EMC Documentum Content ServerTM V5.3 and EMC Documentum AdministratorTM V5.3 is a data management and control application. Content Server provides a single repository for content and metadata. The Content Server uses an extensible object-oriented model to store content and metadata in the repository. Everything in a repository is stored as objects in an underlying RDBMS. The Administrator allows an authorized administrator to monitor, administer, configure, and maintain the Content Server and repositories via a Web browser. The product provides the following security functions:
\r\nThe evaluation was carried out in accordance to the Common Criteria Evaluation and Validation Scheme (CCEVS). The evaluation demonstrated that the EMC Documentum TOE meets the security requirements contained in the Security Target. The criteria against which the EMC Documentum TOE was judged are described in the Common Criteria for Information Technology Security Evaluation, Version 2.2. The evaluation methodology used by the evaluation team to conduct the evaluation is the Common Methodology for Information Technology Security Evaluation, Version 2.2. CygnaCom Solutions’ Security Evaluation Laboratory determined that the evaluation assurance level (EAL) for the EMC Documentum TOE is EAL 2. The TOE, configured as specified in the installation guide, satisfies all of the security functional requirements stated in the Security Target. A Validator, on behalf of the CCEVS Validation Body monitored the evaluation carried out by the CCTL. The evaluation was completed in November 2005. Results of the evaluation can be found in the Common Criteria Evaluation and Validation Scheme Validation Report for EMC Documentum Content ServerTM V5.3 and EMC Documentum AdministratorTM V5.3.
","environmental_strengths":"EMC Documentum Content ServerTM V5.3 and EMC Documentum AdministratorTM V5.3 provides a protected data repository, including access controls, auditing, and security administration. The repository and the administrative interface are meant to be in a protected facility, and identification and authentication are provided by the underlying operating system.
","features":[]}