The evaluated configuration is each of the following MFPs configured according to the “HP LaserJet and Color LaserJet MFP Security Checklist.:”

An HP LaserJet M4345 MFP with firmware version 09.091.4 and analog fax accessory package Q3701A

An HP LaserJet 9040 MFP with firmware version 08.091.3 and analog fax accessory package Q3701A

An HP LaserJet 9050 MFP with firmware version 08.091.3 and analog fax accessory package Q3701A

An HP Color LaserJet CM4730 MFP with firmware version 50.021.4 and analog fax accessory package Q7518A

The evaluation was carried out in accordance to the Common Criteria Evaluation and Validation Scheme (CCEVS) process and scheme. The evaluation demonstrated that the HP LaserJet 9040 MFP System Firmware Version 08.091.3, HP LaserJet 9050 MFP System Firmware Version 08.091.3, HP LaserJet 4345 MFP System Firmware Version 09.091.4, HP Color LaserJet CM4730 MFP System Firmware Version 50.021.4 meets the security requirements contained in the Security Target.

The criteria against which the HP LaserJet 9040 MFP System Firmware Version 08.091.3, HP LaserJet 9050 MFP System Firmware Version 08.091.3, HP LaserJet 4345 MFP System Firmware Version 09.091.4, HP Color LaserJet CM4730 MFP System Firmware Version 50.021.4 were judged are described in the Common Criteria for Information Technology Security Evaluation, Version 2.2. The evaluation methodology used by the evaluation team to conduct the evaluation is the Common Methodology for Information Technology Security Evaluation, Version 2.2. The COACT, Inc. CAFE Lab determined that the evaluation assurance level (EAL) for the HP LaserJet 9040 MFP System Firmware Version 08.091.3, HP LaserJet 9050 MFP System Firmware Version 08.091.3, HP LaserJet 4345 MFP System Firmware Version 09.091.4, HP Color LaserJet CM4730 MFP System Firmware Version 50.021.4 is EAL 3. The TOE, configured as specified in the installation guide, satisfies all of the security functional requirements stated in the Security Target.

A Validator on behalf of the CCEVS Validation Body monitored the evaluation carried out by the COACT, Inc. CAFE Lab. The evaluation was completed in January 2008. Results of the evaluation and associated validation can be found in the Common Criteria Evaluation and Validation Scheme Validation Report.

The TOE’s Security Functions are:

Secure Erase Functionality. Secure Erase functionality includes Secure File Erase and Secure Storage Erase:

Secure File Erase is either of two Secure File Erase modes that cover routine real-time erasing of temporary and permanent files stored on the MFP hard drive during normal operations such as print, copy, send to email, send to network folder, and fax.

Secure Storage Erase is a feature that erases the entire contents of the MFP hard drive or of Partition 2 of the MFP Compact Flash drive. Secure Storage Erase deletes files on demand using the Secure File Erase mode that is configured on the MFP.

Network and Analog Fax Resource Separation. The TOE ensures the following regarding network and analog fax resource separation:

All data coming in through or going out through the analog fax accessory is only fax data with no network information.

All incoming fax data is stored or printed securely.

All outgoing fax data is only from the scanner.

Identification & Authentication - Administrators authenticate to the TOE prior to managing security functions.

Management of Security Functions -The TOE provides for management of security functions. A summary of the TOE security functions appears in Section 2, TOE Description. A detailed description of the security functions appears in Section 6, TOE Summary Specification.