The TOE comprises the Seagate Secure® TCG Opal and Enterprise SSC Self-Encrypting Drives (SEDs) provided by Seagate Technology, LLC. The TOE model numbers and firmware versions are identified in the table below.
\r\nThe Seagate SEDs implement FIPS-approved and NIST-recommended cryptographic algorithms. The CAVP certificates are identified in Section 6.2 of the security target. The SEDs provide an Instant Secure Erase (ISE) function and full protection of customer data-at-rest with self-encrypting drive locking. The Seagate Secure Drives are designed in accordance with Trusted Computing Group (TCG) specifications.
\r\nThe TOE provides the Full Disk Encryption (FDE) Encryption Engine functionality as defined by the collaborative Protection Profile for Full Drive Encryption – Encryption Engine Version 2.0 + Errata 20190201, February 1, 2019. In particular, the TOE provides data encryption, policy enforcement, and key management functions. The TOE provides for the generation, update, protection, and destruction of the data encryption key (DEK) and other intermediate keys under its control. Seagate terminology refers to the DEK as the Media Encryption Key (MEK).
\r\n| \r\n Product Name \r\n | \r\n\r\n Model # \r\n | \r\n\r\n TCG Standard \r\n | \r\n\r\n Firmware \r\n | \r\n
| \r\n Nytro® 3730 SSD, 7mm, SAS Interface \r\n\r\n | \r\n\r\n XS1600ME10023 | \r\n\r\n Enterprise SSC \r\n | \r\n\r\n 7539 \r\n0004 \r\n0005 \r\n | \r\n
| \r\n Nytro® 3530 SSD, 7mm, SAS Interface \r\n\r\n | \r\n\r\n XS6400LE70023 \r\nXS1600LE10023 \r\n\r\n | \r\n\r\n Enterprise SSC \r\n | \r\n\r\n 7539 \r\n0004 \r\n0005 \r\n | \r\n
| \r\n Nytro® 3330 SSD, 7mm, SAS Interface \r\n\r\n | \r\n\r\n XS1920SE10123 \r\n\r\n | \r\n\r\n Enterprise SSC \r\n | \r\n\r\n 7539 \r\n0004 \r\n0005 \r\n | \r\n
| \r\n Nytro® 3130 SSD, 7mm, SAS Interface \r\n\r\n | \r\n\r\n XS3840TE10023 \r\n | \r\n\r\n Enterprise SSC \r\n | \r\n\r\n 7539 \r\n0004 \r\n0005 \r\n | \r\n
| \r\n Nytro® 3730 SSD, 15mm, SAS Interface \r\n\r\n | \r\n\r\n XS3200ME70023 | \r\n\r\n Enterprise SSC \r\n | \r\n\r\n 7539 \r\n0004 \r\n0005 \r\n | \r\n
| \r\n Nytro® 3330 SSD, 15mm, SAS Interface \r\n\r\n | \r\n\r\n XS15360SE70123 \r\n | \r\n\r\n Enterprise SSC \r\n | \r\n\r\n 7539 \r\n0004 \r\n0005 \r\n | \r\n
| \r\n Nytro® 3130 SSD, 15mm, SAS Interface \r\n\r\n | \r\n\r\n XS15360TE70023 | \r\n\r\n Enterprise SSC \r\n | \r\n\r\n 7539 \r\n0004 \r\n0005 \r\n | \r\n
| \r\n Nytro® 3031 SSD, 15mm, SAS Interface \r\n | \r\n\r\n XS6400LE70024 \r\nXS400ME70024 \r\nXS800ME70024 \r\nXS3840TE70024 \r\nXS7680TE70024 \r\n | \r\n\r\n Enterprise SSC \r\n | \r\n\r\n 0001 \r\n0003 \r\n0004 \r\n0005 \r\nA003 \r\n | \r\n
| \r\n Nytro® 3031 SSD, 15mm, SAS Interface \r\n | \r\n\r\n XS1600ME70024 \r\nXS3200ME70024 \r\nXS800LE70024 \r\nXS1600LE70024 \r\nXS3200LE70024 \r\nXS960SE70024 \r\nXS1920SE70024 \r\nXS3840SE70024 \r\nXS7680SE70024 \r\nXS15360TE70024 \r\n | \r\n\r\n Enterprise SSC \r\n | \r\n\r\n 0001 \r\n0002 \r\n0003 \r\n0004 \r\n0005 \r\nA001 \r\nA003 \r\n | \r\n
| \r\n Nytro® 2032 SSD, 15mm, SAS Interface \r\n | \r\n\r\n XS960LE70144 \r\nXS1920LE70144 \r\nXS3840LE70144 \r\nXS960SE70144 \r\nXS1920SE70144 \r\nXS3840SE70144 \r\nXS7680SE70144 \r\n | \r\n\r\n Enterprise SSC \r\n | \r\n\r\n 0001 \r\n0002 \r\n | \r\n
| \r\n Nytro® 3032 SSD, 15mm, SAS Interface \r\n | \r\n\r\n XS400ME70104 \r\nXS800ME70104 \r\nXS1600ME70104 \r\nXS3200ME70104 \r\nXS800LE70104 \r\nXS1600LE70104 \r\nXS3200LE70104 \r\nXS3840LE70104 \r\nXS6400LE70104 \r\nXS960SE70104 \r\nXS1920SE70104 \r\nXS3840SE70104 \r\nXS7680SE70104 \r\nXS15360SE70104 \r\nXS3840TE70104 \r\nXS7680TE70104 \r\n | \r\n\r\n Enterprise SSC \r\n | \r\n\r\n 0001 \r\n0002 \r\n | \r\n
| \r\n Exos™ 15E900, 2.5-Inch, 15K-RPM, SAS Interface \r\n | \r\n\r\n ST900MP0166 | \r\n\r\n Enterprise SSC \r\n | \r\n\r\n CK10 \r\nCF04 \r\n | \r\n
| \r\n Exos™ 15E900, 2.5-Inch, 15K-RPM, SAS Interface \r\n | \r\n\r\n ST900MP0126 | \r\n\r\n Enterprise SSC \r\n | \r\n\r\n CKF1 \r\nNF04 \r\n | \r\n
| \r\n FireCuda™ 2.5\", SATA Interface (Hybrid) \r\n | \r\n\r\n ST2000LX003 | \r\n\r\n Opal SSC | \r\n\r\n SSM1 \r\n | \r\n
| \r\n BarraCuda 2.5\", SATA Interface \r\n | \r\n\r\n ST2000LM010 | \r\n\r\n Opal SSC | \r\n\r\n SDM2 \r\nRSE3 (1D) \r\nRDE3 (2D) \r\nRTE2 \r\nREE2 \r\n | \r\n
| \r\n BarraCuda Pro 2.5\", SATA Interface \r\n | \r\n\r\n ST1000LM050 | \r\n\r\n Opal SSC | \r\n\r\n SDM2 \r\nRXE2 \r\nRXE3 \r\nLXM7 \r\nRPE2 \r\n0001 \r\n | \r\n
| \r\n Exos™ 10E2400, 2.5-Inch, 10K-RPM, SAS Interface \r\n | \r\n\r\n ST1200MM0069 \r\n | \r\n\r\n Enterprise SSC \r\n | \r\n\r\n CSF2 \r\nNF04 \r\n | \r\n
| \r\n Exos™ 10E2400, 2.5-Inch, 10K-RPM, SAS Interface \r\n | \r\n\r\n ST2400MM0149 | \r\n\r\n Enterprise SSC \r\n | \r\n\r\n CS10 \r\nCF04 \r\n | \r\n
| \r\n Exos™ X10, 3.5-inch, 7K-RPM, SAS Interface \r\n | \r\n\r\n ST10000NM0246 \r\n | \r\n\r\n Enterprise SSC \r\n | \r\n\r\n CT10 \r\n | \r\n
| \r\n Exos™ X10, 3.5-inch, 7K-RPM, SAS Interface \r\n | \r\n\r\n ST10000NM0236 \r\n | \r\n\r\n Enterprise SSC \r\n | \r\n\r\n CT12 \r\n | \r\n
| \r\n ExosTM 7E8, SAS Interface \r\n | \r\n\r\n ST4000NM014A \r\nST8000NM010A \r\nST6000NM033A \r\n | \r\n\r\n Enterprise SSC \r\n | \r\n\r\n EF01 \r\nEFA2 \r\n\r\n | \r\n
| \r\n ExosTM 7E8, SAS Interface \r\n | \r\n\r\n ST4000NM015A \r\nST3000NM005A \r\n | \r\n\r\n Enterprise SSC \r\n | \r\n\r\n EF01 \r\nNFA2 \r\n\r\n | \r\n
| \r\n ExosTM 7E8, SATA Interface \r\n | \r\n\r\n ST4000NM012A \r\nST8000NM008A \r\nST6000NM025A \r\n | \r\n\r\n Enterprise SSC \r\n | \r\n\r\n SF01 \r\nSFA2 \r\n\r\n | \r\n
| \r\n ExosTM 7E8, SATA Interface \r\n | \r\n\r\n ST3000NM004A \r\nST4000NM013A \r\n | \r\n\r\n Enterprise SSC \r\n | \r\n\r\n TF01 \r\nTFA2 \r\n | \r\n
| \r\n ExosTM 16, SAS Interface \r\n | \r\n\r\n ST10000NM010G \r\nST12000NM008G \r\nST14000NM012G \r\nST16000NM009G \r\n | \r\n\r\n Enterprise SSC \r\n | \r\n\r\n EF01 \r\nEF02 \r\nEF03 \r\n | \r\n
| \r\n Exos™ X10, 3.5-inch, 7K-RPM, SATA Interface \r\n | \r\n\r\n ST10000NM0186 \r\n | \r\n\r\n Enterprise SSC | \r\n\r\n CT14 \r\n | \r\n
| \r\n Exos™ X10, 3.5-inch, 7K-RPM, SATA Interface \r\n | \r\n\r\n ST10000NM0176 \r\n | \r\n\r\n Enterprise SSC | \r\n\r\n CTF1 \r\n | \r\n
| \r\n BarraCuda 3.5\", SATA Interface \r\n | \r\n\r\n ST2000DM011 \r\n | \r\n\r\n Opal SSC \r\nATA Security \r\n | \r\n\r\n 0001 \r\n | \r\n
The evaluation was carried out in accordance with the Common Criteria Evaluation and Validation Scheme (CCEVS) process and scheme. The criteria against which the Seagate Secure® TCG SSC Self-Encrypting Drives were judged are described in the Common Criteria for Information Technology Security Evaluation, Version 3.1 rev 5. The evaluation methodology used by the evaluation team to conduct the evaluation is the Common Methodology for Information Technology Security Evaluation, Version 3.1 rev 5. The product satisfies all of the security functional requirements stated in the Seagate Secure® TCG SSC Self-Encrypting Drives Security Target, version 1.0, November 9, 2021, when delivered and configured as identified in the product documentation listed in the aforementioned security target.
\r\nThe evaluation underwent CCEVS Validator review. The evaluation was completed in December 2021. Results of the evaluation can be found in the Common Criteria Evaluation and Validation Scheme Validation Report prepared by CCEVS.
","environmental_strengths":"Seagate Secure TCG Enterprise SSC and TCG Opal SSC Self-Encrypting Drives enforce the following TOE security functional policies as specified in the ST.
\r\nCryptographic Support
\r\nThe TOE includes NIST-validated cryptographic algorithms supporting cryptographic functions. The TOE provides Key Wrapping, Key Derivation, and BEV Validation.
\r\n\r\nThe TOE performs Full Drive Encryption such that the drive contains no plaintext user data. The TOE performs user data encryption by default in the out-of-the-box configuration using XTS-AES-256 mode.
\r\n\r\nThe TOE supports management functions for changing and erasing the DEK, for initiating the TOE firmware updates, and for configuring the number of failed validation attempts required to trigger corrective action.
\r\n\r\nThe TOE provides trusted firmware update and access control functions; protects Key and Key Material; and supports a Compliant power saving state. The TOE runs a suite of self-tests during initial start-up (on power on), before the function is first invoked.
","features":[]}