The Target of Evaluation (TOE) is a self-encrypting drive that provides encryption and decryption of stored user data. The TOE provides full drive encryption to safeguard data on lost or stolen devices. The Encryption Engine (EE) ensures that the drive data is encrypted using NIST approved algorithms.
","evaluation_configuration":"The evaluated configuration consists of the following models and version:
\n\n
| \n\n | \n\n CC Listed P/N & Version \n | \n\n Advantech P/N & Version \n | \n\n Form Factor \n | \n\n Controller \n | \n\n FW Version \n | \n
| \n 840F \n | \n\n SQF-2020-1TSCB \n | \n\n SQFFS25V8-1TSC \n | \n\n 2.5\" SATA \n | \n\n PS3112-S12 \n | \n\n SCPB13.0 \n\n | \n
| \n 840F \n | \n\n SQF-2020-512SCB \n | \n\n SQFFS25V8-512GSC \n | \n\n 2.5\" SATA \n | \n||
| \n 840F \n | \n\n SQF-2020-256SCB \n | \n\n SQFFS25V4-256GSC \n | \n\n 2.5” SATA \n | \n||
| \n 840F \n | \n\n SQF-2020-128SCB \n | \n\n SQFFS25V2-128GSC \n | \n\n 2.5” SATA \n | \n||
| \n 840F \n | \n\n SQF-2020-1TSCM \n | \n\n SQFFSM8V4-1TSC \n | \n\n M.2 SATA \n | \n||
| \n 840F \n | \n\n SQF-2020-512SCM \n | \n\n SQFFSM8V4-512GSC \n | \n\n M.2 SATA \n | \n||
| \n 840F \n | \n\n SQF-2020-256SCM \n | \n\n SQFFSM8V4-256GSC \n | \n\n M.2 SATA \n | \n||
| \n 840F \n | \n\n SQF-2020-128SCM \n | \n\n SQFFSM8V2-128GSC \n | \n\n M.2 SATA \n | \n||
| \n 920F \n | \n\n SQF-2040-1TECM \n | \n\n SQFFCM8V4-1TEC \n | \n\n M.2 NVMe \n | \n\n PS5012-E12 \n\n | \n\n ECPB13.0 \n\n \n | \n
| \n 920F \n | \n\n SQF-2040-512ECM \n | \n\n SQFFCM8V4-512GEC \n | \n\n M.2 NVMe \n | \n||
| \n 920F \n | \n\n SQF-2040-256ECM \n | \n\n SQFFCM8V4-256GEC \n | \n\n M.2 NVMe \n | \n\n PS5012-E12 \n\n | \n\n ECPB13.0 \n\n | \n
","security_evaluation_summary":"
The evaluation was carried out in accordance with the Common Criteria Evaluation and Validation Scheme (CCEVS) process and scheme. The evaluation demonstrated that the product meets the security requirements contained in the Security Target. The criteria against which the KLC Advantech Drives Firmware Version: SCPB13.0/ECPB13.0 was judged are described in the Common Criteria for Information Technology Security Evaluation, Version 3.1, Revision 5, April 2017. The evaluation methodology used by the evaluation team to conduct the evaluation is the Common Methodology for Information Technology Security Evaluation, Version 3.1, Revision 5, April 2017. The product, when delivered and configured as identified in the KLC Advantech Drives Firmware Version: SCPB13.0/ECPB13.0 Common Criteria Guide, Version 1.1, June 2024, satisfies all of the security functional requirements stated in the KLC Advantech Drives Firmware Version: SCPB13.0/ECPB13.0 Security Target, Version 1.4, June 2024. The project underwent CCEVS Validator review. The evaluation was completed in June 2024. Results of the evaluation can be found in the Common Criteria Evaluation and Validation Scheme Validation Report (report number CCEVS-VR-VID11453-2024) prepared by CCEVS.
","environmental_strengths":"The TOE is comprised of the following security features which are described in more detail in the subsections below.
\nCryptographic Support
\nThe TOE ensures key material used for storage encryption is properly generated and protected from disclosure. It also implements cryptographic key and key material destruction during transitioning to a Compliant power saving state, or when all keys and key material are no longer needed.
\nThe TOE performs cryptographic operations as shown in relevant Cryptographic Algorithm Validation Program (CAVP) certificates.
\nData Protection
\nThe TOE enables encryption and decryption of user data on a SED to protect it from unauthorized disclosure.
\nSecurity Management
\nThe TOE enables management of its security functions, including:
\ni) Changing and erasing the DEK
\nii) Updating the TOE firmware
\n\n
Protection of the TSF
\nThe TOE ensures the authenticity and integrity of firmware updates through digital signatures using RSA 2048 with SHA-256. The TOE supports the D3 compliant power saving state as prompted by the protected OS when a user initiates a request.
\nThe TOE ensures its integrity and operation by performing self-tests.
","features":[{"id":2804,"feature_name":"Cryptographic Hashing"},{"id":2732,"feature_name":"Cryptographic Signature Verification"},{"id":2729,"feature_name":"DRBG"},{"id":2724,"feature_name":"Full Drive Encryption"},{"id":2727,"feature_name":"Key Destruction"},{"id":2805,"feature_name":"Keyed-hash message authentication"},{"id":2730,"feature_name":"Symmetric Key Generation"}]}