I’m pleased to announce that Forefront UAG has formally entered evaluation for Common Criteria Evaluation Assurance Level 2+ with TÜViT as the Common Criteria Testing Laboratory (CCTL), and has attained Evaluated Products List (EPL) status. The evaluation is being conducted by the Federal Office for Information Security (a German government agency known in English as the “BSI”). The BSI’s certification is recognized by all countries that accept the Common Criteria, including the USA, the UK, France, Japan and more than 20 other countries.
Since Common Criteria certification is a long process, attaining EPL status is significant for earlier purchase decisions: It means that the BSI reviewed and approved the detailed scope and content (the "Security Target") of the certification, and reflects a high level of confidence in the success of the certification. The Certification-ID assigned to UAG is BSI-DSZ-CC-678.
You will also be happy to know that Windows 2008 Server R2 and Windows 7 are undergoing certification. More information can be found on Tim Myer's blog.
Products in the process of evaluation by the BSI are listed at https://www.bsi.bund.de/cln_165/ContentBSI/EN/topics/Certification/newcertificates.html. On the page, scroll down to the sentence “The following list includes products / systems where the applicant has agreed to publication before completion of the certification procedure.” At the time of writing, UAG is the most recent addition and appears first on the list.
For a brief description of the Common Criteria certification, see http://en.wikipedia.org/wiki/Common_Criteria
Author: Noam Ben-Yochanan, Senior Program Manager
Reviewer: David Strausberg, Technical Writer