NIAP Oversees Evaluations of Commercial IT Products for Use in National Security Systems

Short Name: cpp_fde_ee_v1.0

Technology Type: Encrypted Storage

CC Version: 3.1

Date: 2015.02.28

Transition End Date: 2015.08.27

Preceded By: pp_fde_v1.0

Succeeded By: cpp_fde_ee_v2.0

Sunset Date: 2017.03.09

Conformance Claim: None

Protection Profile 

Supporting Docs 

PP OVERVIEW

The purpose of the first set of Collaborative Protection Profiles (cPPs) for Full Drive Encryption (FDE): Authorization Acquisition (AA) and Encryption Engine (EE) is to provide requirements for Data-at-Rest protection for a lost device that contains storage. These cPPs allow FDE solutions based in software and/or hardware to meet the requirements. The form factor for a storage device may vary, but could include: system hard drives/solid state drives in servers, workstations, laptops, mobile devices, tablets, and external media. A hardware solution could be a Self-Encrypting Drive or other hardware-based solutions; the interface (USB, SATA, etc.) used to connect the storage device to the host machine is outside the scope.

This U.S. Government Approved Protection Profile is not assigned to any Validated Products

Archived Related Technical Decision

• 0229 – FIT Technical Decision for Validation attemp threshold config.