The Axway Desktop Validator (DV) is part of Axway’s Validation Authority Suite, which provides a comprehensive, scalable, and reliable framework for real-time validation of digital certifications for the Public Key Infrastructure (PKI). The Axway VA Suite provides a variety of PKI and certificate management functionality to prevent revoked credentials from being used for secure email, smart card login, network access (including wireless), or other sensitive electronic transactions. The Axway DV provides the following functionality:
\r\nThe Axway Desktop Validator allows installation on Microsoft Windows on one of the following platforms:
\r\n\r\n
The Windows platform is part of the operating environment of the TOE. The TOE can execute on any Intel Xeon processor, however the lab tested the TOE on an Intel Xeon E5-2670. The lab also tested the TOE on Windows 11 (64 bit) and Windows Server 2022 (64 bit) in the evaluated configuration.
\r\nThe Axway VA Suite is composed of the following applications:
\r\nAs the focus of this evaluation is on the DV, the lab tested the DV Enterprise edition as the Enterprise edition is a superset that includes the Standard edition’s functionality.
","security_evaluation_summary":"The evaluation was carried out in accordance to the Common Criteria Evaluation and Validation Scheme (CCEVS) requirements and guidance. The evaluation demonstrated that the TOE meets the security requirements contained in the Security Target. The criteria against which the TOE was judged are described in the Common Criteria for Information Technology Security Evaluation, Version 3.1, Revision 5, April 2017. The evaluation methodology used by the evaluation team to conduct the evaluation is the Common Methodology for Information Technology Security Evaluation, Evaluation Methodology, Version 3.1, Revision 5, April 2017. The product, when delivered and configured as identified in the Validation Authority Common Criteria Guide, version 5.2, June 10, 2024 document, satisfies all of the security functional requirements stated in the Axway Desktop Validator, version 5.2 Security Target, Version 0.4, June 11, 20204. The project underwent CCEVS Validator review. The evaluation was completed in July 2024. Results of the evaluation can be found in the Common Criteria Evaluation and Validation Scheme Validation Report (report number CCEVS-VR-VID11451-2024) prepared by CCEVS.
","environmental_strengths":"Environmental Strengths:
\r\nThe logical boundaries of the Axway Desktop Validator are realized in the security functions that it implements. Each of these security functions is summarized below.
\r\n\r\n
Cryptographic support:
\r\nThe TOE does not generate any asymmetric keys.
\r\nUser data protection:
\r\nThe TOE does not access any hardware resources (other than network connectivity) or sensitive information repositories. The TOE does not store any sensitive data in non-volatile memory. Inbound and outbound network communications are restricted to those that are application initiated.
\r\nSecurity management:
\r\nThe TOE provides the ability to configure enhanced revocation checking. The TOE also provides the ability to check for TOE updates.
\r\nPrivacy:
\r\nThe TOE does not transmit personally identifiable information (PII) over any network interfaces.
\r\nProtection of the TSF:
\r\nThe TOE protects itself against exploitation by implementing address space layout randomization (ASLR) and by not allocating any memory region for both write and execute permission. The TOE is compiled for Windows with stack-based buffer overflow protection and does not allow user-modifiable files to be written to directories that contain executable files. The TOE uses standard platform APIs and includes a number of third party libraries used to perform its functions.
\r\nThe TOE includes mechanisms to check for updates and to query the current version of the application software. TOE software is digitally signed and distributed using the platform-supported package manager (Windows). The TOE does not update its own binary code in any way and when removed, all traces of the TOE application software are deleted.
\r\nTrusted path/channels:
\r\nThe TOE does not transmit any sensitive data across the network.
","features":[{"id":5233,"feature_name":"Application Software"},{"id":5234,"feature_name":"Credential Storage"},{"id":5235,"feature_name":"TLS Client"}]}