CCRA recognition for components
up to EAL2 and ALC_FLR only
A, A
centro criptoldgico nacional
CERTIFICATE
CCN-CC-4/2024
Permiso de Residencia version 4.0
Type of product Qualified Signature Creation Device. Machine Readable Travel
Document. Smart Card andsimilar device.
Conformanceof functionality PP Conformancefunctionality
Protection Profile Conformance BSI-CC-PP-0059-2009-MA-01, BSI-CC-PP-0071-2012-MA-01, BSI-
CC-PP-0072-2012-MA-02, BSI-CC-PP-0056-V2-2012, BSI-CC-PP-
0086 and BSI-CC-PP-0068-V2-2011-MA-01.
Evaluation Facility Applus Laboratories
Certification Report CCN-CC/2018-69/INF-4281
Expiration Date See Certification Report
Pursuant to the authority vested in me under Act 11/2002 regulating the National Intelligence Centre,
and under Article 1 and Article 2.2.c of Royal Decree 421/2004 of March 12th regulating the National
Cryptologic Centre, | hereby:
Certify that the security of Permiso de Residencia version 4.0, requested by Fabrica Nacional de Moneda
y Timbre - Real Casa de la Moneda, C/ Jorge Juan, 106. 28009 Madrid, has been evaluated using
Common Methodology for Information Technology Security Evaluation/Common Criteria for
Information Technology Security Evaluation version 3.1 release 5, and it has met the requirementsofits
Security Target identified as “Declaración de Seguridad del Permiso de Residencia 4.0, versión 1.0,
revisión 6, 16/01/2024”, for evaluation assurance level EAL4 + ALC_DVS.2 + ATE_DPT.2 + AVA_VAN.5.
Madrid, 12 March 2024
Secretary of State Director
Fe
|a Casteleiro Llamazares
a This certificate, its scope and validity are subject to the terms, conditions and requirements specified in the
ENAC “Reglamento de Evaluación y Certificación de la Seguridad de las T.1.C.” at PRE/2740/2007, September19th.
245/ C-PRTIO.
The above-mentioned Security Target and Certification Report are available atthe National Cryptologic Centre.
This certificate will come into effect the following day that the associated certificate resolution
signed by the Secretary of State Director of CCN is published in the Official State Gazette (B.O.E
— https://www.boe.es).
The IT product identified in this certificate has been evaluated at an accredited and
licensed/approved evaluation facility using the Common Methodology for Information
Technology Security Evaluation/Common Criteria for Information Technology Security
Evaluation version 3.1 release 5 and CC Supporting Documentsaslisted in the Certification
Report. This certificate applies only to the specific version and release of the productin its
evaluated configuration and in conjunction with the complete Certification Report. The
evaluation has been conducted in accordance with the provisions of the Spanish IT Security
Evaluation and Certification Scheme, PRE/2740/2007 Septemberthe 19th, and the conclusions
of the evaluation facility in the evaluation technical report are consistent with the evidence
adduced.This certificate is not an endorsementof the IT product by the Spanish Schemeor by
any otherorganisation that recognisesor gives effect to this certificate, and no warranty of the
IT product by the Spanish Schemeorby anyother organisation that recognisesor gives effect
to this certificate, is either expressed or implied.