Entrust Authority Security Manager 7.0

Entrust Inc.
1000 Innovation Drive
Ottawa, Ontario
Canada
K2K 3E7

The Entrust Authority Security Manager 7.0 was the subject of a Common Criteria evaluation performed by the Common Criteria Evaluation Facility at DOMUS IT Security Laboratories, located in Ottawa, Ontario, Canada. The evaluation was completed on 02 November 2004.

The evaluation of the Entrust Authority Security Manager 7.0 determined that this Information Technology (IT) product is trusted, to an assurance level of EAL 4 augmented with ALC_FLR.2, to conform to the requirements of the associated security target.

Entrust Authority Security Manager 7.0 is designed to manage the digital keys and certificates that make up the digital identities required to transparently automate all security-related processes in an organization. As the organization's Certification Authority (CA) system, Entrust Authority Security Manager software enables the use of digital signature, digital receipt, encryption and permissions management services across a wide variety of applications and solutions.

Entrust Authority Security Manager 7.0 represents the centrepiece of the Entrust Authority products portfolio, built specifically to:

securely store the certification authority (CA) private key;
issue certificates for users and devices;
publish user and application certificate revocation lists (CRLs) to allow verifiable communications; and
maintain an auditable database of users' private key histories for recovery purposes in the event that users lose access to their keys.

The evaluated configuration comprises: two instantiations of Entrust Authority Security Manager 7.0 each running on an Intel® Pentium® PC with Microsoft Windows® 2000 Service Pack 3 with one machine also running Entrust EntelligenceM^TM 6.0 and Critical Path 4.0 LDAP compliant directory.

The scope of this evaluation is defined by the security target, which identifies assumptions made during the evaluation, the intended environment for the Entrust Authority Security Manager 7.0, the IT security requirements to be met, and the level of confidence (evaluation assurance level) to which it is asserted that the Entrust Authority Security Manager 7.0 satisfies its IT security requirements. Consumers are advised to verify that their operating environment is consistent with the security target.

Security Target: * Accessibility Notice * Official Languages Notice

Certification Report: HTML | PDF

Certificate of Evaluation: HTML | PDF