NIAP: View Technical Decision Details
NIAP/CCEVS
  NIAP  »»  Protection Profiles  »»  Technical Decisions  »»  View Details  
TD0430:  Optional Logging of Power and Fan Status

Publication Date
2019.06.27

Protection Profiles
EP_ESC_V1.0

Other References
FAU_GEN.1/Log

Issue Description

Audit logging of power and fan status are listed as required in FAU_GEN.1.1/Log when they should be optional.

Resolution

The Extended Package for Enterprise Session Controller v1.0 is modified as follows:

FAU_GEN.1.1/Log is modified as follows:

FAU_GEN.1.1/Log The TSF shall be able to generate a system log record for current IP connections, NTP status, CPU usage, memory usage, power status, disk and file storage capacity, audit storage capacity, fan status, [selection: power status, fan status, no other activities].

In Table 2 under FAU_GEN.1.2/Log, the 4th entry is modified as follows:

| Fan status (conditional)  |     Fan identification;     |

|                                        |      Status (on or off).    |

In the Application Note, the third paragraph is modified as follows:

Logging of power status is optional and is only intended for TOEs that have multiple redundant power supplies. Logging of fan status is also optional.

Under Assurance Activity, Test 5 is modified as follows:

Test 5 (fan status) (conditional): First, confirm fan is working as designed. Once fan is confirmed functioning properly, disconnect fan to shut it down. Peruse system logs to confirm fan has been reported as down. After confirming fan as down, reconnect fan and confirm fan as up. Repeat this process for each fan that is monitored by the TSF.

Justification

See issue description.

 
 
Site Map              Contact Us              Home