NIAP: View Technical Decision Details
  NIAP  »»  Protection Profiles  »»  Technical Decisions  »»  View Details  
TD0465:  Configuration Storage for .NET Apps

Publication Date

Protection Profiles

Other References

Issue Description

For Windows applications, the Evaluation Activity for FMT_MEC_EXT.1 specifies namespaces for storing application-specific settings. These namespaces do not account for .NET applications which commonly store application data with the executable.


The Evaluation Activity for WIndows for FMT_MEC_EXT.1 shall be modified as follows, with underlines indicating additions:

For Windows: The evaluator shall determine and verify that Windows Universal Applications use either the Windows.UI.ApplicationSettings namespace or the IsolatedStorageSettings namespace for storing application specific settings. For .NET applications, the evaluator shall determine and verify that the application uses one of the locations listed in for storing application specific settings. For Classic Desktop applications, the evaluator shall run the application while monitoring it with the SysInternals tool ProcMon and make changes to its configuration. The evaluator shall verify that ProcMon logs show corresponding changes to the the Windows Registry or C:\ProgramData\ directory.


See issue description.

Site Map              Contact Us              Home