The Target of Evaluation (TOE) is Apple iOS 10.2 on iPhone and iPad devices using the A7 (iPhone 5s, iPad mini 2, iPad mini 3, iPad Air); A8 processor (iPhone 6, iPhone 6 Plus, iPad mini 4); A8X processor (iPad Air 2); A9 processor (iPhone 6S Plus, iPhone 6S, iPhone SE, iPad); A9X (iPad Pro 12.9”, iPad Pro 9.7”); and A10 processor (iPhone 7, iPhone 7 Plus).
","evaluation_configuration":"\r\n\r\nTable 1. Devices Covered by the Evaluation
\r\n| \r\n Device Name \r\n | \r\n\r\n Model Number \r\n | \r\n\r\n Processor \r\n | \r\n\r\n Wi-Fi \r\n | \r\n\r\n Cellular \r\n | \r\n\r\n Bluetooth \r\n | \r\n
| \r\n iPhone 5s \r\n | \r\n\r\n A1533 (GSM) \r\nA1533 (CDMA) \r\nA1453 \r\nA1457 \r\nA1530 \r\n | \r\n\r\n A7 \r\n | \r\n\r\n 802.11/a/b/g/n/ac \r\n802.11/a/b/g/n/ac \r\n802.11/a/b/g/n/ac \r\n802.11/a/b/g/n/ac \r\n802.11/a/b/g/n/ac \r\n | \r\n\r\n See table 2 \r\nSee table 2 \r\nSee table 2 \r\nSee table 2 \r\nSee table 2 \r\n | \r\n\r\n 4.0 \r\n4.0 \r\n4.0 \r\n4.0 \r\n4.0 \r\n | \r\n
| \r\n iPhone 6 Plus/ iPhone 6 \r\n | \r\n\r\n A1549/A1522 (GSM) \r\nA1549/A1522 (CDMA) \r\nA1586/A1524 \r\n | \r\n\r\n A8 \r\n | \r\n\r\n 802.11/a/b/g/n/ac \r\n802.11/a/b/g/n/ac \r\n802.11/a/b/g/n/ac \r\n | \r\n\r\n See table 2 \r\nSee table 2 \r\nSee table 2 \r\n | \r\n\r\n 4.0 \r\n4.0 \r\n4.0 \r\n | \r\n
| \r\n iPhone 6S Plus \r\niPhone 6S \r\n | \r\n\r\n A1634/A1633 (US) \r\nA1687/A1688 (Global) \r\n | \r\n\r\n A9 \r\n | \r\n\r\n 802.11/a/b/g/n/ac \r\n802.11/a/b/g/n/ac \r\n | \r\n\r\n See table 2 \r\nSee table 2 \r\n | \r\n\r\n 4.2 \r\n4.2 \r\n | \r\n
| \r\n iPhone 7 Plus/ \r\niPhone 7 \r\n | \r\n\r\n A1784/A1778 (GSM) \r\nA1661/A1660 (CDMA) \r\n | \r\n\r\n A10 \r\n | \r\n\r\n 802.11/a/b/g/n/ac \r\n802.11/a/b/g/n/ac \r\n | \r\n\r\n See table 2 \r\nSee table 2 \r\n | \r\n\r\n 4.2 \r\n4.2 \r\n | \r\n
| \r\n iPhone SE \r\n | \r\n\r\n A1662 (US) \r\nA1723 (Global) \r\n | \r\n\r\n A9 \r\n | \r\n\r\n 802.11/a/b/g/n/ac \r\n | \r\n\r\n See table 2 \r\n\r\n | \r\n\r\n 4.2 \r\n | \r\n
| \r\n iPad mini 2 \r\n\r\n | \r\n\r\n A1489 (Wi-Fi only) \r\nA1490 (Wi-Fi + \r\ncellular) \r\nA1491 (Wi-Fi + \r\ncellular) \r\n | \r\n\r\n A7 \r\n | \r\n\r\n 802.11a/?b/?g/?n \r\n802.11a/?b/?g/?n \r\n802.11a/?b/?g/?n \r\n | \r\n\r\n - \r\nSee table 2 \r\nSee table 2 \r\n | \r\n\r\n 4.0 \r\n4.0 \r\n4.0 \r\n | \r\n
| \r\n iPad mini 3 \r\n | \r\n\r\n A1599 (Wi-Fi only) \r\nA1600 (Wi-Fi + cellular) \r\nA1601 (Wi-Fi + cellular) \r\n | \r\n\r\n A7 \r\n | \r\n\r\n 802.11a/?b/?g/?n \r\n802.11a/?b/?g/?n \r\n802.11a/?b/?g/?n \r\n | \r\n\r\n - \r\nSee table 2 \r\nSee table 2 \r\n | \r\n\r\n 4.0 \r\n4.0 \r\n4.0 \r\n | \r\n
| \r\n iPad mini 4 \r\n | \r\n\r\n A1538 (Wi-Fi only) \r\nA1550 (Wi-Fi + cellular) \r\n | \r\n\r\n A8 \r\n | \r\n\r\n 802.11a/?b/?g/?n \r\n802.11a/?b/?g/?n \r\n | \r\n\r\n - \r\nSee table 2 \r\n | \r\n\r\n 4.2 \r\n4.2 \r\n | \r\n
| \r\n iPad Air \r\n | \r\n\r\n A1474 (Wi-Fi only) \r\nA1475 (Wi-Fi + \r\ncellular) \r\nA1476 (Wi-Fi + \r\ncellular) \r\n | \r\n\r\n A7 \r\n | \r\n\r\n 802.11a/b/g/n \r\n\r\n 802.11a/b/g/n \r\n\r\n 802.11a/b/g/n \r\n | \r\n\r\n - \r\n\r\n See table 2 \r\n\r\n See table 2 \r\n | \r\n\r\n 4.0 \r\n\r\n 4.0 \r\n\r\n 4.0 \r\n | \r\n
| \r\n iPad Air 2 \r\n | \r\n\r\n A1566 (Wi-Fi only) \r\nA1567 (Wi-Fi + cellular) \r\n | \r\n\r\n A8X \r\n | \r\n\r\n 802.11a/b/g/n/ac \r\n802.11a/b/g/n/ac \r\n | \r\n\r\n - \r\nSee table 2 \r\n | \r\n\r\n 4.2 \r\n4.2 \r\n | \r\n
| \r\n iPad Pro 12.9” \r\n | \r\n\r\n A1584 (Wi-Fi only) \r\nA1652 (Wi-Fi + cellular) \r\n | \r\n\r\n A9X \r\n | \r\n\r\n 802.11/a/b/g/n/ac \r\n802.11/a/b/g/n/ac \r\n | \r\n\r\n - \r\nSee table 2 \r\n | \r\n\r\n 4.2 \r\n4.2 \r\n | \r\n
| \r\n iPad Pro 9.7” \r\n | \r\n\r\n A1673 (Wi-Fi only) \r\nA1674 (Wi-Fi + cellular) \r\n | \r\n\r\n A9X \r\n | \r\n\r\n 802.11/a/b/g/n/ac \r\n802.11 /a/b/g/n/ac \r\n | \r\n\r\n - \r\nSee table 2 \r\n | \r\n\r\n 4.2 \r\n4.2 \r\n | \r\n
| \r\n iPad \r\n | \r\n\r\n A1822 (Wi-Fi only) \r\nA1823 (Wi-Fi + cellular) \r\n | \r\n\r\n A9 \r\n | \r\n\r\n Wi-Fi (802.11a/?b/?g/?n/?ac) \r\n\r\n | \r\n\r\n See table 2 \r\n | \r\n\r\n 4.2 \r\n4.2 \r\n | \r\n
Table 2. Cellular Protocols Supported
\r\n| \r\n Device Name \r\n | \r\n\r\n Model Number \r\n | \r\n\r\n Cellular \r\n | \r\n
| \r\n iPhone 5s \r\n\r\n | \r\n\r\n A1533 (GSM) | \r\n\r\n UMTS/HSPA+/DC-HSDPA (850, 900, 1700/2100, 1900, 2100 MHz); \r\nGSM/EDGE (850, 900, 1800, 1900 MHz); \r\nLTE (Bands 1, 2, 3, 4, 5, 8, 13, 17, 19, 20, 25) \r\n | \r\n
| \r\n A1533 (CDMA) | \r\n\r\n CDMA EV-DO Rev. A and Rev. B (800, 1700/2100, 1900, 2100 MHz); \r\nUMTS/HSPA+/DC-HSDPA (850, 900, 1700/2100, 1900, 2100 MHz); \r\nGSM/EDGE (850, 900, 1800, 1900 MHz); \r\nLTE (Bands 1, 2, 3, 4, 5, 8, 13, 17, 19, 20, 25) \r\n | \r\n|
| \r\n A1453 \r\n | \r\n\r\n CDMA EV-DO Rev. A and Rev. B (800, 1700/2100, 1900, 2100 MHz); \r\nUMTS/HSPA+/DC-HSDPA (850, 900, 1700/2100, 1900, 2100 MHz); \r\nGSM/EDGE (850, 900, 1800, 1900 MHz); \r\nLTE (Bands 1, 2, 3, 4, 5, 8, 13, 17, 18, 19, 20, 25, 26) \r\n | \r\n|
| \r\n A1457 \r\n | \r\n\r\n UMTS/HSPA+/DC-HSDPA (850, 900, 1900, 2100 MHz); \r\nGSM/EDGE (850, 900, 1800, 1900 MHz); \r\nLTE (Bands 1, 2, 3, 5, 7, 8, 20) \r\n | \r\n|
| \r\n A1530 \r\n | \r\n\r\n UMTS/HSPA+/DC-HSDPA (850, 900, 1900, 2100 MHz); \r\nGSM/EDGE (850, 900, 1800, 1900 MHz); \r\nFDD-LTE (Bands 1, 2, 3, 5, 7, 8, 20); \r\nTD-LTE (Bands 38, 39, 40) \r\n | \r\n|
| \r\n iPhone 6 Plus/ iPhone 6 \r\n | \r\n\r\n A1549/A1522 (GSM) \r\n | \r\n\r\n UMTS/HSPA+/DC-HSDPA (850, 900, 1700/2100, 1900, 2100 MHz) \r\nGSM/EDGE (850, 900, 1800, 1900 MHz) \r\nLTE (Bands 1, 2, 3, 4, 5, 7, 8, 13, 17, 18, 19, 20, 25, 26, 28, 29) \r\n | \r\n
| \r\n A1549/A1522 (CDMA) \r\n | \r\n\r\n CDMA EV-DO Rev. A and Rev. B (800, 1700/2100, 1900, 2100 MHz) \r\nUMTS/HSPA+/DC-HSDPA (850, 900, 1700/2100, 1900, 2100 MHz) \r\nGSM/EDGE (850, 900, 1800, 1900 MHz) \r\nLTE (Bands 1, 2, 3, 4, 5, 7, 8, 13, 17, 18, 19, 20, 25, 26, 28, 29) \r\n | \r\n|
| \r\n A1586/A1524 \r\n | \r\n\r\n CDMA EV-DO Rev. A and Rev. B (800, 1700/2100, 1900, 2100 MHz) \r\nUMTS/HSPA+/DC-HSDPA (850, 900, 1700/2100, 1900, 2100 MHz) \r\nTD-SCDMA 1900 (F), 2000 (A) \r\nGSM/EDGE (850, 900, 1800, 1900 MHz) \r\nFDD-LTE (Bands 1, 2, 3, 4, 5, 7, 8, 13, 17, 18, 19, 20, 25, 26, 28, 29) \r\nTD-LTE (Bands 38, 39, 40, 41) \r\n | \r\n|
| \r\n iPhone 6S Plus/ \r\niPhone 6S \r\n | \r\n\r\n A1634/A1633 (US) \r\n | \r\n\r\n CDMA EV-DO Rev. A (800, 1700/2100, 1900, 2100 MHz) \r\nUMTS/HSPA+/DC-HSDPA (850, 900, 1700/2100, 1900, 2100 MHz) \r\nTD-SCDMA 1900 (F), 2000 (A) \r\nGSM/EDGE (850, 900, 1800, 1900 MHz) \r\nLTE (Bands 1, 2, 3, 4, 5, 7, 8, 12, 13, 17, 18, 19, 20, 25, 26, 27, 28, 29, 30) \r\nTD-LTE (Bands 38, 39, 40, 41) \r\n | \r\n
| \r\n A1687/A1688 (Global) \r\n | \r\n\r\n CDMA EV-DO Rev. A (800, 1700/2100, 1900, 2100 MHz) \r\nUMTS/HSPA+/DC-HSDPA (850, 900, 1700/2100, 1900, 2100 MHz) \r\nTD-SCDMA 1900 (F), 2000 (A) \r\nGSM/EDGE (850, 900, 1800, 1900 MHz) \r\nLTE (Bands 1, 2, 3, 4, 5, 7, 8, 12, 13, 17, 18, 19, 20, 25, 26, 27, 28, 29) \r\nTD-LTE (Bands 38, 39, 40, 41) \r\n | \r\n|
| \r\n iPhone 7 Plus/ \r\niPhone 7 \r\n | \r\n\r\n A1784/A1778 (GSM) \r\n\r\n | \r\n\r\n UMTS/HSPA+/DC-HSDPA (850, 900, 1700/2100, 1900, 2100 MHz) FDD-LTE (Bands 1, 2, 3, 4, 5, 7, 8, 12, 13, 17, 18, 19, 20, 25, 26, 27, 28, 29, 30) | \r\n
| \r\n A1661/A1660 (CDMA) \r\n | \r\n\r\n CDMA EV-DO Rev. A (800, 1900, 2100 MHz) TD-SCDMA 1900 (F), 2000 (A) FDD-LTE (Bands 1, 2, 3, 4, 5, 7, 8, 12, 13, 17, 18, 19, 20, 25, 26, 27, 28, 29, 30) | \r\n|
| \r\n iPhone SE \r\n | \r\n\r\n A1662 (US) \r\n\r\n | \r\n\r\n CDMA EV-DO Rev. A (800, 1700/2100, 1900, 2100 MHz) \r\nUMTS/HSPA+/DC-HSDPA (850, 900, 1700/2100, 1900, 2100 MHz) \r\nGSM/EDGE (850, 900, 1800, 1900 MHz) \r\nLTE (Bands 1, 2, 3, 4, 5, 8, 12, 13, 17, 18, 19, 20, 25, 26, 29) \r\n | \r\n
| \r\n A1723 (Global) \r\n | \r\n\r\n CDMA EV-DO Rev. A (800, 1700/2100, 1900, 2100 MHz) \r\nUMTS/HSPA+/DC-HSDPA (850, 900, 1700/2100, 1900, 2100 MHz) \r\nTD-SCDMA 1900 (F), 2000 (A) \r\nGSM/EDGE (850, 900, 1800, 1900 MHz) \r\nLTE (Bands 1, 2, 3, 4, 5, 7, 8, 12, 17, 18, 19, 20, 25, 26, 28) \r\nTD-LTE (Bands 38, 39, 40, 41) \r\n | \r\n|
| \r\n iPad mini 2 \r\n | \r\n\r\n A1490 \r\n | \r\n\r\n UMTS/HSPA/HSPA+/DC-HSDPA (850, 900, 1700/2100, 1900, \r\n2100 MHz); \r\nGSM/EDGE (850, 900, 1800, 1900 MHz) \r\nCDMA EV-DO Rev. A and Rev. B (800, 1900 MHz) \r\nLTE (Bands 1, 2, 3, 4, 5, 7, 8, 13, 17, 18, 19, 20, 25, 26) \r\n | \r\n
| \r\n A1491 \r\n | \r\n\r\n UMTS (WCDMA)/HSPA+/ DC-HSDPA (850, 900, 1900, 2100 \r\nMHz), \r\nGSM/EDGE (850, 900, 1800, 1900 MHz), \r\nTD-SCDMA (1900 (F), 2000 (A)) \r\nLTE (Bands 1, 2, 3, 5, 7, 8, 18, 19, 20) \r\nTD-LTE (Bands 38, 39) \r\n | \r\n|
| \r\n iPad mini 3 \r\n\r\n | \r\n\r\n A1600 \r\n | \r\n\r\n UMTS/?HSPA/?HSPA+/?DC-HSDPA (850, 900, 1700/2100, 1900, 2100 MHz); \r\nGSM/EDGE (850, 900, 1800, 1900 MHz) \r\nCDMA EV-DO Rev. A and Rev. B (800, 1900 MHz) \r\nLTE (Bands 1, 2, 3, 4, 5, 7, 8, 13, 17, 18, 19, 20, 25, 26) \r\n | \r\n
| \r\n A1601 \r\n | \r\n\r\n UMTS/?HSPA/?HSPA+/?DC-HSDPA (850, 900, 1700/2100, 1900, 2100 MHz); \r\nGSM/EDGE (850, 900, 1800, 1900 MHz) \r\nCDMA EV-DO Rev. A (800, 1900 MHz) \r\nTD-SCDMA (1900 (F), 2000 (A)) \r\nLTE (Bands 1, 2, 3, 4, 5, 7, 8, 18, 19, 20) \r\nTD-LTE (Bands 38, 39, 40) \r\n | \r\n|
| \r\n iPad mini 4 \r\n | \r\n\r\n A 1550 \r\n | \r\n\r\n UMTS/HSPA/HSPA+/DC-HSDPA (850, 900, 1700/2100, 1900, 2100 MHz); \r\nGSM/EDGE (850, 900, 1800, 1900 MHz) \r\nCDMA EV-DO Rev. A and Rev. B (800, 1900 MHz) \r\nLTE (Bands 1, 2, 3, 4, 5, 7, 8, 13, 17, 18, 19, 20, 25, 26, 28, 29, 38, 39, 40, 41) \r\n | \r\n
| \r\n iPad Air \r\n | \r\n\r\n A1475 \r\n | \r\n\r\n UMTS/HSPA/HSPA+/DC-HSDPA (850, 900, 1700/2100, 1900, \r\n2100 MHz); \r\nGSM/EDGE (850, 900, 1800, 1900 MHz) \r\nCDMA EV-DO Rev. A and Rev. B (800, 1900 MHz) \r\nLTE (Bands 1, 2, 3, 4, 5, 7, 8, 13, 17, 18, 19, 20, 25, 26) \r\n | \r\n
| \r\n A1476 \r\n | \r\n\r\n UMTS (WCDMA)/HSPA+/ DC-HSDPA (850, 900, 1900, 2100 \r\nMHz), \r\nGSM/EDGE (850, 900, 1800, 1900 MHz), TD-SCDMA (1900 \r\n(F), 2000 (A)) \r\nLTE (Bands 1, 2, 3, 4, 5, 7, 8, 13, 17, 18, 19, 20, 25, 26) \r\nTD-LTE (Bands 38, 39) \r\n | \r\n|
| \r\n iPad Air 2 \r\n | \r\n\r\n A1567 \r\n | \r\n\r\n GSM/EDGE (850, 900, 1800, 1900 MHz), \r\nUMTS/HSPA/HSPA+/DC-HSDPA (850, 900, 1700/2100, 1900, 2100 MHz), \r\nCDMA EV-DO Rev. A and Rev. B (800, 1900 MHz), \r\nTD-SCDMA \r\nLTE (Bands 1, 2, 3, 4, 5, 7, 8, 13, 17,18, 19, 20, 25, 26, 28, 29) \r\nTD-LTE (Bands 38, 39, 40,41) \r\n | \r\n
| \r\n iPad Pro 12.9” \r\n | \r\n\r\n A1652 \r\n | \r\n\r\n CDMA EV-DO Rev. A and Rev. B (800, 1900 MHz) \r\nUMTS/HSPA/HSPA+/DC-HSDPA (850, 900, 1700/2100, 1900, 2100 MHz); GSM/EDGE (850, 900, 1800, 1900 MHz) \r\nLTE (Bands 1, 2, 3, 4, 5, 7, 8, 13, 17, 18, 19, 20, 25, 26, 28, 29, 38, 39, 40, 41) \r\n | \r\n
| \r\n iPad Pro 9.7” \r\n | \r\n\r\n A1674 \r\n | \r\n\r\n CDMA EV-DO Rev. A and Rev. B (800, 1900 MHz) \r\nUMTS/HSPA/HSPA+/DC-HSDPA (850, 900, 1700/2100, 1900, 2100 MHz); GSM/EDGE (850, 900, 1800, 1900 MHz) \r\nLTE Advanced (Bands 1, 2, 3, 4, 5, 7, 8, 12, 13, 17, 18, 19, 20, 25, 26, 27, 28, 29, 30, 38, 39, 40, 41) \r\n | \r\n
| \r\n iPad \r\n | \r\n\r\n A1823 \r\n | \r\n\r\n CDMA EV-DO Rev. A and Rev. B \r\nUMTS/HSPA/HSPA+/DC-HSDPA (850, 900, 1700/2100, 1900, \r\n2100 MHz); GSM/EDGE (850, 900, 1800, 1900 MHz) \r\nLTE (Bands 1, 2, 3, 4, 5, 7, 8, 12, 13, 17, 18, 19, 20, 25, 26, \r\n28, 29, 38, 39, 40, 41) \r\n | \r\n
","security_evaluation_summary":"\r\n\r\n\r\n\r\n\r\n
The evaluation was carried out in accordance with the Common Criteria Evaluation and Validation Scheme (CCEVS) process and scheme. The criteria against which Apple iOS 10.2 were judged are described in the Common Criteria for Information Technology Security Evaluation, Version 3.1.4. The evaluation methodology used by the evaluation team to conduct the evaluation was the Common Methodology for Information Technology Security Evaluation, Version 3.1.4. The product, when delivered and configured as identified in the iOS 10.2 Common Criteria Guide document, meets the requirements of the Protection Profile for Mobile Device Fundamentals Version 3.0; the Protection Profile for Mobile Device Management Agents Version 3.0 and the Protection Profile for Mobile Device Fundamentals Extended Package (EP) for Wireless Local Area Network (WLAN) Client, Version 1.0.
\r\nThe Apple iOS 10.2 Common Criteria Guide document satisfies all of the security functional requirements stated in the Apple iOS 10.2 MDFPP v3.0, MDM Agent v3.0 and WLAN Client EP v1.0 Security Target. The project underwent CCEVS Validator review. The evaluation was completed in July, 2017. Results of the evaluation can be found in the Common Criteria Evaluation and Validation Scheme Validation Report number CCEVS-VR-VID10782-2017, prepared by CCEVS.
\r\n","environmental_strengths":"\r\n\r\n\r\n\r\nThe TOE provides cryptographic services for the encryption of data-at rest, for secure communication channels, and for use by applications. In addition, the TOE implements a number of cryptographic protocols that can be used to establish a trusted channel to other IT entities.
\r\nAs noted in the Security Target, section 1.5.2.1 the TOE provides cryptographic services via the following cryptographic modules.
\r\n· The Apple iOS CoreCrypto Kernel Module v7
\r\n· The Apple iOS CoreCrypto Module v7
\r\nExcept for making emergency calls users need to authenticate using a password. This password can be configured for a minimum length, for dedicated password policies and for a maximum life time. When entered, passwords are obscured and the frequency of entering passwords is limited as well as the number of consecutive failed attempts of entering the password. The TOE also enters a locked state after a (configurable) time of user inactivity and the user is required to enter his password to unlock the TOE.
\r\nExternal entities connecting to the TOE via a secure protocol (Extensible Authentication Protocol Transport Layer Security (EAP-TLS), TLS, IPsec) can be authenticated using X.509 certificates.
\r\nUser data in files is protected using cryptographic functions, ensuring this data remains protected even if the device gets lost or is stolen. Critical data like passwords used by applications or application defined cryptographic keys can be stored in the key chain, which provides additional protection. Password protection and encryption ensure that data-at-rest remains protected even in the case the device is lost or stolen.
\r\nData can also be protected such that only the application that owns the data can access it.
\r\nThe security functions listed in the Security Target can be managed either by the user or by an authorized administrator through a Mobile Device Management (MDM) system. The Security Target identifies the functions that can be managed and indicates, if the management can be performed by the user, by the authorized administrator, or both.
\r\n· Software/firmware integrity self-test upon start-up—the TOE will not go operational when this test fails.
\r\nThe TSF provides functions to lock the TOE upon request and after an administrator-configurable time of inactivity.
\r\nAccess to the TOE via a wireless network is controlled by user/administrator defined policy.
\r\nThe TOE provides the ability for responses to be sent from the MDM Device Agent to the MDM Server. These responses are configurable by the organization using a scripting language given in the Over-the-Air Profile Delivery and Configuration document.
","features":[]}