In the MOD_MDM_AGENT_v1.0 Supporting Document, FMT_SMF_EXT.4 Test 2 assumes that the base PP includes FPT_ITT.1, but MDF PP v3.1 does not include FPT_ITT.1; only MDM PP v4.0 includes this SFR.  Thus, it is unclear how to perform Test 2 when using MDF PP as the Base-PP.

This TD has been superseded by TD0755 and is now archived.

In MOD_MDM_AGENT_v1.0-SD, FMT_SMF_EXT.4 Test 2 is modified as shown, with underlines indicating additions:

Test 2: The evaluator shall configure the MDM Agent authentication certificate in accordance with the configuration guidance. The evaluator shall verify that the MDM Agent uses this certificate in performing the tests for FPT_ITT.1(2) (MDM as Base-PP) or FTP_ITC_EXT.1(2) (MDF as Base-PP).

See issue description.