Alan,

Thanks for your response.  I guess this Common Criteria option won't do me
much good.

Just one more question:  You said v5.2 won't be evaluated for Common
Criteria certification?  Do you know why?  Is it maybe a cost issue, where
its too expensive to do it every release, possibly considering the demand
(or lack thereof) in the VM community for the certification?  If so, do you
have a guideline for how often you expect to apply?  Otherwise, can you
tell me the reason?

Thanks,
Dennis




                                                                           
             "Alan Altmark"                                                
             <[EMAIL PROTECTED]                                             
             ibm.com>                                                   To 
             Sent by: "The IBM         [email protected]             
             z/VM Operating                                             cc 
             System"                                                       
             <[EMAIL PROTECTED]                                     Subject 
             ARK.EDU>                  Re: z/VM v5.2 - Common Criteria -   
                                       Order Questions                     
                                                                           
             07/13/2006 07:43                                              
             AM                                                            
                                                                           
                                                                           
             Please respond to                                             
               "The IBM z/VM                                               
             Operating System"                                             
             <[EMAIL PROTECTED]                                             
                 ARK.EDU>                                                  
                                                                           
                                                                           




On Wednesday, 07/12/2006 at 05:45 EST, Dennis Schaffer
<[EMAIL PROTECTED]> wrote:
> Hi,
>
> I'm getting ready to order z/VM v5.2 and have a question regarding the
> order.  I'm using shopZseries to place the order.
>
> In the "Previous VM Release" section, two options are "Common Criteria
RSU
> 1" and "z/VM V5 3390 System CCC DDR".  I assume those are related to
Common
> Criteria security accreditation.  We're not a government shop or such
which
> requires high security but we see our fair share of auditors who might
be
> interested in EAL3+ accreditation.  Are these options a separe "secure"
> flavor (product and maintenance) of v5.2.  Would I order these options
in
> lieu of "z/VM V5 3390 System DDR"?  Can anyone explain exactly what
these
> options are?
>
> Thanks in advance for your assistance.

z/VM 5.2 has not been evaluated for Common Criteria.  The Common Criteria
features of z/VM 5.2 will ship you the z/VM 5.1 base and the z/VM 5.1 RSU
1.  RSU 1 is so that you can put your system in the "evaluated
configuration" according to the requirements of the z/VM Secure
Configuration Guide.

I should say that z/VM 5.2 was designed to have all the same security
characteristics as z/VM 5.1, but it simply has not been (and will not be)
evaluated.

Alan Altmark
z/VM Development
Common Criteria Guy
IBM Endicott

Reply via email to