Hewlett Packard gets Common Criteria certification for Linux

HP says a broad range of its computer hardware running Red Hat Enterprise Linux 5 has been examined and certified as compliant under the international Common Criteria product-evaluation program backed by the U.S. government and sometimes required for government technology acquisitions.

HP’s Integrity, ProLiant, and BladeSystem platforms, as well as workstations and desktops, have received the Evaluation Assurance Level 4 (EAL4+) Common Criteria security certification for Red Hat Enterprise Linux 5, the version of the operating system released last March. EAL4+ is the highest level of security that unmodified commercial software can achieve. Higher rankings to level 7 typically involve highly customized systems designed for maximum-security government purposes.

However, Erik Lillestolen, program manager for open source and Linux at HP, noted that the Zen-based technology for virtualization that’s part of Red Hat Linux 5 was not tested under the Common Criteria program.

“Nobody has included the virtualization technology yet,” he added about the Common Criteria security-evaluation program, which is backed by several countries as a multinational testing regimen.

HP submitted its computer gear for evaluation at Atsec, a certified lab under the U.S. government program known as the National Information Assurance Partnership (NIAP), a collaborative effort among the National Institute of Standards and technology (NIST) and the National Security Agency (NSA) which administers the Common Criteria program in the United States.

The EAL4+ certification level for unmodified commercial products assures that they work with security “profile” requirements, such as the Controlled Access Protection Profile, the Role-based Access Control protection Profile and the labeled Security protection profile. Lillestolen noted that the lab review entailed an inspection of source code and evaluation of how software performed on hardware platforms.

Would you recommend this article?

Share

Thanks for taking the time to let us know what you think of this article!
We'd love to hear your opinion about this or any other story you read in our publication.


Jim Love, Chief Content Officer, IT World Canada

Featured Download

Related Tech News

Featured Tech Jobs

 

CDN in your inbox

CDN delivers a critical analysis of the competitive landscape detailing both the challenges and opportunities facing solution providers. CDN's email newsletter details the most important news and commentary from the channel.