IOGear GCS1212TAA4C Скачать руководство пользователя страница 22

Страница: 22 / 60

Security Target

Version 1.1

2022-03-08

•

FDP_SWI_EXT.1

–

PSD Switching

•

FDP_SWI_EXT.2

–

PSD Switching Methods

•

FDP_SWI_EXT.3

–

Tied Switching

•

FDP_TER_EXT.1

–

Session Termination

•

FDP_TER_EXT.2

–

Session Termination of Removed Devices

•

FDP_TER_EXT.3

–

Session Termination Upon Switching

•

FDP_UAI_EXT.1

–

User Authentication Isolation

•

FDP_UDF_EXT.1/AO

–

Unidirectional Data Flow (Audio Output)

•

FDP_UDF_EXT.1/KM

–

Unidirectional Data Flow (Keyboard/Mouse)

•

FDP_UDF_EXT.1/VI

–

Unidirectional Data Flow (Video Output)

•

FPT_FLS_EXT.1

–

Failure with Preservation of Secure State

•

FPT_NTA_EXT.1

–

No Access to TOE

•

FPT_TST_EXT.1

–

TSF Testing

•

FTA_CIN_EXT.1

–

Continuous Indications

5.2

TOE Security Functional Requirements (PSD, MOD_AO_V1.0, MOD_KM_V1.0,
MOD_UA_V1.0)

This section identifies the TOE Security Functional Requirements for the PSD 4.0, and modules
[MOD_AO_V1.0], [MOD_KM_V1.0], [MOD_UA_V1.0]. Section 5.3 identifies the requirements for the
Video/Display Device Module.

Tables 7, 9, 10 and 11 identify the SFRs that are satisfied by the TOE.

Table 7: TOE Security Functional Components

Requirement Class

Requirement Component

FAU: Security Audit

FAU_GEN.1

–

Audit Data Generation

FDP: User Data Protection

FDP_AFL_EXT.1

–

Audio Filtration

FDP_APC_EXT.1/AO

–

Active PSD Connections (Audio Output)

FDP_APC_EXT.1/KM

–

Active PSD Connections (Keyboard/Mouse)

FDP_APC_EXT.1/UA

–

Active PSD Connections (User Authentication)

FDP_APC_EXT.1/VI

–

Active PSD Connections (Video/Display)

FDP_CDS_EXT.1

–

Connected Displays Supported

FDP_FIL_EXT.1/KM

–

Device Filtering (Keyboard/Mouse)

FDP_FIL_EXT.1/UA

–

Device Filtering (User Authentication Devices)

FDP_PDC_EXT.1

–

Peripheral Device Connection

FDP_PDC_EXT.2/AO

–

Peripheral Device Connection (Audio Output)

Содержание GCS1212TAA4C

Страница 1: ...VM Switch Series CAC Models Security Target Version 1 1 2022 03 08 Prepared for 15365 Barranca Pkwy Irvine CA 92618 Prepared by Common Criteria Testing Laboratory 6841 Benjamin Franklin Drive Columbia...

Страница 2: ...sion Author Modifications 0 1 Leidos Initial Version 0 2 Leidos Updates based on vendor and evaluation reviews 0 3 Leidos Updates for validator check in comments 1 0 Leidos Minor Updates for evaluator...

Страница 3: ...Security Objectives 15 4 1 Security Objectives for the Operational Environment 15 5 IT Security Requirements 16 5 1 Extended Requirements 16 5 2 TOE Security Functional Requirements PSD MOD_AO_V1 0 M...

Страница 4: ...9 FDP_RIP 1 KM Residual Information Protection Keyboard Data FDP_RIP_EXT 1 Residual Information Protection and FDP_RIP_EXT 2 Purge of Residual Information 38 6 2 10 FDP_SWI_EXT 1 PSD Switching FDP_SWI...

Страница 5: ...KVM Switch Computer Interfaces and TOE Models 8 Table 6 Security Objectives for the Operational Environment 15 Table 7 TOE Security Functional Components 17 Table 8 Audio Filtration Specifications 19...

Страница 6: ...et of Evaluation TOE Identification IOGEAR Secure KVM Switch Series CAC Models TOE Versions The following table identifies the model numbers per configuration The firmware version for all models is v1...

Страница 7: ...1 0 19 July 2019 MOD_AO_V1 0 PP Module for Keyboard Mouse Devices Version 1 0 19 July 2019 MOD_KM_V1 0 o including the following optional and selection based SFRs FDP_FIL_EXT 1 KM FDP_RIP 1 KM and FDP...

Страница 8: ...assignment Assignments within Selections are denoted by italicized bold text Iteration operation is identified with a slash and an identifier e g KM Additional iterations made by the ST author are def...

Страница 9: ...is powered off non volatile or not volatile Monitoring The ability of a User to receive an indicator of the current Active Interface Non Selected Computer A Connected Computer that has no Active Inter...

Страница 10: ...authenticate to a computer e g smart card reader biometric authentication device proximity card reader User Data Information that the User inputs to the Connected Computer or is output to the User fr...

Страница 11: ...cus to the computer attached to its corresponding port 2 2 TOE Overview The TOE is the IOGEAR Secure Switch series of products with CAC The TOE allows users to connect a single set of peripherals to i...

Страница 12: ...tched peripherals on the console side are analog audio output USB keyboard and mouse USB user authentication device and DisplayPort HDMI or DVI I video output depending on model Separate USB cables ar...

Страница 13: ...CS1428TAA4C GCS1218TAA4C GCS1228TAA4C Table 5 IOGEAR Secure KVM Switch Computer Interfaces and TOE Models Model No Computer Video Input Interface Computer Keyboard Mouse Computer Audio Input Computer...

Страница 14: ...devices and connected computers as specified in PSD Data leakage is prevented across the TOE to avoid compromise of the user s information The Secure KVM Switch products automatically clear the inter...

Страница 15: ...er Port 1 The dedicated secure source computer must have its own monitor keyboard and mouse connected for installation and operation A detailed description of the TOE security features can be found in...

Страница 16: ...a Class A digital device pursuant to Part 15 of the Federal Communications Commission rules If not installed and used in accordance with the guidance instructions the device may cause harmful interfe...

Страница 17: ...emove all settings previously configured by the Administrator such as USB device whitelist blacklist Once the Reset to Factory Default function has been completed the Secure KVM will terminate the Adm...

Страница 18: ...curity related guidance material for all devices in the evaluated configuration Guidance Documentation IOGEAR 2 4 8 Port USB DVI HDMI DisplayPort Single Dual View Secure KVM Switch Administrator s Gui...

Страница 19: ...assumptions about the operational environment of the TOE In general the PSD has presented a Security Problem Definition appropriate for peripheral sharing devices The IOGEAR Secure KVM Switch Series s...

Страница 20: ...at microphones are not plugged into the TOE audio output interfaces OE NO_SPECIAL_ANALOG_CAPABILITIES from MOD VI_V1 0 The operational environment will not have special analog data collection cards or...

Страница 21: ...he following extended SFRs and since they are not redefined in this ST the PSD and associated modules should be consulted for more information in regard to those CC extensions FDP_AFL_EXT 1 Audio Filt...

Страница 22: ...dentifies the TOE Security Functional Requirements for the PSD 4 0 and modules MOD_AO_V1 0 MOD_KM_V1 0 MOD_UA_V1 0 Section 5 3 identifies the requirements for the Video Display Device Module Tables 7...

Страница 23: ...I_EXT 1 PSD Switching FDP_SWI_EXT 2 PSD Switching Methods FDP_SWI_EXT 3 Tied Switching FDP_TER_EXT 1 Session Termination FDP_TER_EXT 2 Session Termination or Removed Devices FDP_TER_EXT 3 Session Term...

Страница 24: ...nd rejections modification of the TOE user authentication device filtering whitelist and blacklist modification of the TOE keyboard mouse filtering blacklist Reset to Factory Default view audit logs c...

Страница 25: ...This SFR is originally defined in the Base PP but is refined and iterated to apply to the audio output interface per section 5 1 2 of the Audio Output PP Module 5 2 2 3 Active PSD Connections Keyboar...

Страница 26: ...plication Note This SFR is originally defined in the Base PP but is refined and iterated to apply to the video interface per section 5 1 2 of the Video Display PP Module 5 2 2 6 Connected Displays Sup...

Страница 27: ...pheral is rejected 5 2 2 10Peripheral Device Connection Audio Output FDP_PDC_EXT 2 AO FDP_PDC_EXT 2 1 AO The TSF shall allow connections with authorized devices as defined in Appendix E of the AO Modu...

Страница 28: ...interface protocols as defined in the PP Module for User Authentication Devices authorized devices presenting authorized interface protocols as defined in the PP Module for Video Display Devices upon...

Страница 29: ...PDC_EXT 2 2 VI The TSF shall allow connections with authorized devices presenting authorized interface protocols as defined in Appendix E of the VI Module and authorized devices presenting authorized...

Страница 30: ...r restore factory defaults function accessible to the administrator to delete all TOE stored configuration and settings except for logging 5 2 2 21PSD Switching FDP_SWI_EXT 1 FDP_SWI_EXT 1 1 The TSF s...

Страница 31: ...io output computer interface to the TOE analog audio output peripheral interface 5 2 2 29Unidirectional Data Flow Keyboard Mouse FDP_UDF_EXT 1 KM FDP_UDF_EXT 1 1 KM The TSF shall ensure keyboard mouse...

Страница 32: ...1 Failure with Preservation of Secure State FPT_FLS_EXT 1 FPT_FLS_EXT 1 1 The TSF shall preserve a secure state when the following types of failures occur failure of the power on self test and failur...

Страница 33: ...e TSF shall display a visible indication of the selected computers at all times when the TOE is powered FTA_CIN_EXT 1 22 The TSF shall implement the visible indication using the following mechanism ea...

Страница 34: ...Security Functional Components DP Models Requirement Class Requirement Component FDP User Data Protection FDP_IPC_EXT 1 DP Internal Protocol Conversion FDP_PDC_EXT 3 VI DP Authorized Connection Proto...

Страница 35: ...AA4C GCS1314TAA4C GCS1322TAA4C and GCS1324TAA4C Table 10 TOE Security Functional Components H Models Requirement Class Requirement Component FDP User Data Protection FDP_PDC_EXT 3 VI H Authorized Conn...

Страница 36: ...CS1218TAA4C GCS1222TAA4C GCS1224TAA4C and GCS1228TAA4C Table 11 TOE Security Functional Components D Models Requirement Class Requirement Component FDP User Data Protection FDP_PDC_EXT 3 VI D Authoriz...

Страница 37: ...e TOE are included by reference from the PSD Table 12 Assurance Components Requirement Class Requirement Component Security Target ASE Conformance Claims ASE_CCL 1 Extended Components Definition ASE_E...

Страница 38: ...n the text editor by entering the command LIST The event logs are divided into two types critical and non critical The Log Data Area displays the critical and non critical Log data Each logged event i...

Страница 39: ...es in Section 2 2 for details on TOE computer peripherals and connected computer port interfaces for each specific TOE model The TOE ensures that any previous information content of a resource is made...

Страница 40: ...wo connected displays at a time The HDMI models GCS1312TAA4C and GCS1314TAA4C each support one connected display While GCS1322TAA4C and GCS1324TAA4C each support two connected displays at a time The D...

Страница 41: ...has its own default password and like the password for the TOE Administrator Logon function should be changed after first logon Guidance instructs the administrator not to use the same password as wa...

Страница 42: ...to the HDMI protocol Since the TOE converts DisplayPort signals at the computer interface to HDMI signals at the console interface DisplayPort is not identified as an authorized protocol for the PSD c...

Страница 43: ...rict security standards and policy for the IOGEAR Secure KVM Switch If supported only basic HID keyboard operations will function 6 2 7 FDP_PUD_EXT 1 Powering Unauthorized Devices The TOE does not sup...

Страница 44: ...ogether and there are no options to switch peripherals independently from the keyboard and mouse When the PSD is attached to a 2 Port Secure KVM Switch only pushbuttons numbered 1 and 2 will be detect...

Страница 45: ...deo function filters the AUX channel by converting it to EDID only DisplayPort video is converted into HDMI video stream Monitor s EDID is through EDID channel read filtered and sent to Port s EDID EE...

Страница 46: ...tocols The H Models satisfy the following SFRs FDP_PDC_EXT 3 VI H Authorized Connection Protocols Video Output H Model FDP_SPR_EXT 1 HDMI H Sub Protocol Rules HDMI Protocol H Module 6 2 12 3D Models T...

Страница 47: ...must change the password after the first successful logon The password is case sensitive and new passwords must contain at least 1 lower case letter at least 1 upper case letter at least 1 numeric cha...

Страница 48: ...any logical modification may be prevented Access to the TOE firmware software or its memory via its accessible ports is prevented No access is available to modify the TOE or its memory To mitigate the...

Страница 49: ...t RPS connected will be permanently disabled and all the front panel LEDs except the Power LED will flash continuously A mechanical intrusion is detected by a pressure switch that trips when the enclo...

Страница 50: ...t failure the TOE does not shut down The anti tampering self tests include the correct operation and tampering of the internal KVM and RPS batteries A KVM detecting tampering during normal operation w...

Страница 51: ...abled since it fails the button jam self test Users can verify the integrity of the TOE by triggering a self test e g by powering on or rebooting the TOE and examining the front panel LEDs for self te...

Страница 52: ...green to indicate that the CAC function is enabled and the computer attached to its corresponding port has the CAC focus note that CAC switching is always synchronized with computer selection The CAC...

Страница 53: ...ined in Section 3 the Security Problem Definition of the PSD and modules have been included in this ST by reference As explained in Section 4 Security Objectives the Security Objectives of the PSD and...

Страница 54: ...otection PSD FDP_RIP_EXT 2 Purge of Residual Information PSD FDP_SPR_EXT 1 DP DP Sub Protocol Rules DisplayPort Protocol DP Models MOD VI_V1 0 FDP_SPR_EXT 1 DVI I D Sub Protocol Rules DVI I Protocol D...

Страница 55: ...urity Roles PSD FPT Protection of the TSF FPT_FLS_EXT 1 Failure with Preservation of Secure State PSD FPT_NTA_EXT 1 No Access to TOE PSD FPT_PHP 1 Passive Detection of Physical Attack PSD FPT_PHP 3 Re...

Страница 56: ...ments are satisfied by aspects of the corresponding security function The set of security functions work together to satisfy all of the security functions and assurance requirements Furthermore all of...

Страница 57: ...3 VI DP X FDP_PDC_EXT 3 VI H X FDP_PDC_EXT 3 VI D X FDP_PDC_EXT 4 X FDP_PUD_EXT 1 X FDP_PWR_EXT 1 X FDP_RIP 1 KM X FDP_RIP_EXT 1 X FDP_RIP_EXT 2 X FDP_SPR_EXT 1 DP DP X FDP_SPR_EXT 1 DVI I D X FDP_SPR...

Страница 58: ...22 03 08 53 Specifications Security Audit User Data Protection Identification and Authentication Security Management Protection of the TSF TOE Access FPT_PHP 1 X FPT_PHP 3 X FPT_STM 1 X FPT_TST 1 X FP...

Страница 59: ...ata 2 Host Controller Device Emulators ATEN SICG8022A Embedded RAM 1 Undisclosed Volatile May contain user data 3 System EEPROM ATMEL AT24C512 EEPROM 2 512K bits Non volatile No user data 4 System Fla...

Страница 60: ...tory Default KVM reset reboot or power cycle 3 The Flash does not contain user data Firmware code is stored in the Flash and cannot be updated or rewritten The firmware code remains unchanged after a...

Результаты поиска

Содержание GCS1212TAA4C

Отзывы:

Похожие инструкции для GCS1212TAA4C

Бренды по названию

Популярные бренды

IOGear GCS1212TAA4C, Руководство пользователя

Результаты поиска

Содержание GCS1212TAA4C

Отзывы:

Похожие инструкции для GCS1212TAA4C

Бренды по названию

Популярные бренды