Assurance Continuity - EFI Fiery System 8 or 8e Secure Erase Option and EFI Fiery System 8 or 8e Release 2 Secure Erase Option

Date of Maintenance Completion: 16 October 2007

Product Type: Miscellaneous

Conformance Claim: EAL3 Augmented with ALC_FLR.1

PP Identifiers: None

Original Evaluated TOE: 10 October 2006 - EFI Fiery System 6 or 6e Secure Erase Options and EFI Fiery System 7 or 7e Secure Erase Option

CC Certificate

Security Target

Validation Report

Please note: These are for the Original Evaluated TOE; consequently, they do not refer to this maintained version, although they apply to the maintained version.

Assurance Continuity Maintenance Report

Please note: This serves as an addendum to the VR for the Original Evaluated TOE

Readers are reminded that the certification of this product (TOE) is the result of maintenance, rather than an actual re-evaluation of the product. Maintenance only considers the affect of TOE changes on the assurance baseline (i.e. the original evaluated TOE); maintenance is not intended to provide assurance in regard to the resistance of the TOE to new vulnerabilities or attack methods discovered since the date of the initial certificate. Such assurance can only be gained through re-evaluation.

Using a security impact analysis of the changes made to the TOE, which was provided by the developer, the CCEVS has determined that the impact of changes on the TOE are considered minor and that independent evaluator analysis was not necessary. A summary of the results can be found in the Maintenance Report, which is written in relation to the product's original validation report and Security Target. Readers are therefore reminded to read the Security Target, Validation Report, and the Assurance Maintenance Report to fully understand the meaning of what a maintained certificate represents.

PRODUCT DESCRIPTION

The Target of Evaluation (TOE) is the EFI Fiery System 8 or 8e Secure Erase Option and EFI Fiery System 8 or 8e Release 2 Secure Erase Option software.  The TOE provides the option to securely overwrite print job images.  The Secure Erase Option contains the instructions to overwrite the images three (3) times when these print job images are no longer needed. 

The Fiery System (the product) is installed on a machine running either Microsoft Windows XP Embedded or Linux operating systems.  The version of the Fiery System (the product), which includes the TOE that runs on Microsoft Windows XP Embedded operating system, is referred to as the EFI Fiery System8 and the EFI Fiery System 8 Release 2.  The version of the Fiery System (the product), which includes the TOE that runs on Linux operating system is referred as the EFI Fiery System 8e and the EFI Fiery System 8e Release 2.

During operation, images of print jobs submitted for printing are stored on the hard drive.  The TOE will delete print job images left over from a completed print job by overwriting the sectors occupied by that image file with three (3) passes.  The first pass overwrites the print job image with all zeros.  The next pass overwrites the print job image with all ones.  The final pass overwrites the print job image with random characters.

To activate or deactivate the secure erase option feature, the user must have administrator rights to the Fiery administrative screens.  The IT Environment performs identification and authentication of all users to ensure they have the appropriate privileges (role) to access the TOE and its functions.

 

Vendor Information

Electronics for Imaging, Inc.
Arthur Abrantes

http://www.efi.com/