NIAP: View Technical Decision Details
NIAP/CCEVS
  NIAP  »»  Protection Profiles  »»  Technical Decisions  »»  View Details  
TD0479:  FMT_SMF.1(1) Reliance on MDF Evals

Publication Date
2020.02.21

Protection Profiles
PP_MDM_V4.0

Other References
FMT_SMF.1(1)

Issue Description

The app note for FMT_SMF.1(1) includes the following sentence: All selections and assignments performed by the ST author in this requirement should match the selections and assignments of the validated Mobile Device ST.  MDM vendors should be allowed to claim management functionality that was not tested as part of an MDF evaluation.

 

Resolution

The Application Note for FMT_SMF.1(1) is replaced as follows:

Application Note: This requirement captures all the configuration functionality the TSF provides the administrator to configure the MDM Agent. This requirement is broken into two configurable areas: MDM Agent commands and MDM Agent policies. The ST author can add more commands and configuration policies by completing the appropriate assignment statements.

The Function-specific Application Notes for FMT_SMF.1(1) remain unchanged.

The TSS Evaluation Activity for FMT_SMF.1(1) is replaced as follows:

TSS

The evaluator shall examine the TSS to ensure that it describes each management function claimed. The evaluator shall examine the TSS to ensure that it identifies the management functions implemented for each supported MDM Agent/platform, which are likely to be subsets of all of the management functions available to the administrator on the MDM Server. The evaluator shall examine the TSS to verify that any differences between management functions and policies for each supported MDM Agent/platform are clearly indicated.

The evaluator shall determine if the Mobile Device has been evaluated. If so, the evaluator shall examine the TSS to verify that it clearly identifies which management functions match the selections and assignments of the evaluated Mobile Device and which management functions were not evaluated.

Justification

The test configurations used by the evaluators must contain sufficient devices to show that all of the claimed management functions had the intended affect on the mobile device. In addtion, it must be clear which functions supported by the TOE were evaluated on the platform and which functions supported on the TOE (and tested) were not evaluated on the platform.

 
 
Site Map              Contact Us              Home