Validated Product - VMware ESX Server 2.5.0 and VirtualCenter 1.2.0Certificate Date: 27 March 2006 Validation Report Number: CCEVS-VR-06-0013 Product Type: Operating System Conformance Claim: EAL2 PP Identifiers: None CC Testing Lab: InfoGard Laboratories, Inc.
PRODUCT DESCRIPTIONVMware ESX Server 2.5.0 and VirtualCenter 1.2.0 are two components of a larger VMware product, ESX Server, which virtualizes physical machine resources (CPU power, memory, etc.) into a pool of virtual computing resources that may be drawn upon by any number of virtual machines. VirtualCenter 1.2.0 provides a centralized administrative interface for one or more virtual machines, including the deployment, configuration, and administration of virtual machines. ESX Server 2.5.0 provides a virtualization layer that mediates access between physical computing resources and VMware logical computing resources. SECURITY EVALUATION SUMMARYThe evaluation was carried out in accordance with the US Common Criteria Evaluation and Validation Scheme (CCEVS) process. The criteria against which the VMware ESX Server 2.5.0 and VirtualCenter 1.2.0 TOE was judged are described in the Common Criteria for Information Technology Security Evaluation, Version 2.2 and International Interpretations effective on December 28, 2004. The TOE is Common Criteria 2.2 Part 2 extended and Part 3 conformant. The evaluation assurance level (EAL) for the product is EAL 2. The product, when configured as described in the TOE guidance documents, meets all of the security functional requirements stated in the VMware ESX Server 2.5.0 and Virtual Center 1.2.0 Security Target, version 1.6.7, dated March 10 2006). Two validators on behalf of the CCEVS Validation Body monitored the evaluation carried out by InfoGard. The evaluation was completed in March 2006. Results of the evaluation can be found in the Common Criteria Evaluation and Validation Scheme Validation Report, (report number CCEVS-VR-06-0013, version 1.7, dated March 27 2006) prepared by CCEVS. ENVIRONMENTAL STRENGTHSThe TOE is a subset of the total VMware system, namely ESX Server 2.5.0 and VirtualCenter 1.2.0. VirtualCenter 1.2.0 provides a centralized interface to securely administer virtual machines, which may share physical resources. However, as virtual machines are logically independent and cannot influence each other (including accesses to memory that “belongs” to another virtual machine), ESX Server 2.5.0 provides a virtualization layer that mediates access between VMware logical computing resources and physical computing resources. |
![[X]](/assets/images/button_close.gif){kind=small}
![[PDF]](http://www.niap-ccevs.org:80/assets/images/icon_pdf.gif){kind=icon}
