Solaris Common Criteria Certification

Solaris 10 11/06 Operating Environment

Solaris 10 03/05 Operating Environment

The Solaris 10 03/05 operating system is conformant with the Controlled Access Protection Profile (CAPP), Version 1.d, October 8, 1999 and with the Role Based Access Control Protection Profile (RBACPP), Version 1.0, July 30, 1998 and is certified for use on SPARC and AMD based platforms.

The Solaris 10 03/05 Certified software consists of the Solaris 10 03/05 Operating Environment and a subset of Solaris 10 patches which have been reviewed to ensure that their application introduces no new security vulnerabilities.

Solaris 9 08/03 Operating Environment

Solaris 9 8/03 has been certified under the Common Criteria at EAL4+ under the Controlled Access Protection Profile and Role Based Access Control Protection Profile for use with Ultra II, Ultra III and Sun Fire servers.

The Solaris 9 8/03 Certified software consists of Solaris 9 8/03 Operating Environment (SPARC Platform Edition), and the subset of Solaris 9 patches which have been reviewed to ensure that their application introduces no new security vulnerabilities.

Trusted Solaris 8 4/01 Operating Environment

Trusted Solaris 8 4/01 is a highly configurable, multilevel trusted operating environment based on Sun's Solaris 8 4/01 operating environment. It meets and exceeds the specific security requirements of the Labeled Security, Role-based Access Control, and Controlled Access protection profiles of the Common Criteria.

Features include:

• MAC and DAC - including ACLs;
• Least privilege with fine-grained privileges for all policies;
• Trusted networking and trusted NFS;
• Identification and authentication - including password generation;
• Roles for separating user and administration capabilities;
• Rights profiles for grouping commands, applications, and authorisations and assigning to users or roles;
• Multilevel windowing environment with trusted path for invoking trusted commands and applications;
• Centralized administration with easy-to-use graphical tools;
• Auditing which records the actions of users and roles as well as non-attributable events.

Supported Hardware

Solaris 10 11/06 Operating Environment has been certified on:

• Workstations and servers using an UltraSPARC III, UltraSPARC IIIi, UltraSPARC II, UltraSPARC IIe, UltraSPARC IIi, or UltraSPARC T1 processor in single or multiple configuration.
• The Netra 1280 and Sun Fire mid-frame and high-end family offering Dynamic Reconfiguration and Multiple Domaining using an UltraSPARC III, UltraSPARC III Cu (copper based) or UltraSPARC IV processor.
• AMD based processor systems: AMD Opteron 800, 1200, and 8000 series; AMD-64 100, 200, and 2000 series; AMD dual-core 1200 and 2000 series; AMD Opteron 285; and, Intel Xeon.

Solaris 10 03/05 Operating Environment has been certified on:

• Workstations and servers using an UltraSPARC III, UltraSPARC IIIi or UltraSPARC IIi processor in single or multiple configuration.
• The Netra 1280 and Sun Fire mid-frame and high-end family offering Dynamic Reconfiguration and Multiple Domaining using an UltraSPARC III, UltraSPARC III Cu (copper based) or UltraSPARC IV processor.
• AMD based processor systems: AMD Opteron 200 and 800, AMD-64 100 (W1100z) and AMD-64 200 (W2100z).

Solaris 9 8/03 Operating Environment has been certified on:

• UltraSPARC 5, 10, 30, 60, 80, 450
• Sun Blade 100, 150, 1000, 2000
• E220R, E250, E420R, E450, E3500, E4500, E5500, E6500, E10000
• Sun Fire B100s, V100, V120, V210, V240, V250, V280R, V480, V880, V880z, V1280, 3800, 4800, 4810, 6800, 12000, 15000
• Netra 20, 120, CT410, CT810, 1280

Trusted Solaris 8 4/01 Operating Environment has been certified on:

• Sun Blade 1500, 2000, 2500
• ServerBlade 1
• Sun Fire V60, V210, V240, V250, V440, V1280, V480, V490, V880, V890, 3800, 4800, 4810, 6800, 15K, 20K, 25K
• Sun Fire E2900, E4900, E6900 Server
• AMD Athlon, Opteron
• Intel P4, Xeon MP
• Sony Vaio Laptop
• Panasonic Tough 50 Laptop
• Dell PowerEdge 2650

Certification Irrelevant Patches

Some patches which customers request are to areas of the system which do not affect CC certification. These patches are referred to as certification irrelevant.

Products In-Evaluation

Solaris 10 11/06 with Trusted Extensions - Extends Solaris OS security
Solaris 10 11/06 with Trusted Extensions is an extension to the proven Solaris 10 security model. It utilizes User and Process Rights Management, Solaris Containers, file systems, and networking and doesn't require a new or separate kernel. Best of all, it doesn't require ISVs to requalify their applications to run them with sensitivity labels. Because it's an extension to the Solaris 10 OS's security policy, Solaris 10 11/06 with Trusted Extensions technology is flexible and quick to deploy: You can add new applications, new users, and more, very quickly, without extensive analysis of each application — and without the need to write complex, error-prone security policies that require a system reboot.

More Information