evilrouters.net

A number of Microsoft products have achieved a Common Criteria certification of 4+, according to a company spokeman.

The products achieving certification include:

• Windows Server 2003 Standard Edition w/ SP1 (32- and 64-bit),
• Windows Server 2003 Enterprise Edition w/ SP1 (32- and 64-bit), and
• Windows Datacenter Edition w/ SP1 (32- and 64-bit).

Other products have also earned the EAL 4+ certification, including:

• Windows Server 2003 Certificate Server,
• Certificate Issuing and Management Components (Security Level 3 Protection Profile, Version 1.0),
• Windows XP Professional with SP2, and
• Windows XP Embedded with Service Pack 2.

Microsoft had previously reached the EAL 4 rating for Windows Server 2000, but did not test the server operating system with other pieces of software that typically would run with it, said Mario Juarez, senior product manager in the Security Technology Unit at Microsoft.

“Government customers have historically deployed a lot of Unix in their environments because of its tendency to be extremely secure, and in recent years also began using Linux, an open-source version of Unix, as another operating system option. Currently, Red Hat is testing its Red Hat Enterprise Linux 4 for EAL 4. SuSE Linux Enterprise Server 9 has achieved EAL 4 certification on an IBM eServer, according to the Web site of Novell, which owns SuSE Linux.” –Network World (link).