Figure 1 shows a basic evaluated configuration for the SCKM140PP4 KM.
\r\n
Figure 1 – KM Switch Evaluated Configuration
\r\nFigure 2 shows the HID USB Filter/Isolator is connected to keyboard and mouse peripherals, and to the appropriate USB ports on the computer.
\r\nFigure 2 – USB Filter Evaluated Configuration
\r\n","security_evaluation_summary":"
The evaluation was carried out in accordance with the Common Criteria Evaluation and Validation Scheme (CCEVS) process and scheme. The criteria against which the Vertiv CYBEX™ SCKM140PP4 KM Switch Firmware Version 40404-0E7 and Vertiv CYBEX™ SCUSBHIDFILTER Firmware Version 40404-0E7 Peripheral Sharing Devices were evaluated are described in the Common Criteria for Information Technology Security Evaluation, Version 3.1 rev 5. The evaluation methodology used by the evaluation team to conduct the evaluation is the Common Methodology for Information Technology Security Evaluation, Version 3.1 rev 5. Acumen Security determined that the evaluation assurance level (EAL) for the product is EAL 1.
\r\nThe product, Vertiv CYBEX™ SCKM140PP4 KM Switch Firmware Version 40404-0E7 Peripheral Sharing Device, when delivered configured as identified in the CYBEX™ SC Series Secure Switches SC800/900DPH, SC800/900DVI, and SCKM100PP4 Quick Installation Guide, 590-2282-501B, Vertiv CYBEX™ SCKM140PP4 KM Switch Firmware Version 40404-0E7 Common Criteria Guidance Supplement, Version 1.8, satisfies all of the security functional requirements stated in the Vertiv CYBEX™ SCKM140PP4 KM Switch Firmware Version 40404-0E7 Security Target.
\r\nThe product, Vertiv CYBEX™ SCUSBHIDFILTER Firmware Version 40404-0E7 Peripheral Sharing Device, when delivered configured as identified in the CYBEX™ SECURE USB FILTERS, 590-2297-501 Rev. A, Vertiv CYBEX™ SCUSBHIDFILTER Firmware Version 40404-0E7 Common Criteria Guidance Supplement, Version 1.8, satisfies all of the security functional requirements stated in the Vertiv CYBEX™ SCUSBHIDFILTER Firmware Version 40404-0E7 Security Target.
\r\nThe project underwent CCEVS Validator review. The evaluation was completed in November 2021. Results of the evaluation can be found in the Common Criteria Evaluation and Validation Scheme Validation Report prepared by CCEVS.
","environmental_strengths":"The TOE is comprised of several security features. Each of the security features consists of several security functionalities, as identified below:
\r\n· User Data Protection
\r\n· Protection of the TSF
\r\n· TOE Access
\r\nThese features are described in more detail in the subsections below.
\r\nUser Data Protection
\r\n[Isolator and Switch]
\r\nThe TOE enforces unidirectional data flow for keyboard and mouse. The TOE ensures that only authorized peripheral devices may be used. The TOE provides secure switching capabilities for keyboard and mouse.
\r\nProtection of the TSF
\r\n[Isolator]
\r\nThe TOE ensures a secure state in the case of failure, provides only restricted access, and performs self-testing. The TOE provides passive detection of physical attack.
\r\n[Switch]
\r\nThe TOE ensures a secure state in the case of failure, provides only restricted access, and performs self-testing. The TOE provides both passive detection of physical attack, and active resistance to attack.
\r\nTOE Access
\r\n[Switch]
\r\nThe TOE provides a continuous indication of which computer is currently selected.
","features":[{"id":3072,"feature_name":"Auditing"},{"id":3061,"feature_name":"Passive Anti-Tamper"},{"id":3063,"feature_name":"Peripheral Device (USB Keyboard)"},{"id":3062,"feature_name":"Peripheral Device (USB Mouse)"}]}