NIAP Oversees Evaluations of Commercial IT Products for Use in National Security Systems

Short Name: pp_base_virtualization_v1.1

Technology Type: Virtualization

CC Version: 3.1

Date: 2021.06.14

Transition End Date: 2021.12.14

Preceded By: pp_base_virtualization_v1.0

Conformance Claim: None

Protection Profile 

Control Mapping 

PP OVERVIEW

The scope of this Protection Profile (PP) is to describe the security functionality of virtualization technologies in terms of [CC] and to define security functional and assurance requirements for such products. This PP is not complete in itself, but rather provides a set of requirements that are common to the PP-Modules for Server Virtualization and for Client Virtualization. These capabilities have been broken out into this generic ‘base’ PP due to the high degree of similarity between the two product types.

Due to the increasing prevalence of virtualization technology in enterprise computing environments, it is essential to ensure that this technology is implemented securely in order to mitigate the risk introduced by sharing multiple computers and their data across a single physical system. 

Assigned to the following Validated Products

• VID11249 – VMware ESXi 7.0 Update 3d
• Oracle VM Server for SPARC 3.6 and Oracle Solaris 11.4

Active Related Technical Decisions

• 0814 – Correction to Mixed content in TSS AAs
  • References:  FCS_IPSEC_EXT.1.3, FIA_UIA_EXT.1, FIA_X509_EXT.2.2, FPT_ML_EXT.1
• 0742 – Updates to Certificate Revocation (FIA_X509_EXT.1) for Base Virtualization PP v1.1
  • References:  FIA_X509_EXT.1, FIA_X509_EXT.4
• 0721 – Mapping FTA_TAB.1 to Objective
  • References:  FTA_TAB.1; Section 5.1.10; table 4
• 0615 – Audit generation for hypercalls implemented in HW
  • References:  Table 2, FAU_GEN.1, FPT_HCL_EXT.1

Archived Related Technical Decision

• 0605 – Updates to Certificate Revocation (FIA_X509_EXT.1) for Base Virtualization PP v1.1