Security Target
Version 1.1
2022-03-08
28
5.2.4.3
Security Roles (FMT_SMR.1)
FMT_SMR.1.1
The TSF shall maintain the roles [
administrators
].
FMT_SMR.1.2
The TSF shall be able to associate users with roles.
5.2.5
Protection of the TSF (FPT)
5.2.5.1
Failure with Preservation of Secure State (FPT_FLS_EXT.1)
FPT_FLS_EXT.1.1
The TSF shall preserve a secure state when the following types of failures occur:
failure of the power‐on self‐test and [
failure of the anti-tamper function
].
5.2.5.2
No Access to TOE (FPT_NTA_EXT.1)
FPT_NTA_EXT.1.1
TOE firmware, software, and memory shall not be accessible via the TOE’s
external ports, with the following exceptions: [
the Extended Display
Identification Data (EDID) memory of Video TOEs may be accessible from
connected computers; the configuration data, settings, and logging data that
may be accessible by authorized administrators
].
5.2.5.3
Passive Detection of Physical Attack (FPT_PHP.1)
FPT_PHP.1.1
The TSF shall provide unambiguous detection of physical tampering that might
compromise the TSF.
FPT_PHP.1.2
The TSF shall provide the capability to determine whether physical tampering
with the TSF’s devices or TSF’s elements has occurred.
5.2.5.4
Resistance to Physical Attack (FPT_PHP.3)
FPT_PHP.3.1
The TSF shall resist [
a physical attack for the purpose of gaining access to the
internal components, to damage the anti‐tamper battery, to drain or exhaust
the a
nti‐tamper battery
] to the [
TOE enclosure and any remote controllers
] by
the attacked component becoming permanently disabled.
5.2.5.5
Reliable Time Stamps (FPT_STM.1)
FPT_STM.1.1
The TSF shall be able to provide reliable time stamps.
5.2.5.6
TSF Testing (FPT_TST.1)
FPT_TST.1.1
The TSF shall run a suite of self‐tests [
during initial start
‐
up and at the conditions
[upon reset button activation]
] to demonstrate the correct operation of [user
control functions and
[active anti
‐
tamper functionality]
].
FPT_TST.1.2
The TSF shall provide authorized users with the capability to verify the integrity
of [
TSF data
].
FPT_TST.1.3
The TSF shall provide authorized users with the capability to verify the integrity
of [
TSF
].
