PRODUCT DESCRIPTION

The TOE consists of the MFP System Firmware, which supports secure erase features, separation of analog fax resources from network resources, authentication, and security management within an MFP. Analog fax accessory packages are accessories to the MFP, but are part of the evaluated configuration.

An MFP is a network peripheral that prints, copies, faxes, and sends scanned documents to email or to network destinations. The TOE is the firmware that enables all properties, features, and components of an MFP.

The evaluated configuration is each of the following MFPs configured according to the “HP LaserJet and Color LaserJet MFP Security Checklist.:”

• An HP LaserJet M4345 MFP with firmware version 48.021.7 and analog fax accessory package Q3701A
• An HP LaserJet M3027 MFP with firmware version 48.021.7A and analog fax accessory package Q3701A
• An HP LaserJet M3035 MFP with firmware version 48.021.7A and analog fax accessory package Q3701A
• An HP LaserJet M5025 MFP with firmware version 48.021.7A and analog fax accessory package Q3701A
• An HP LaserJet M5035 MFP with firmware version 48.021.7A and analog fax accessory package Q3701A
• An HP Color LaserJet 4730 MFP with firmware version 46.151.8 and analog fax accessory package Q7518A

In each configuration, the Secure File Erase Mode is configured for Secure Fast Erase or for Secure Sanitizing Erase (as prescribed in the Security Checklist).

Access to security functions is limited to one authenticated administrator through a remote console. Users can print, copy, digital send, and fax.

The evaluated configuration of the HP MFP printers includes a number of disabled remote access options. Please see the Security Target for details.

SECURITY EVALUATION SUMMARY

The evaluation was carried out in accordance to the Common Criteria Evaluation and Validation Scheme (CCEVS) process and scheme. The evaluation demonstrated that the HP LaserJet M4345 MFP System Firmware Version 48.021.7, HP LaserJet M3027 MFP System Firmware Version 48.021.7A, HP LaserJet M3035 MFP System Firmware Version 48.021.7A, HP LaserJet M5025 MFP System Firmware Version 48.021.7A, HP LaserJet M5035 MFP System Firmware Version 48.021.7A, HP Color LaserJet 4730 MFP System Firmware Version 46.151.8 meets the security requirements contained in the Security Target.

The criteria against which the HP LaserJet M4345 MFP System Firmware Version 48.021.7, HP LaserJet M3027 MFP System Firmware Version 48.021.7A, HP LaserJet M3035 MFP System Firmware Version 48.021.7A, HP LaserJet M5025 MFP System Firmware Version 48.021.7A, HP LaserJet M5035 MFP System Firmware Version 48.021.7A, HP Color LaserJet 4730 MFP System Firmware Version 46.151.8 were judged are described in the Common Criteria for Information Technology Security Evaluation, Version 2.2. The evaluation methodology used by the evaluation team to conduct the evaluation is the Common Methodology for Information Technology Security Evaluation, Version 2.2. The COACT, Inc. CAFE Lab determined that the evaluation assurance level (EAL) for the HP LaserJet M4345 MFP System Firmware Version 48.021.7, HP LaserJet M3027 MFP System Firmware Version 48.021.7A, HP LaserJet M3035 MFP System Firmware Version 48.021.7A, HP LaserJet M5025 MFP System Firmware Version 48.021.7A, HP LaserJet M5035 MFP System Firmware Version 48.021.7A, HP Color LaserJet 4730 MFP System Firmware Version 46.151.8 is EAL 3. The TOE, configured as specified in the installation guide, satisfies all of the security functional requirements stated in the Security Target.

A Validator on behalf of the CCEVS Validation Body monitored the evaluation carried out by the COACT, Inc. CAFE Lab. The evaluation was completed in May 2007. Results of the evaluation and associated validation can be found in the Common Criteria Evaluation and Validation Scheme Validation Report.

ENVIRONMENTAL STRENGTHS

The TOE’s Security Functions are:

• Secure Erase Functionality. Secure Erase functionality includes Secure File Erase and Secure Storage Erase:

  Secure File Erase is either of two Secure File Erase modes that cover routine real-time erasing of temporary and permanent files stored on the MFP hard drive during normal operations such as print, copy, send to email, send to network folder, and fax.

  Secure Storage Erase is a feature that erases the entire contents of the MFP hard drive or of Partition 2 of the MFP Compact Flash drive. Secure Storage Erase deletes files on demand using the Secure File Erase mode that is configured on the MFP.

• Network and Analog Fax Resource Separation. The TOE ensures the following regarding network and analog fax resource separation:

  All data coming in through or going out through the analog fax accessory is only fax data with no network information.

  All incoming fax data is stored or printed securely.

  All outgoing fax data is only from the scanner.

• Identification & Authentication - Administrators authenticate to the TOE prior to managing security functions.

• Management of Security Functions - The TOE provides for management of security functions. A summary of the TOE security functions appears in Section 2, TOE Description. A detailed description of the security functions appears in Section 6, TOE Summary Specification.

Vendor Information

Hewlett-Packard Development Company, L.P.
Jon T. Huber
208-396-6551
208-396-7400 (Fax)
jont.huber@hp.com

http://www.hp.com