X

Glenn Faden's Blog

  • March 30, 2014

Oracle Solaris 11.1 Gets Common Criteria Certification

Guest Author

The Oracle Solaris 11.1 operating system achieved a Common Criteria certification on March 18, 2014 at EAL4+  under the Canadian Common Criteria Scheme (CCCS) conformant to the BSI Operating System Protection Profile v2.0 2010-06-01 with the following 4 extended packages.

  1. Advanced Management v2.0, 2010-05-28
  2. Extended identification & Authentication v2.0, 2010-05-28 
  3. Labeled Security v2.0, 2010-05-28
  4. Virtualization v2.0, 2010-05-28 

The evaluation is summarized in the list of certified products. Here is copy of the actual certificate.

This is a major accomplishment which has been over two years in the making. Oracle Solaris 11 was formally accepted into evaluation on January 31, 2012. Unlike previous Solaris evaluations, the Trusted Extensions functionality is included as a standard feature of the OS, as well as Role-Based Access Control and Solaris Zones. In addition the evaluation required FIPS evaluation of the cryptographic modules. The details are included in the Certification Report.

Join the discussion

Comments ( 3 )
  • Dave Walker Tuesday, April 1, 2014

    With the various tribulations going on behind the scenes around Common Criteria profiles, I wondered whether Solaris' certification process would come out of the limbo it seemed to have gone into - I'm therefore very pleased and relieved to see this announcement, especially as it has Trusted Extensions certified, too :-).

    Hearty congratulations to all involved!


  • Venkata Sivareddy Tuesday, September 2, 2014

    Hi ,

    How to set the common profile to all users in solaris 11.1?


  • Glenn Faden Tuesday, September 2, 2014

    Default profiles that apply to all users can be specified using the PROFS_GRANTED keyword in policy.conf(4). This property takes a list of comma separated profile names.

    If you want to exempt specific users from getting the default profiles, you can assign them the Stop profile which ignores the PROFS_GRANTED list.


Please enter your name.Please provide a valid email address.Please enter a comment.CAPTCHA challenge response provided was incorrect. Please try again.