Applications running on Android cannot disable Android security features. Microsoft has announced that after July 31, 2018, it will no longer support the Enhanced Mitigation Experience Toolkit (EMET) on Windows platforms. An update to the Assurance Activity is required.

The Android and Windows Assurance Activity for FPT_AEX_EXT.1.3 are modified as follows:

For Android: Applications running on Android cannot disable Android security features, therefore this requirement is met and no assurance activity is required.

For Windows: If the OS platform supports Windows Defender Exploit Guard, then the evaluator shall ensure that the application can run successfully with Windows Defender Exploit Guard configured and enabled. If the OS platform supports EMET, then the evaluator shall ensure that the application can run successfully with EMET configured and enabled.

This TD supersedes TD 269. TD 269 will be archived.

See Issue Description