
Fuji Xerox C2265/C2263
Security Target
- 88 -
Copyright
2016 by Fuji Xerox Co., Ltd
FDP_ACF.1(h)
- Management of user identifier
- Management of owner identifier of
D.FUNC
FDP_RIP.1
Management of data on Hard Disk Data
Overwrite
a) The choice of when to perform
residual information protection (i.e.
upon allocation or deallocation)
could be made configurable within
the TOE.
FIA_AFL.1(a)
FIA_AFL.1(b)
Management of data on access denial
due to authentication failure of system
administrator
a) Management of the threshold for
unsuccessful authentication
attempts;
b) Management of actions to be
taken in the event of an
authentication failure.
FIA_ATD.1
none
Reason: there are no additional security
attributes and there are no additional
security attributes to be managed.
a) If so indicated in the assignment,
the authorized administrator might
be able to define additional security
attributes for users.
FIA_SOS.1
none
Reason: The metric is fixed and is not
managed.
a) the management of the metric
used to verify the secrets.
FIA_UAU.1
- Management of data on use of
password entered from MFD control
panel in user authentication.
- Management of data on key operator,
SA, and general user ( password)
- Management of data on user
authentication.
- Management of data on minimum
user password length
a) Management of the
authentication data by an
administrator;
b) Management of the
authentication data by the
associated user;
c) Managing the list of actions that
can be taken before the user is
authenticated.
FIA_UAU.7
-
There are no management activities
foreseen.
FIA_UID.1
- Management of data on key operator,
SA, and general user (ID)
- Management of data on user
authentication.
a) The management of the user
identities.
b) If an authorised administrator can
change the actions allowed before
identification, the managing of the
action lists.
FIA_USB.1
none
Reason: action and security attributes
are fixed and are not managed.
a) an authorized administrator can
define default subject security
attributes.