The Target of Evaluation (TOE) is BeyondTrust Password Safe 6.2 (a BeyondInsight component).
\r\nPassword Safe v6.2 is an automated password and session management solution for any privileged account, such as shared administrative accounts and local administrative accounts. TOE users request permission from the TOE to access managed systems. A managed system is a computer where one or more account passwords are maintained by the TOE. Managed systems can be Windows machines, Unix/Linux machines, and Active Directory domains.
\r\nThe BeyondTrust Password Safe 6.2 contains functionality that is not covered by Standard Protection Profile for Enterprise Security Management Identity and Credential Management. As with all evaluations claiming conformance to a NIAP-approved protection profile, only the functionality specified in the profile is evaluated. The BeyondTrust Password Safe 6.2 TOE consists of the following BeyondInsight platform components:
\r\n· Password Safe
\r\n· BeyondInsight Management GUI
\r\n· Proxy Service
\r\n· Session Monitoring
\r\nThe TOE components identified above collectively provide functionality defined in the Standard Protection Profile for Enterprise Security Management Identity and Credential Management. Specifically, the functionality included in the evaluation is:
\r\n· Provision subjects (enroll new subjects to an organizational repository, associate and disassociate subjects with organizationally-defined attributes)
\r\nThe evaluation was carried out in accordance with the Common Criteria Evaluation and Validation Scheme (CCEVS) process and scheme. The criteria against which the BeyondTrust Password Safe 6.2 was judged are described in Standard Protection Profile for Enterprise Security Management Identity and Credential Management (Version 2.1, 24 October 2013) and the Common Criteria for Information Technology Security Evaluation, Version 3.1 rev 4. The evaluation methodology used by the evaluation team to conduct the evaluation is the Common Methodology for Information Technology Security Evaluation, Version 3.1 revision 4 as refined by the assurance activities in the protection profile. The product satisfies all of the security functional requirements stated in the BeyondTrust Password Safe 6.2 (a BeyondInsight component) Security Target, version 1.0, June 13, 2018, when delivered and configured as identified in the following documents:
\r\n· BeyondInsight Authentication Guide, Version 6.2 – February 2017 (BeyondTrust proprietary)
\r\n· BeyondInsight Installation Guide, Version 6.2 – November 2016 (BeyondTrust proprietary)
\r\n· BeyondInsight User Guide User Guide, Version 6.2 – November 2016 (BeyondTrust proprietary)
\r\n· PowerBroker Password Safe Administration Guide, Version 6.2 – November 30, 2016 (BeyondTrust proprietary)
\r\n· BeyondTrust UVM Appliance Getting Started Guide, Software Version: UVM Appliance 2.1, Revision Number: 0, January 2017 (BeyondTrust proprietary)
\r\n· PowerBroker Password Safe v6.2.0 Common Criteria – Supplementary Guide, March 22, 2018
\r\nNote: The proprietary guidance documents are provided only to registered customers.
\r\nThe project underwent CCEVS Validator review. The evaluation was completed in June 2018. Results of the evaluation can be found in the Common Criteria Evaluation and Validation Scheme Validation Report prepared by CCEVS.
","environmental_strengths":"\r\n\r\nEnterprise Security Management
\r\nThe TOE enrolls enterprise users and assigns uniquely identifying data. The TOE provides the capability to define and securely transmit identity and credential data for automated password and session management solutions. The TOE provides a password restriction policy mechanism to ensure secure passwords are defined for enterprise users
\r\nThe TOE authenticates the BeyondInsight Administrator and relies on Microsoft Active Directory in the operational environment to authenticate Password Safe users.
\r\nSecurity Audit
\r\nThe TOE generates logs for security relevant events including the events specified in Standard Protection Profile for Enterprise Security Management Identity and Credential Management. The audit records identify the date/time, event type, outcome of the event, and the responsible subject/user. The TOE stores the audit records locally in the Microsoft SQL Server 2014 Database and the Front-End Logs on the Microsoft Windows Server 2012 R2. The operational environment protects the stored audit records from unauthorized deletion and modification. Reliable timestamps are provided by the operational environment.
\r\nIdentification and Authentication
\r\nThe BeyondInsight administrator accesses the TOE using the BeyondInsight local password authentication. TOE users assigned a Password Safe role access the TOE using Microsoft Active Directory external authentication. The TOE provides authentication failure handling and associates identity, roles, and groups with users.
\r\nSecurity Management
\r\nThe TOE provides the management functions identified in the Standard Protection Profile for Enterprise Security Management Identity and Credential Management. The TOE restricts all management functions to users that belong to the BeyondInsight administrator role.
\r\nProtection of the TSF
\r\nCredentials/keys used by the TOE are stored in the operational environment. The TOE does not offer any functions that will disclose to any users a stored cryptographic key; and all keys are stored encrypted using AES-256.
\r\nTOE Access
\r\nThe TOE can be configured to display an informative banner that will appear prior to authentication when accessing the BeyondInsight Management GUI and the Password Safe Web Portal GUI. The administrator can terminate their own interactive session.
\r\nTrusted Path/Channels
\r\nThe TOE protects interactive communication with users and administrators using HTTPS. The TOE protects communication with external IT entities, including authentication servers, using TLS connections, which prevent unintended disclosure or modification of data. The TOE uses cryptographic means to protect communication with remote administrators. When the TOE is configured to use the services of an authentication server in the operational environment, the communication between the TOE and the operational environment component is protected using TLS encryption. The communication between the TOE and managed systems, and PowerBroker for Windows is protected using TLS or SSH.
\r\nThe TOE itself does not implement any cryptographic functions. Consequently, the Cryptographic Support (class FCS) requirements from the Architectural Variations section of the ESM ICM PP do not apply to the TOE. The security target does not claim any requirements from the FCS class and so the FCS requirements were outside the scope of evaluation and were not evaluated.
","features":[]}