Assurance Continuity - Seagate Secure TCG SSC Self-Encrypting Drives
Date of Maintenance Completion: 2019.03.01CC Certificate Validation Report Assurance Activity
Product Type: Encrypted Storage
Conformance Claim: Protection Profile Compliant
PP Identifier: collaborative Protection Profile for Full Drive Encryption - Encryption Engine Version 2.0
Original Evaluated TOE: 2018.04.11 - Seagate Secure TCG SSC Self-Encrypting Drives
Please note: The above files are for the Original Evaluated TOE. Consequently, they do not refer to this maintained version, although they apply to the maintained version.
Assurance Continuity Maintenance Report
Please note: This serves as an addendum to the VR for the Original Evaluated TOE.
* This is the Security Target (ST) associated with the latest Maintenance Release. To view previous STs for this TOE, click here.
Readers are reminded that the certification of this product (TOE) is the result of maintenance, rather than an actual re-evaluation of the product. Maintenance only considers the affect of TOE changes on the assurance baseline (i.e. the original evaluated TOE); maintenance is not intended to provide assurance in regard to the resistance of the TOE to new vulnerabilities or attack methods discovered since the date of the initial certificate. Such assurance can only be gained through re-evaluation.
Using a security impact analysis of the changes made to the TOE, which was provided by the developer, the CCEVS has determined that the impact of changes on the TOE are considered minor and that independent evaluator analysis was not necessary. A summary of the results can be found in the Maintenance Report, which is written in relation to the product's original validation report and Security Target. Readers are therefore reminded to read the Security Target, Validation Report, and the Assurance Maintenance Report to fully understand the meaning of what a maintained certificate represents.
The TOE has been updated in the following ways.
1. Three new versions of firmware have been added to Common Criteria certified Seagate product models ST500LM033, ST1000LM038, ST2000LM010, ST500LM035, and ST1000LM050. Each model number uses the same three new firmware revision numbers. The new firmware version numbers are RTE2, REE2, and RPE2; they are all based on the existing CC certified firmware revision SDM2.
2. There are a total 55 firmware code changes of which only three are security relevant minor fixes. All other fixes are not security relevant.
a. The first security relevant fix is an update to response behavior due to a clarification in TCG specification. “Fix Sanitize Command Not Aborted Crypto Scramble EXT Command In SD4 State (SED Only)” Bug fix: In a particular scenario for the SD4 state (the sanitize operation succeeded state), the Sanitize Crypto Scramble EXT command was not being aborted gracefully. Does not affect underlying security architecture.
b. The second security relevant fix is a customer requested change to an ATA security related default value. This change does not affect any non-customer specific configurations or underlying system architecture.
c. The third security relevant fix is to fix an unreliable abort for a valid, authorized issued sanitize command. “Invalid Invoking ID - Get - expects NOT_AUTHORIZED instead of empty list”
3. The updated Security Target, the Entropy Document, and the Key Management Description were only changed to incorporate the new firmware versions, RTE2, REE2, and RPE2.
Seagate Security Certification Contracts
+1 (952) 402-2356