Alan,
Thanks for your response. I guess this Common Criteria option won't do me
much good.
Just one more question: You said v5.2 won't be evaluated for Common
Criteria certification? Do you know why? Is it maybe a cost issue, where
its too expensive to do it every release, possibly considering the demand
(or lack thereof) in the VM community for the certification? If so, do you
have a guideline for how often you expect to apply? Otherwise, can you
tell me the reason?
Thanks,
Dennis
"Alan Altmark"
<[EMAIL PROTECTED]
ibm.com> To
Sent by: "The IBM [email protected]
z/VM Operating cc
System"
<[EMAIL PROTECTED] Subject
ARK.EDU> Re: z/VM v5.2 - Common Criteria -
Order Questions
07/13/2006 07:43
AM
Please respond to
"The IBM z/VM
Operating System"
<[EMAIL PROTECTED]
ARK.EDU>
On Wednesday, 07/12/2006 at 05:45 EST, Dennis Schaffer
<[EMAIL PROTECTED]> wrote:
> Hi,
>
> I'm getting ready to order z/VM v5.2 and have a question regarding the
> order. I'm using shopZseries to place the order.
>
> In the "Previous VM Release" section, two options are "Common Criteria
RSU
> 1" and "z/VM V5 3390 System CCC DDR". I assume those are related to
Common
> Criteria security accreditation. We're not a government shop or such
which
> requires high security but we see our fair share of auditors who might
be
> interested in EAL3+ accreditation. Are these options a separe "secure"
> flavor (product and maintenance) of v5.2. Would I order these options
in
> lieu of "z/VM V5 3390 System DDR"? Can anyone explain exactly what
these
> options are?
>
> Thanks in advance for your assistance.
z/VM 5.2 has not been evaluated for Common Criteria. The Common Criteria
features of z/VM 5.2 will ship you the z/VM 5.1 base and the z/VM 5.1 RSU
1. RSU 1 is so that you can put your system in the "evaluated
configuration" according to the requirements of the z/VM Secure
Configuration Guide.
I should say that z/VM 5.2 was designed to have all the same security
characteristics as z/VM 5.1, but it simply has not been (and will not be)
evaluated.
Alan Altmark
z/VM Development
Common Criteria Guy
IBM Endicott