The Target of Evaluation (TOE) is Apple iOS 15: iPhones which is a series of Apple iPhone mobile devices running the iOS 15 operating system, a Mobile Device Management (MDM) Agent, VPN client, and WLAN client components, which are included on the mobile devices.
The TOE operating system manages the device hardware, provides MDM Agent functionality, and provides the technologies required to implement native applications. It provides a built-in MDM framework application programmer interface (API), giving management features that may be utilized by external MDM solutions, allowing enterprises to use profiles to control some of the device settings.
\r\nThe TOE operating system provides a consistent set of capabilities allowing the supervision of enrolled devices. This includes the preparation of devices for deployment, the subsequent management of the devices, and the termination of management.
","evaluation_configuration":"Devices Covered by the Evaluation
\r\n| \r\n Processor \r\n | \r\n\r\n Device Name \r\n | \r\n\r\n Model Number \r\n | \r\n
| \r\n A9 \r\n | \r\n\r\n iPhone 6s \r\n\r\n | \r\n\r\n A1633 \r\n | \r\n
| \r\n A1688 \r\n | \r\n||
| \r\n A1691 \r\n | \r\n||
| \r\n A1700 \r\n | \r\n||
| \r\n iPhone 6s Plus \r\n | \r\n\r\n A1634 \r\n | \r\n|
| \r\n A1687 \r\n | \r\n||
| \r\n A1690 \r\n | \r\n||
| \r\n A1699 \r\n | \r\n||
| \r\n iPhone SE \r\n | \r\n\r\n A1662 \r\n | \r\n|
| \r\n A1723 \r\n | \r\n||
| \r\n A1724 \r\n | \r\n||
| \r\n A10 Fusion \r\n | \r\n\r\n iPhone 7 \r\n | \r\n\r\n A1660 \r\n | \r\n
| \r\n A1779 \r\n | \r\n||
| \r\n A1780 \r\n | \r\n||
| \r\n A1778 \r\n | \r\n||
| \r\n iPhone 7 Plus \r\n | \r\n\r\n A1661 \r\n | \r\n|
| \r\n A1785 \r\n | \r\n||
| \r\n A1786 \r\n | \r\n||
| \r\n A1784 \r\n | \r\n||
| \r\n A11 Bionic \r\n | \r\n\r\n iPhone 8 \r\n | \r\n\r\n A1863 \r\n | \r\n
| \r\n A1906 \r\n | \r\n||
| \r\n A1907 \r\n | \r\n||
| \r\n A1905 \r\n | \r\n||
| \r\n iPhone 8 Plus \r\n | \r\n\r\n A1864 \r\n | \r\n|
| \r\n A1898 \r\n | \r\n||
| \r\n A1899 \r\n | \r\n||
| \r\n A1897 \r\n | \r\n||
| \r\n iPhone X \r\n | \r\n\r\n A1865 \r\n | \r\n|
| \r\n A1902 \r\n | \r\n||
| \r\n A1901 \r\n | \r\n||
| \r\n A12 Bionic \r\n | \r\n\r\n iPhone XS \r\n | \r\n\r\n A1920 \r\n | \r\n
| \r\n A2097 \r\n | \r\n||
| \r\n A2098 \r\n | \r\n||
| \r\n A2099 \r\n | \r\n||
| \r\n A2100 \r\n | \r\n||
| \r\n iPhone XS Max \r\n | \r\n\r\n A1921 \r\n | \r\n|
| \r\n A2101 \r\n | \r\n||
| \r\n A2102 \r\n | \r\n||
| \r\n A2104 \r\n | \r\n||
| \r\n iPhone XR \r\n | \r\n\r\n A1984 \r\n | \r\n|
| \r\n A2105 \r\n | \r\n||
| \r\n A2106 \r\n | \r\n||
| \r\n A2107 \r\n | \r\n||
| \r\n A2108 \r\n | \r\n||
| \r\n A13 Bionic \r\n | \r\n\r\n iPhone 11 \r\n | \r\n\r\n A2111 \r\n | \r\n
| \r\n A2221 \r\n | \r\n||
| \r\n A2223 \r\n | \r\n||
| \r\n iPhone 11 Pro \r\n | \r\n\r\n A2160 \r\n | \r\n|
| \r\n A2215 \r\n | \r\n||
| \r\n A2217 \r\n | \r\n||
| \r\n iPhone 11 Pro Max \r\n | \r\n\r\n A2161 \r\n | \r\n|
| \r\n A2218 \r\n | \r\n||
| \r\n A2219 \r\n | \r\n||
| \r\n A2220 \r\n | \r\n||
| \r\n iPhone SE (2nd gen) \r\n | \r\n\r\n A2275 \r\n | \r\n|
| \r\n A2296 \r\n | \r\n||
| \r\n A2298 \r\n | \r\n||
| \r\n A14 Bionic \r\n | \r\n\r\n iPhone 12 mini \r\n | \r\n\r\n A2176 \r\n | \r\n
| \r\n A2398 \r\n | \r\n||
| \r\n A2399 \r\n | \r\n||
| \r\n A2400 \r\n | \r\n||
| \r\n iPhone 12 \r\n | \r\n\r\n A2172 \r\n | \r\n|
| \r\n A2402 \r\n | \r\n||
| \r\n A2403 \r\n | \r\n||
| \r\n A2404 \r\n | \r\n||
| \r\n iPhone 12 Pro \r\n | \r\n\r\n A2341 \r\n | \r\n|
| \r\n A2406 \r\n | \r\n||
| \r\n A2407 \r\n | \r\n||
| \r\n A2408 \r\n | \r\n||
| \r\n iPhone 12 Pro Max \r\n | \r\n\r\n A2342 \r\n | \r\n|
| \r\n A2410 \r\n | \r\n||
| \r\n A2411 \r\n | \r\n||
| \r\n A2412 \r\n | \r\n||
| \r\n A15 Bionic \r\n | \r\n\r\n iPhone 13 mini \r\n | \r\n\r\n A2482 \r\n | \r\n
| \r\n A2631 \r\n | \r\n||
| \r\n A2633 \r\n | \r\n||
| \r\n A2634 \r\n | \r\n||
| \r\n A2635 \r\n | \r\n||
| \r\n iPhone 13 \r\n | \r\n\r\n A2482 \r\n | \r\n|
| \r\n A2631 \r\n | \r\n||
| \r\n A2633 \r\n | \r\n||
| \r\n A2634 \r\n | \r\n||
| \r\n A2635 \r\n | \r\n||
| \r\n iPhone 13 Pro \r\n | \r\n\r\n A2483 \r\n | \r\n|
| \r\n A2636 \r\n | \r\n||
| \r\n A2638 \r\n | \r\n||
| \r\n A2639 \r\n | \r\n||
| \r\n A2640 \r\n | \r\n||
| \r\n iPhone 13 Pro Max \r\n | \r\n\r\n A2484 \r\n | \r\n|
| \r\n A2641 \r\n | \r\n||
| \r\n A2643 \r\n | \r\n||
| \r\n A2644 \r\n | \r\n||
| \r\n A2645 \r\n | \r\n
The evaluation was carried out in accordance with the Common Criteria Evaluation and Validation Scheme (CCEVS) process. The criteria against which the Apple iOS 15: iPhones was judged are described in the Common Criteria for Information Technology Security Evaluation, Version 3.1 R5. The evaluation methodology used by the evaluation team to conduct the evaluation was the Common Methodology for Information Technology Security Evaluation, Version 3.1, R5 supplemented by that found in the Protection Profiles cited above. The product, when delivered and configured as identified in the Apple iOS 15: iPhones and Apple iPadOS 15: iPads Common Criteria Configuration Guide, meets the requirements of the PP-Configuration for Mobile Device Fundamentals, Mobile Device Management Agents, Virtual Private Network Clients, and Bluetooth, Version 1.0; the General Purpose Operating Systems Protection Profile/ Mobile Device Fundamentals Protection Profile Extended Package (EP) Wireless Local Area Network (WLAN) Clients Version 1.0; and the Functional Package for TLS Version 1.1.
\r\nThe Apple iOS 15: iPhones and Apple iPadOS 15: iPads Common Criteria Configuration Guide document satisfies all of the security functional requirements stated in the Apple iOS 15: iPhones Security Target, version 1.2. The evaluation was subject to CCEVS Validator review. The evaluation was completed in November 2022. Results of the evaluation can be found in the Common Criteria Evaluation and Validation Scheme Validation Report number CCEVS-VR-VID11237-2022, prepared by CCEVS.
","environmental_strengths":"The TOE provides cryptographic services for the encryption of data-at rest, for secure communication channels, and for use by applications. In addition, the TOE implements a number of cryptographic protocols that can be used to establish a trusted channel to other IT entities.
\r\nAs noted in the Security Target, the TOE provides cryptographic services via the following cryptographic modules.
\r\n· Apple corecrypto Module v12.0 [Apple ARM, User, Software, SL1] (User Space)
\r\n· Apple corecrypto Module v12.0 [Apple ARM, Kernel, Software, SL1] (Kernel Space)
\r\n· Apple corecrypto Module v12.0 [Apple ARM, Secure Key Store, Hardware, SL2]
\r\nExcept for making answering calls, emergency calls, accessing Medical ID information, using the cameras (unless their use is generally disallowed), using the flashlight, using the control center, and using the notification center, users need to authenticate using a passcode or a biometric (fingerprint or face). The user is required to use the passcode authentication mechanism under the following conditions.
\r\n· Turn on or restart the device
\r\n· Press the Home button or swipe up to unlock your device (configurable)
\r\n· Update software
\r\n· Erase the device
\r\n· View or change passcode settings
\r\n· Install iOS Configuration Profiles
\r\nThe passcode can be configured for a minimum length, for dedicated passcode policies, and for a maximum lifetime. When entered, passcodes are obscured and the frequency of entering passcodes is limited as well as the number of consecutive failed attempts of entering the passcode.
\r\nThe TOE also enters a locked state after a (configurable) time of user inactivity and the user is required to either enter his passcode or use biometric authentication (fingerprint or face) to unlock the TOE
\r\nExternal entities connecting to the TOE via a secure protocol (Extensible Authentication Protocol Transport Layer Security (EAP-TLS), Transport Layer Security (TLS), IPsec) can be authenticated using X.509 certificates.
\r\nThe security functions listed in the Security Target can be managed either by the user or by an authorized administrator through a Mobile Device Management (MDM) system. The Security Target identifies the functions that can be managed and indicates if the management can be performed by the user, by the authorized administrator, or both.
\r\nSome of the functions the TOE implements to protect the TSF and TSF data are:
\r\n· Protection of cryptographic keys—keys used for TOE internal key wrapping and for the protection of data-at-rest are not exportable. There are provisions for fast and secure wiping of key material.
\r\n· Use of memory protection and processor states to separate apps and protect the TSF from unauthorized access to TSF resources—in addition, each device includes a separate system called the SEP which is the only system that can use the Root Encryption Key (REK). The SEP is a separate CPU that executes a stand-alone operating system and has separate memory.
\r\n· Digital signature protection of the TSF image—all updates to the TSF need to be digitally signed.
\r\n· Software/firmware integrity self-test upon start-up—the TOE will not go operational when this test fails.
\r\n· Digital signature verification for apps
\r\n· Access to defined TSF data and TSF services only when the TOE is unlocked
\r\nThe TSF provides functions to lock the TOE upon request and after an administrator-configurable time of inactivity.
\r\nAccess to the TOE via a wireless network is controlled by user/administrator defined policy.
\r\nTrusted Path/Channels
\r\nThe TOE supports the use of the following cryptographic protocols that define a trusted channel between itself and another trusted IT product:
\r\n· IEEE 802.11-2012
\r\n· IEEE 802.11ac-2013 (a.k.a. Wi-Fi 5)
\r\n· IEEE 802.11ax (a.k.a. Wi-Fi 6)
\r\n· IEEE 802.1X
\r\n· EAP-TLS (1.0, 1.1, 1.2)
\r\n· TLS (1.2)
\r\n· IPsec
\r\n· Bluetooth (4.2, 5.0)
\r\nThe TOE provides the ability for responses to be sent from the MDM Device Agent to the MDM Server. These responses are configurable by the organization as per the Device Management document.
","features":[]}