The Target of Evaluation (TOE) includes one or more Mobile Armor DataArmor 3.1 (Version 3.1.0 for Windows, Version 3.1.0.594 for Linux, Version 3.1.0.8 for Mobile Device and Version 3.1.0.788 for the Mac) clients and a PolicyServer 3.1 (Version 3.1.0.445) management server.
\r\nDataArmor is a client application that is used to encrypt the persistent storage on the device where it is installed without any user intervention. The client can be installed on computers running Microsoft Windows operating systems, Mac OS X, Red Hat Linux and SUSE Linux as well as mobile phones running Microsoft Windows Mobile. The client requires user authentication to it before access to the device, including both the operating system and any data, is granted.
\r\nThe PolicyServer is a server application that can be used to manage one or more instances of DataArmor applications from a centralized location in the TOE environment. The PolicyServer provides policy, user and device management of the DataArmor clients as well as centralized audit storage. Additionally, email alerts can be triggered based on incoming client audit records, notifying administrators of potential violations, such as multiple failed logins
\r\nThe purpose of the TOE is to provide encryption of data-at-rest on supported devices, not to provide active protection of the data while the protected device is in use, nor is it designed to provide access control to the stored data inside the OS once the user has successfully authenticated to the TOE. The protection offered is to ensure data is not accessible to unauthorized users after an authorized user has logged out of DataArmor or turned off the device.
","evaluation_configuration":null,"security_evaluation_summary":"The evaluation was carried out in accordance to the Common Criteria Evaluation and Validation Scheme (CCEVS) process and scheme. The evaluation demonstrated that the TOE meets the security requirements contained in the Security Target. The criteria against which the TOE was judged are described in the Common Criteria for Information Technology Security Evaluation, Version 3.1, revision 2. The evaluation methodology used by the evaluation team to conduct the evaluation is the Common Methodology for Information Technology Security Evaluation, Version 3.1, revision 2. Science Application International Corporation (SAIC) determined that the evaluation assurance level (EAL) for the TOE is EAL 4 augmented with ALC_FLR.3. The TOE, configured as specified in the evaluated configuration guide, satisfies all of the security functional requirements stated in the Security Target. The evaluation was completed in April 2010. Results of the evaluation can be found in the Common Criteria Evaluation and Validation Scheme Validation Report for Mobile Armor DataArmor & PolicyServer v3.1 prepared by the CCEVS.
","environmental_strengths":"The TOE is a set of software applications that collectively provides client/server-based full volume encryption solution for Personal Computers and Mobile Devices. The primary TOE components include client applications that are incorporated into the boot sequence for personal computers and mobile devices and a server component that facilitates centralized management of the distributed client applications. The TOE includes a number of security functions including, but not limited to, security audit, cryptographic protections of user data and network communications, user identification and authentication, and secure management.
\r\nThe TOE provides its own FIPS-validated cryptographic module which performs symmetric encryption and decryption operations on cryptographic keys, storage media, and data or commands sent over a network. The AES algorithm is used for this encryption and additional algorithms are also supported for random number generation and various hashing functions. All cryptographic algorithms are FIPS-validated.
\r\n","features":[]}