Alacris® Inc.
World Exchange Plaza
100 Queen Street, Suite 630
Ottawa, ON
Canada
K1P 1J9
Phone: (613) 230-9762
Fax: (613) 230-9702
info@alacris.com
The Alacris® OCSP Server Professional 3.0.0 was the subject of a Common Criteria evaluation performed by the Common Criteria Evaluation Facility at CGI Information Systems and Management Consultants Inc., located in Ottawa, Ontario, Canada. The evaluation was completed on 20 February 2004.
The evaluation of the Alacris® OCSP Server Professional 3.0.0 determined that this Information Technology (IT) product can be trusted, to an assurance level of EAL 2, to conform to the requirements of the associated security target.
The Alacris® OCSP Server Professional 3.0.0 provides X.509 certificate status information to clients in a Public Key Infrastructure (PKI) using the On-line Certificate Status Protocol (OCSP) defined in RFC 2560. The Alacris® OCSP Server Professional 3.0.0 accepts OCSP requests from the Alacris® OCSP Client Professional, or any OCSP client implementation compliant with RFC 2560, and returns the revocation status associated with the requested certificate in an OCSP response message conformant to RFC 2560.
The target of evaluation comprises: the Alacris® OCSP Server Professional 3.0.0 software (running on Windows® 2000 advanced server with service pack 3 and the High Encryption Pack for Windows® 2000, or Windows® 2003 Enterprise Edition platform); and user guidance documentation which describes the correct configuration and operation of the Alacris® OCSP Server Professional 3.0.0. The correct configuration is described in detail in the ocspserverv3.chm file included on the installation CD.
The scope of this evaluation is defined by the security target, which identifies assumptions made during the evaluation, the intended environment for the Alacris® OCSP Server Professional 3.0.0, the IT security requirements to be met, and the level of confidence (evaluation assurance level) to which it is asserted that the Alacris® OCSP Server Professional 3.0.0 satisfies its IT security requirements. Consumers are advised to verify that their operating environment is consistent with the security target.
Security Target:
* Accessibility Notice * Official Languages Notice