AIX 7 receives OSPP/EAL4+ Common Criteria Security Certification

The AIX 7 Operating System has received the new, Operating System Protection Profile Version 2.0 BSI-CC-PP-0067-2010 with the OSPP Extended Packages: General Purpose Cryptography, Integrity Verification, Virtualization,  Advanced Management, and Labeled Security at the EAL4+ level

The new OSPP Common Criteria certification replaced the previous Common Criteria certification such as the old Common Access Protection Profile (CAPP)

AIX has had a long history of receiving security certifications going back to the old C2 standard that AIX 4.2 was certified on back in 1997. As security certifications evolved to the Common Criteria standards, CAPP/EAL4+, successive releases of AIX including AIX 5.2, AIX 5.3 and AIX 6 all received certification.

In 2010 the Common Criteria organizations established the new OSPP standard as an evolution of the Common Criteria standard to address the fundamental changes in the industry as the result of the migration from single isolated systems to networked, multi-system environments http://www.atsec.com/us/news-operating-system-protection-profile-200.html

The Target of Evaluations (TOE) for this new AIX 7 certification includes an evaluation of the PowerVM Virtual I/O Server (VIOS).

Common Criteria certifications are based on a set of internationally recognized technical standards and configurations that are used to evaluate the security of Information Technology products and technology.

IT organizations typically use Common Criteria certification as one measure of the suitability of a particular computing technology for use in their business.

Obtaining a Common Criteria certification is a long and expensive process and this most recent certification is a testimony to the IBM commitment to AIX and Power Systems.

Jay

OSPP certificate for AIX 7 dated August 20, 2012

About Jay Kruemcke

Jay Kruemcke is passionate about helping customers and partners achieve their goals. Jay is a currently a Senior Product Manager at SUSE. Jay is responsible for the SUSE Linux for High-Performance Computing, Linux for Arm, and Linux for Power servers. Jay released the first commercially supported Linux distribution for Arm in 2016. Jay completely restructured SUSE’s HPC offerings in 2017 to add support for Arm systems, provide longer term support, and continue to enhance the HPC Module. The HPC Module provides support for open software such as slurm as part of the SUSE HPC subscription. Jay has built an extensive career in product management based on being a bridge between customers and engineering teams. He has extensive experience in many areas including product positioning, driving future product directions, using social media for client collaboration, and evangelizing the capabilities and future directions of enterprise products. Prior to joining SUSE, Jay had a long career at IBM including many roles in the Power and Cloud Engineering and Offering teams. In addition to his product management experience, Jay has held a variety of technology roles at including product marketing, manager of a technical architecture team, briefing center staff, SAP systems management consultant, and as a system programmer and administrator Jay also volunteers with the Boy Scouts in multiple roles and with ProductCamp Austin. The postings on this site solely reflect the personal views of the author and do not necessarily represent the views, positions, strategies or opinions of my employer. Follow me on twitter @mr_sles and @phastflyer
This entry was posted in AIX & Power Systems Blogroll. Bookmark the permalink.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s