PD-0030: Initialization of Default Values of Security Attributes

This decision represents a long-term technical decision based on an OD, and may not be the same as the final results of the source OD. With respect to published criteria documentation and scheme documents, it provides suggested guidance on evaluation direction, but is not authoritative. Authoritative decisions are provided through the published criteria documents and published scheme and international interpretations thereof. With respect to published PPs, PDs are authoritative corrections to the PP, based on input from the PP author (if available), that are in force until the publication of the next revision of that PP.

Issue

The FMT_MSA.3 requirement addresses the initialization of default values on security attributes. However, the requirement does not address when the default values must be in place.

Resolution

Default values apply after the TOE has been configured according to the administrative guidance. The default values need not be in place "out of the box." However, the Administrative Guidance must indicate if the Administrator needs to re-establish default settings at any point (e.g. after power failure or upon TOE restart).

Support

A TOE is not properly initialized until the Installation, Generation, and Start-up (IGS) and Administrative Guidance is followed.

Modification History:

2004-08-12

Updated effective date to reflect the date the PD was issued. (August 2004 NIB 6.c.xiv)

References:

• ALFWPPv1.0

Related NIs:

• None

Related CCIMB-INTERPs:

• None

Source OD: 0009