, ECDHE, ECDSA, ECIES, ECC, DHE, DSA
Hash functions
SHA512, SHA-256, SHA-384, SHA-512
Schemes
MAC, KA
Protocols
SSL 2.0, SSL 3.0, SSL, TLS, TLS v1.2, TLS 1.0, TLS 1.1, IPsec, VPN
Randomness
DRBG, RNG, RBG
Elliptic Curves
P-256, P-384, P-521, secp256r1, secp384r1, secp521r1
Block cipher modes
CBC, GCM
TLS cipher suites
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

Vendor
Samsung, Microsoft

Security level
EAL 4, EAL4, EAL4 augmented
Claims
T.MALICIOUSDEVICE, T.MALICIOUSSTAFF, T.MASQUERADING, T.COMPROMISEDCOMMUNICATION, T.COMPROMISEDSTORAGE, T.COMPROMISED-, A.PROPERSTAFF, A.PROPERUSER, A.PROPERMANAGEMENT, A.RESILIENCE, OT.TRUSTEDCOMMUNICATIONCHANNEL, OT.COMMUNICATION, OT.DEVICELIFECYCLE, OT.DEVICETRACKING, OT.LOGGING, OT.MANAGEMENT, OT.SEPARATION, OT.STORAGE, OE.TRUSTEDCOMMUNICATIONCHANNEL, OE.PROPERSTAFF, OE.PROPERUSER, OE.PROPERMANAGEMENT, OE.RESILIENCE, OE.DEVICELIFECYCLE, OE.SUPPORTINGSERVICES, OE.RELIABLETIMESTAMPS, OE.AUDITTRAIL
Security Assurance Requirements (SAR)
ADV_ARC.1, ADV_FSP.4, ADV_IMP.1, ADV_TDS.3, AGD_OPE.1, AGD_PRE.1, ALC_FLR.3, ALC_CMC.4, ALC_CMS.4, ALC_DEL.1, ALC_DVS.1, ALC_LCD.1, ALC_TAT.1, ATE_COV.2, ATE_DPT.1, ATE_FUN.1, ATE_IND.2, AVA_VAN.3, ASE_CCL.1, ASE_ECD.1, ASE_INT.1, ASE_OBJ.2, ASE_REQ.2, ASE_SPD.1, ASE_TSS.1
Security Functional Requirements (SFR)
FAU_STG.3, FAU_STG.4, FAU_STG.1, FAU_STG.2, FAU_GEN, FAU_GEN.1, FAU_GEN.2, FAU_SAR.1, FAU_SAR.2, FAU_SAR.3, FAU_GEN.1.1, FAU_GEN.1.2, FAU_GEN.2.1, FAU_SAR.1.1, FAU_SAR.1.2, FAU_SAR.2.1, FAU_SAR.3.1, FAU_STG.4.1, FAU_SEL.1, FAU_SAR, FAU_STG, FCS_CKM.5, FCS_CKM.6, FCS_CKM.4, FCS_COP.1, FCS_CKM, FCS_RNG.1, FCS_COP, FCS_CKM.2, FCS_CKM.1, FCS_CKM.6.1, FCS_CKM.6.2, FCS_RNG.1.1, FCS_RNG.1.2, FCS_CKM.3, FCS_RBG.1, FCS_RNG, FDP_ITT, FDP_ACC.1, FDP_IFC.1, FDP_IFF.2, FDP_RIP.1, FDP_SDC.1, FDP_SDI.1, FDP_UCT.1, FDP_UIT.1, FDP_IFF.2.6, FDP_ITC.1, FDP_ITC.2, FDP_IFC.1.1, FDP_IFF.2.1, FDP_IFF.2.2, FDP_IFF.2.3, FDP_IFF.2.4, FDP_IFF.2.5, FDP_RIP.1.1, FDP_SDC.1.1, FDP_SDI.1.1, FDP_UCT.1.1, FDP_UIT.1.1, FDP_UIT.1.2, FDP_IFF.1, FDP_SDC, FDP_IFC, FDP_UIT, FDP_RIP, FDP_SDI, FDP_UCT, FIA_ATD.1, FIA_UAU, FIA_UID, FIA_USB.1, FIA_UAU.1, FIA_UID.1, FIA_ATD.1.1, FIA_USB.1.1, FIA_USB.1.2, FIA_USB.1.3, FIA_ATD, FIA_USB, FMT_MOF.1, FMT_MSA.1, FMT_MSA.3, FMT_SMF, FMT_SMR.1, FMT_SMF.1, FMT_MOF.1.1, FMT_MSA.1.1, FMT_MSA.3.1, FMT_MSA.3.2, FMT_SMR.1.1, FMT_SMR.1.2, FMT_MSA, FPT_ITT.1, FPT_ITT.1.1, FPT_STM.1, FPT_ITT, FTP_PRO.1.6, FTP_ITC.1, FTP_PRO.1, FTP_PRO.2, FTP_PRO.3, FTP_TRP, FTP_PRO.3.2, FTP_ITC.1.1, FTP_ITC.1.2, FTP_ITC.1.3, FTP_PRO.1.1, FTP_PRO.1.2, FTP_PRO.1.3, FTP_PRO.1.4, FTP_PRO.1.5, FTP_PRO.2.1, FTP_PRO.2.2, FTP_PRO.2.3, FTP_PRO.3.1, FTP_TRP.1, FTP_PRO, FTP_ITC
Protection profiles
BSI-CC-PP-0116, BSI-CC-PP-0115, BSI-CC-PP- 0116

Standards
FIPS PUB 186-4, FIPS PUB 197, NIST SP 800-38A, NIST SP 800-38D, SP 800-38A, AIS20, RFC 5246, RFC 5289, RFC 5280, RFC 6125, RFC 6960, RFC 2818, X.509, CCMB-2022-11-002, CCMB-2022-11-003, CCMB-2017-04-002, CCMB-2017-04-003, CCMB-2022-11-006, CCMB-2017-04-004

File metadata

Author Atsec GmbH
Pages 76

Heuristics

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. For details on our data sources and inference methods, see our methodology. If you believe any information here is inaccurate or harmful, please submit feedback.

Certificate ID

BSI-DSZ-CC-1235-2025

Extracted SARs

ADV_ARC.1, ADV_FSP.4, ADV_IMP.1, ADV_TDS.3, AGD_OPE.1, AGD_PRE.1, ALC_CMC.4, ALC_CMS.4, ALC_DEL.1, ALC_DVS.1, ALC_FLR.3, ALC_LCD.1, ALC_TAT.1, ASE_CCL.1, ASE_ECD.1, ASE_INT.1, ASE_OBJ.2, ASE_REQ.2, ASE_SPD.1, ASE_TSS.1, ATE_COV.2, ATE_DPT.1, ATE_FUN.1, ATE_IND.2, AVA_VAN.3

Scheme data

Cert Id BSI-DSZ-CC-1235-2025
Product BlackBerry Unified Endpoint Management (UEM) Server
Vendor BlackBerry Ltd.
Certification Date 08.09.2025
Category Server applications
Url https://www.bsi.bund.de/SharedDocs/Zertifikate_CC/CC/Serveranwendungen_Sonstiges/1235.html
Enhanced
Product BlackBerry Unified Endpoint Management (UEM) Server
Applicant BlackBerry Ltd. 2200 University Anenue East Waterloo, Ontariom, N2K 0A7
Evaluation Facility atsec information security GmbH
Assurance Level EAL4+,ALC_FLR.3
Certification Date 08.09.2025
Expiration Date 07.09.2030
Entries [frozendict({'id': 'BSI-DSZ-CC-1235-2025', 'description': 'Certificate'})]
Report Link https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Zertifizierung/Reporte/Reporte1200/1235a_pdf.pdf?__blob=publicationFile&v=2
Target Link https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Zertifizierung/Reporte/Reporte1200/1235b_pdf.pdf?__blob=publicationFile&v=2
Cert Link https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Zertifizierung/Reporte/Reporte1200/1235c_pdf.pdf?__blob=publicationFile&v=2
Description The TOE, BlackBerry Unified Endpoint Management (UEM) Server is a software for centralized management of mobile devices such as smartphones and tablets that are used in an organization. The UEM server allows the configuration of mobile devices using profiles as well as monitoring of different device status. Administration of devices (via device agents) is limited to staff agents. The devices may be grouped and assigned to a dedicated staff agent (manager). TOE connection are TLS protected for all staff agents, enrolled device agents and additional components used by the TOE.
Subcategory Other server applications

References

No references are available for this certificate.

Updates Feed

  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.cc.CCCertificate",
  "category": "Mobility",
  "cert_link": "https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/1235c_pdf.pdf",
  "dgst": "e765c42d089c9b54",
  "heuristics": {
    "_type": "sec_certs.sample.cc_eucc_common.Heuristics",
    "annotated_references": null,
    "cert_id": "BSI-DSZ-CC-1235-2025",
    "cert_lab": [
      "BSI"
    ],
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "eal": "EAL4+",
    "extracted_sars": {
      "_type": "Set",
      "elements": [
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ALC_LCD",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ASE_CCL",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "AGD_PRE",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ATE_COV",
          "level": 2
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ALC_FLR",
          "level": 3
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ASE_TSS",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ATE_FUN",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ALC_DEL",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ASE_ECD",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ADV_IMP",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ASE_OBJ",
          "level": 2
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ADV_FSP",
          "level": 4
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "AVA_VAN",
          "level": 3
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ATE_DPT",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ALC_TAT",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ADV_TDS",
          "level": 3
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ADV_ARC",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "AGD_OPE",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ASE_INT",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ATE_IND",
          "level": 2
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ALC_DVS",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ALC_CMC",
          "level": 4
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ALC_CMS",
          "level": 4
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ASE_SPD",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ASE_REQ",
          "level": 2
        }
      ]
    },
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "-"
      ]
    },
    "indirect_transitive_cves": null,
    "next_certificates": null,
    "prev_certificates": null,
    "protection_profiles": {
      "_type": "Set",
      "elements": [
        "52f6160756c31251"
      ]
    },
    "related_cves": null,
    "report_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "scheme_data": {
      "category": "Server applications",
      "cert_id": "BSI-DSZ-CC-1235-2025",
      "certification_date": "2025-09-08",
      "enhanced": {
        "applicant": "BlackBerry Ltd. 2200 University Anenue East Waterloo, Ontariom, N2K 0A7",
        "assurance_level": "EAL4+,ALC_FLR.3",
        "cert_link": "https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Zertifizierung/Reporte/Reporte1200/1235c_pdf.pdf?__blob=publicationFile\u0026v=2",
        "certification_date": "2025-09-08",
        "description": "The TOE, BlackBerry Unified Endpoint Management (UEM) Server is a software for centralized management of mobile devices such as smartphones and tablets that are used in an organization. The UEM server allows the configuration of mobile devices using profiles as well as monitoring of different device status. Administration of devices (via device agents) is limited to staff agents. The devices may be grouped and assigned to a dedicated staff agent (manager). TOE connection are TLS protected for all staff agents, enrolled device agents and additional components used by the TOE.",
        "entries": [
          {
            "description": "Certificate",
            "id": "BSI-DSZ-CC-1235-2025"
          }
        ],
        "evaluation_facility": "atsec information security GmbH",
        "expiration_date": "2030-09-07",
        "product": "BlackBerry Unified Endpoint Management (UEM) Server",
        "report_link": "https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Zertifizierung/Reporte/Reporte1200/1235a_pdf.pdf?__blob=publicationFile\u0026v=2",
        "target_link": "https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Zertifizierung/Reporte/Reporte1200/1235b_pdf.pdf?__blob=publicationFile\u0026v=2"
      },
      "product": "BlackBerry Unified Endpoint Management (UEM) Server",
      "subcategory": "Other server applications",
      "url": "https://www.bsi.bund.de/SharedDocs/Zertifikate_CC/CC/Serveranwendungen_Sonstiges/1235.html",
      "vendor": "BlackBerry Ltd."
    },
    "st_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "verified_cpe_matches": null
  },
  "maintenance_updates": {
    "_type": "Set",
    "elements": []
  },
  "manufacturer": "BlackBerry Ltd.",
  "manufacturer_web": "https://www.blackberry.com",
  "name": "BlackBerry Unified Endpoint Management (UEM) Server",
  "not_valid_after": "2030-09-08",
  "not_valid_before": "2025-09-08",
  "pdf_data": {
    "_type": "sec_certs.sample.cc_eucc_common.PdfData",
    "cert_filename": "1235c_pdf.pdf",
    "cert_frontpage": null,
    "cert_keywords": {
      "asymmetric_crypto": {},
      "cc_cert_id": {
        "DE": {
          "BSI-DSZ-CC-1235-2025": 1
        }
      },
      "cc_claims": {},
      "cc_protection_profile_id": {
        "BSI": {
          "BSI-CC-PP-0115-2021": 1,
          "BSI-CC-PP-0116-": 1
        }
      },
      "cc_sar": {
        "ALC": {
          "ALC_FLR": 1,
          "ALC_FLR.3": 1
        }
      },
      "cc_security_level": {
        "EAL": {
          "EAL 2": 1,
          "EAL 4": 1,
          "EAL 4 augmented": 1
        }
      },
      "cc_sfr": {},
      "certification_process": {},
      "cipher_mode": {},
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {},
      "crypto_scheme": {},
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {},
      "hash_function": {},
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {},
      "side_channel_analysis": {},
      "standard_id": {
        "ISO": {
          "ISO/IEC 15408": 2,
          "ISO/IEC 18045": 2
        }
      },
      "symmetric_crypto": {},
      "technical_report_id": {},
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "cert_metadata": {
      "/Author": "Federal Office for Information Security",
      "/Keywords": "\"Common Criteria, Certification, Zertifizierung, Mobile Device Management, MDM, BlackBerry Unified Endpoint Management (UEM)\"",
      "/Subject": "Common Criteria, Certification, Zertifizierung, Mobile Device Management, MDM, BlackBerry Unified Endpoint Management (UEM)",
      "/Title": "Certificate BSI-DSZ-CC-1235-2025",
      "pdf_file_size_bytes": 233617,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 1
    },
    "report_filename": "1235a_pdf.pdf",
    "report_frontpage": {
      "DE": {
        "cc_security_level": "Common Criteria Part 3 conformant EAL 4 augmented by ALC_FLR.3 valid until: 7 September 2030",
        "cc_version": "PP conformant Common Criteria Part 2 extended",
        "cert_id": "BSI-DSZ-CC-1235-2025",
        "cert_item": "BlackBerry Unified Endpoint Management (UEM) Server Version 12.21.1 (40.32.0",
        "cert_lab": "BSI",
        "developer": "BlackBerry Ltd",
        "match_rules": [
          "(BSI-DSZ-CC-.+?) (?:for|For) (.+?) from (.*)"
        ],
        "ref_protection_profiles": "Protection Profile Mobile Device Management - Trusted Server (MDM-TS). Version 1.0 as of 2021- 09-27; BSI-CC-PP-0115-2021, PP-Configuration Mobile Device Management - Trusted Server (MDM-TS) complemented with PP- Module Trusted Communication Channel (TCC). Version 1.0 as of 2021-09-27; BSI-CC-PP-0116- 2021"
      }
    },
    "report_keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 1
          },
          "ECDH": {
            "ECDH": 1
          },
          "ECDSA": {
            "ECDSA": 4
          }
        },
        "FF": {
          "DH": {
            "Diffie-Hellman": 1
          }
        }
      },
      "cc_cert_id": {
        "DE": {
          "BSI-DSZ-CC-1235-2025": 14
        }
      },
      "cc_claims": {
        "OE": {
          "OE.AUDITTRAIL": 1,
          "OE.DEVICELIFECYCLE": 1,
          "OE.PROPERMANAGEMENT": 1,
          "OE.PROPERSTAFF": 1,
          "OE.PROPERUSER": 1,
          "OE.RELIABLETIMESTAMPS": 1,
          "OE.RESILIENCE": 1,
          "OE.SUPPORTINGSERVICES": 1
        }
      },
      "cc_protection_profile_id": {
        "BSI": {
          "BSI-CC-PP-0115-": 1,
          "BSI-CC-PP-0115-2021": 2,
          "BSI-CC-PP-0116-": 1,
          "BSI-CC-PP-0116-2021": 2
        }
      },
      "cc_sar": {
        "ALC": {
          "ALC_FLR": 3,
          "ALC_FLR.3": 4
        }
      },
      "cc_security_level": {
        "EAL": {
          "EAL 1": 1,
          "EAL 2": 3,
          "EAL 4": 5,
          "EAL 4 augmented": 3
        }
      },
      "cc_sfr": {},
      "certification_process": {
        "ConfidentialDocument": {
          "Report, Version 1, 2025-08-19, Final Evaluation Technical Report, atsec information security GmbH, (confidential document) [7] Protection Profile Mobile Device Management - Trusted Server (MDM-TS). Version 1.0, 2021-09-27": 1,
          "being maintained, is not given any longer. In particular, prior to the dissemination of confidential documentation and information related to the TOE or resulting from the evaluation and certification": 1,
          "for the TOE, Archive \u201calc/ALC_CI_List_2025-06-16.zip\u201d, dated 2025-06-16, BSI Evaluation CI list (confidential document) [10] Guidance documentation for the TOE, Version 1.14, 2025-08-18, BlackBerry UEM Administrative": 1
        }
      },
      "cipher_mode": {
        "CBC": {
          "CBC": 2
        },
        "GCM": {
          "GCM": 6
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "TLS": {
          "TLS": {
            "TLS": 16,
            "TLS v1.2": 3,
            "TLSv1.2": 2
          }
        }
      },
      "crypto_scheme": {
        "KA": {
          "Key agreement": 1
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "NIST P-256": 2,
          "P-256": 2,
          "P-384": 4,
          "P-521": 4
        }
      },
      "eval_facility": {
        "atsec": {
          "atsec": 3
        }
      },
      "hash_function": {
        "SHA": {
          "SHA2": {
            "SHA-2": 5,
            "SHA-256": 2,
            "SHA-384": 1,
            "SHA-512": 1
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 2
        },
        "RNG": {
          "RNG": 1
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "BSI": {
          "AIS 20": 1,
          "AIS 32": 1
        },
        "FIPS": {
          "FIPS 186-4": 1,
          "FIPS 186-5": 2,
          "FIPS180-4": 7,
          "FIPS186-4": 7,
          "FIPS186-49": 1,
          "FIPS186-5": 1,
          "FIPS197": 3
        },
        "ISO": {
          "ISO/IEC 15408": 4,
          "ISO/IEC 17065": 2,
          "ISO/IEC 18045": 4
        },
        "PKCS": {
          "PKCS#1": 4
        },
        "RFC": {
          "RFC2104": 2,
          "RFC3447": 5,
          "RFC5246": 4,
          "RFC5280": 2,
          "RFC5288": 1,
          "RFC5289": 3,
          "RFC7919": 1
        },
        "X509": {
          "X.509": 2
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 9
          }
        },
        "constructions": {
          "MAC": {
            "HMAC": 3
          }
        }
      },
      "technical_report_id": {
        "BSI": {
          "BSI TR-02102": 1
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {
        "Microsoft": {
          "Microsoft": 2
        },
        "Samsung": {
          "Samsung": 1
        }
      },
      "vulnerability": {}
    },
    "report_metadata": {
      "/Author": "Federal Office for Information Security",
      "/Keywords": "\"Common Criteria, Certification, Zertifizierung, Mobile Device Management, MDM, BlackBerry Unified Endpoint Management (UEM)\"",
      "/Subject": "Common Criteria, Certification, Zertifizierung, Mobile Device Management, MDM, BlackBerry Unified Endpoint Management (UEM)",
      "/Title": "Certification Report BSI-DSZ-CC-1235-2025",
      "pdf_file_size_bytes": 363639,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 25
    },
    "st_filename": "1235b_pdf.pdf",
    "st_frontpage": null,
    "st_keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 2
          },
          "ECDH": {
            "ECDHE": 4
          },
          "ECDSA": {
            "ECDSA": 8
          },
          "ECIES": {
            "ECIES": 1
          }
        },
        "FF": {
          "DH": {
            "DHE": 1
          },
          "DSA": {
            "DSA": 2
          }
        },
        "RSA": {
          "RSA 3072": 6,
          "RSA 4096": 1
        }
      },
      "cc_cert_id": {},
      "cc_claims": {
        "A": {
          "A.PROPERMANAGEMENT": 3,
          "A.PROPERSTAFF": 3,
          "A.PROPERUSER": 2,
          "A.RESILIENCE": 2
        },
        "OE": {
          "OE.AUDITTRAIL": 4,
          "OE.DEVICELIFECYCLE": 5,
          "OE.PROPERMANAGEMENT": 5,
          "OE.PROPERSTAFF": 7,
          "OE.PROPERUSER": 6,
          "OE.RELIABLETIMESTAMPS": 6,
          "OE.RESILIENCE": 5,
          "OE.SUPPORTINGSERVICES": 7,
          "OE.TRUSTEDCOMMUNICATIONCHANNEL": 2
        },
        "OT": {
          "OT.COMMUNICATION": 12,
          "OT.DEVICELIFECYCLE": 6,
          "OT.DEVICETRACKING": 7,
          "OT.LOGGING": 5,
          "OT.MANAGEMENT": 9,
          "OT.SEPARATION": 8,
          "OT.STORAGE": 7,
          "OT.TRUSTEDCOMMUNICATIONCHANNEL": 12
        },
        "T": {
          "T.COMPROMISED-": 2,
          "T.COMPROMISEDCOMMUNICATION": 3,
          "T.COMPROMISEDSTORAGE": 2,
          "T.MALICIOUSDEVICE": 4,
          "T.MALICIOUSSTAFF": 2,
          "T.MASQUERADING": 4
        }
      },
      "cc_protection_profile_id": {
        "BSI": {
          "BSI-CC-PP- 0116": 1,
          "BSI-CC-PP-0115": 1,
          "BSI-CC-PP-0116": 3
        }
      },
      "cc_sar": {
        "ADV": {
          "ADV_ARC.1": 1,
          "ADV_FSP.4": 1,
          "ADV_IMP.1": 1,
          "ADV_TDS.3": 1
        },
        "AGD": {
          "AGD_OPE.1": 1,
          "AGD_PRE.1": 1
        },
        "ALC": {
          "ALC_CMC.4": 1,
          "ALC_CMS.4": 1,
          "ALC_DEL.1": 1,
          "ALC_DVS.1": 1,
          "ALC_FLR.3": 3,
          "ALC_LCD.1": 1,
          "ALC_TAT.1": 1
        },
        "ASE": {
          "ASE_CCL.1": 1,
          "ASE_ECD.1": 1,
          "ASE_INT.1": 1,
          "ASE_OBJ.2": 1,
          "ASE_REQ.2": 1,
          "ASE_SPD.1": 1,
          "ASE_TSS.1": 1
        },
        "ATE": {
          "ATE_COV.2": 1,
          "ATE_DPT.1": 1,
          "ATE_FUN.1": 1,
          "ATE_IND.2": 1
        },
        "AVA": {
          "AVA_VAN.3": 1
        }
      },
      "cc_security_level": {
        "EAL": {
          "EAL 4": 1,
          "EAL4": 1,
          "EAL4 augmented": 1
        }
      },
      "cc_sfr": {
        "FAU": {
          "FAU_GEN": 2,
          "FAU_GEN.1": 11,
          "FAU_GEN.1.1": 1,
          "FAU_GEN.1.2": 1,
          "FAU_GEN.2": 9,
          "FAU_GEN.2.1": 1,
          "FAU_SAR": 3,
          "FAU_SAR.1": 11,
          "FAU_SAR.1.1": 1,
          "FAU_SAR.1.2": 1,
          "FAU_SAR.2": 9,
          "FAU_SAR.2.1": 1,
          "FAU_SAR.3": 8,
          "FAU_SAR.3.1": 1,
          "FAU_SEL.1": 1,
          "FAU_STG": 1,
          "FAU_STG.1": 2,
          "FAU_STG.2": 2,
          "FAU_STG.3": 2,
          "FAU_STG.4": 12,
          "FAU_STG.4.1": 2
        },
        "FCS": {
          "FCS_CKM": 36,
          "FCS_CKM.1": 15,
          "FCS_CKM.2": 12,
          "FCS_CKM.3": 3,
          "FCS_CKM.4": 4,
          "FCS_CKM.5": 15,
          "FCS_CKM.6": 12,
          "FCS_CKM.6.1": 2,
          "FCS_CKM.6.2": 1,
          "FCS_COP": 27,
          "FCS_COP.1": 25,
          "FCS_RBG.1": 1,
          "FCS_RNG": 1,
          "FCS_RNG.1": 10,
          "FCS_RNG.1.1": 1,
          "FCS_RNG.1.2": 1
        },
        "FDP": {
          "FDP_ACC.1": 5,
          "FDP_IFC": 1,
          "FDP_IFC.1": 21,
          "FDP_IFC.1.1": 1,
          "FDP_IFF.1": 1,
          "FDP_IFF.2": 11,
          "FDP_IFF.2.1": 1,
          "FDP_IFF.2.2": 1,
          "FDP_IFF.2.3": 1,
          "FDP_IFF.2.4": 1,
          "FDP_IFF.2.5": 1,
          "FDP_IFF.2.6": 2,
          "FDP_ITC.1": 5,
          "FDP_ITC.2": 5,
          "FDP_ITT": 19,
          "FDP_RIP": 1,
          "FDP_RIP.1": 8,
          "FDP_RIP.1.1": 1,
          "FDP_SDC": 1,
          "FDP_SDC.1": 8,
          "FDP_SDC.1.1": 1,
          "FDP_SDI": 1,
          "FDP_SDI.1": 8,
          "FDP_SDI.1.1": 1,
          "FDP_UCT": 1,
          "FDP_UCT.1": 7,
          "FDP_UCT.1.1": 1,
          "FDP_UIT": 1,
          "FDP_UIT.1": 6,
          "FDP_UIT.1.1": 1,
          "FDP_UIT.1.2": 1
        },
        "FIA": {
          "FIA_ATD": 1,
          "FIA_ATD.1": 11,
          "FIA_ATD.1.1": 1,
          "FIA_UAU": 20,
          "FIA_UAU.1": 6,
          "FIA_UID": 20,
          "FIA_UID.1": 11,
          "FIA_USB": 1,
          "FIA_USB.1": 9,
          "FIA_USB.1.1": 1,
          "FIA_USB.1.2": 1,
          "FIA_USB.1.3": 1
        },
        "FMT": {
          "FMT_MOF.1": 9,
          "FMT_MOF.1.1": 1,
          "FMT_MSA": 1,
          "FMT_MSA.1": 8,
          "FMT_MSA.1.1": 1,
          "FMT_MSA.3": 11,
          "FMT_MSA.3.1": 4,
          "FMT_MSA.3.2": 3,
          "FMT_SMF": 32,
          "FMT_SMF.1": 7,
          "FMT_SMR.1": 14,
          "FMT_SMR.1.1": 1,
          "FMT_SMR.1.2": 1
        },
        "FPT": {
          "FPT_ITT": 1,
          "FPT_ITT.1": 8,
          "FPT_ITT.1.1": 1,
          "FPT_STM.1": 1
        },
        "FTP": {
          "FTP_ITC": 1,
          "FTP_ITC.1": 9,
          "FTP_ITC.1.1": 1,
          "FTP_ITC.1.2": 1,
          "FTP_ITC.1.3": 1,
          "FTP_PRO": 1,
          "FTP_PRO.1": 20,
          "FTP_PRO.1.1": 1,
          "FTP_PRO.1.2": 1,
          "FTP_PRO.1.3": 1,
          "FTP_PRO.1.4": 1,
          "FTP_PRO.1.5": 1,
          "FTP_PRO.1.6": 2,
          "FTP_PRO.2": 20,
          "FTP_PRO.2.1": 1,
          "FTP_PRO.2.2": 1,
          "FTP_PRO.2.3": 1,
          "FTP_PRO.3": 18,
          "FTP_PRO.3.1": 1,
          "FTP_PRO.3.2": 3,
          "FTP_TRP": 26,
          "FTP_TRP.1": 16
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 3
        },
        "GCM": {
          "GCM": 5
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "IPsec": {
          "IPsec": 2
        },
        "TLS": {
          "SSL": {
            "SSL": 1,
            "SSL 2.0": 1,
            "SSL 3.0": 1
          },
          "TLS": {
            "TLS": 83,
            "TLS 1.0": 1,
            "TLS 1.1": 1,
            "TLS v1.2": 1
          }
        },
        "VPN": {
          "VPN": 3
        }
      },
      "crypto_scheme": {
        "KA": {
          "KA": 1
        },
        "MAC": {
          "MAC": 4
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-256": 10,
          "P-384": 10,
          "P-521": 12,
          "secp256r1": 3,
          "secp384r1": 3,
          "secp521r1": 3
        }
      },
      "eval_facility": {},
      "hash_function": {
        "SHA": {
          "SHA2": {
            "SHA-256": 1,
            "SHA-384": 1,
            "SHA-512": 1,
            "SHA512": 7
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 4
        },
        "RNG": {
          "RBG": 1,
          "RNG": 7
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "BSI": {
          "AIS20": 2
        },
        "CC": {
          "CCMB-2017-04-002": 1,
          "CCMB-2017-04-003": 1,
          "CCMB-2017-04-004": 1,
          "CCMB-2022-11-002": 1,
          "CCMB-2022-11-003": 1,
          "CCMB-2022-11-006": 1
        },
        "FIPS": {
          "FIPS PUB 186-4": 4,
          "FIPS PUB 197": 1
        },
        "NIST": {
          "NIST SP 800-38A": 1,
          "NIST SP 800-38D": 1,
          "SP 800-38A": 1
        },
        "RFC": {
          "RFC 2818": 2,
          "RFC 5246": 9,
          "RFC 5280": 2,
          "RFC 5289": 10,
          "RFC 6125": 1,
          "RFC 6960": 1
        },
        "X509": {
          "X.509": 10
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 11,
            "AES-256": 1
          }
        },
        "constructions": {
          "MAC": {
            "HMAC": 6,
            "HMAC-SHA-256": 4,
            "HMAC-SHA-384": 2
          }
        }
      },
      "technical_report_id": {},
      "tee_name": {},
      "tls_cipher_suite": {
        "TLS": {
          "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384": 2,
          "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256": 4,
          "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384": 4
        }
      },
      "vendor": {
        "Microsoft": {
          "Microsoft": 2
        },
        "Samsung": {
          "Samsung": 4
        }
      },
      "vulnerability": {}
    },
    "st_metadata": {
      "/Author": "Atsec GmbH",
      "pdf_file_size_bytes": 1013979,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "https://support.blackberry.com/community/s/downloads",
          "https://docs.blackberry.com/en/endpoint-management/compatibility-matrix/blackberry-uem-compatibility-matrix/ksa1403797262417",
          "https://docs.blackberry.com/en/development-tools/blackberry-web-services-for-blackberry-uem/12_21",
          "https://support.blackberry.com/community/s/article/36470",
          "https://support.blackberry.com/community/s/article/36596",
          "https://support.blackberry.com/community/s/article/52117"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 76
    }
  },
  "protection_profile_links": {
    "_type": "Set",
    "elements": [
      "https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/pp0116b_pdf.pdf"
    ]
  },
  "report_link": "https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/1235a_pdf.pdf",
  "scheme": "DE",
  "security_level": {
    "_type": "Set",
    "elements": [
      "ALC_FLR.3",
      "EAL4+"
    ]
  },
  "st_link": "https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/1235b_pdf.pdf",
  "state": {
    "_type": "sec_certs.sample.cc_eucc_common.InternalState",
    "cert": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": "8cc0f77503554f9de8ae679a4102ca6672dd6104bd0764fc50988ec2ae1ff2dd",
      "txt_hash": "3ff2f9888aa47a42cf3cd450178063ab7176d61a08307e019e5acb84f409e79a"
    },
    "report": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": "5a13dd3b280709b32eb83c9298ae0d7ce394b658c6bc335213368cf8c13874ca",
      "txt_hash": "4fda4615d3e241435590c5f13ced5fd59dee19852a6cf6959f671e26af492263"
    },
    "st": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": "867c999190254741ae18edd260708d275b6cd47e5440380f5c331a1c6549b38f",
      "txt_hash": "21c1032e6304c6025871655176b63b157c8131edf63ded7d2a6e1b8091192ef1"
    }
  },
  "status": "active"
}