Tim Myers' Security Evaluations FAQ / Blog

Security Evaluations, Microsoft Security Engineering Center (MSEC), Trustworthy Computing Security

Microsoft Windows Server 2008 R2 Hyper-V is now Common Criteria Certified

Microsoft Windows Server 2008 R2 Hyper-V is now Common Criteria Certified. For details, see: Windows...

Author: Tim Myers - SECURITY Date: 03/23/2012

Microsoft Windows 7, Windows Server 2008 R2 and SQL Server 2008 SP2 Now Certified as Common Criteria Validated Products

For details, please see the Future Fed blog post:...

Author: Tim Myers - SECURITY Date: 04/27/2011

Windows Vista and Windows Server 2008 are on the NIAP CCEVS Validated Products List

Microsoft Windows Vista and Microsoft Windows Server 2008 were Common Criteria (CC) validated on...

Author: Tim Myers - SECURITY Date: 12/02/2009

Windows 7 and Windows Server 2008 R2 in Common Criteria Evaluation

Microsoft Windows 7 and Microsoft Windows Server 2008 R2 formally entered evaluation for Common...

Author: Tim Myers - SECURITY Date: 11/05/2009

Windows Server 2003 Web Edition and CC Revisited

Microsoft Windows Server 2003 Web Edition is a proper subset of the Windows Server 2003 editions...

Author: Tim Myers - SECURITY Date: 09/30/2009

Windows Vista and Windows Server 2008 are Common Criteria Certified at EAL4+

Microsoft Windows Vista and Microsoft Windows Server 2008 received their Common Criteria (CC)...

Author: Tim Myers - SECURITY Date: 09/23/2009

Microsoft Windows Server 2008 Hyper-V Role is now Common Criteria Certified at EAL4+

Microsoft Windows Server 2008 Hyper-V Role has successfully completed validation against the Common...

Author: Tim Myers - SECURITY Date: 09/23/2009

Windows Mobile 6.1 Certified with Common Criteria at EAL4

Windows Mobile 6.1 with System Center Mobile Device Manager 2008 and System Center Mobile Device...

Author: Tim Myers - SECURITY Date: 09/23/2009

Does Microsoft plan to evaluate Windows 7 and Windows Server 2008 R2 under CC?

Q: Does Microsoft plan to evaluate Windows 7 and Windows Server 2008 R2 under CC? A: Microsoft has...

Author: Tim Myers - SECURITY Date: 08/04/2009

The Database Engine of Microsoft SQL Server 2005 SP2 Common Criteria Certification

The Database Engine of Microsoft SQL Server 2005 SP2, Enterprise Edition (English) Version...

Author: Tim Myers - SECURITY Date: 07/08/2009

Microsoft SQL Server 2000 TCSEC Class C2 Certification

Microsoft SQL Server 2000 was validated against the DoD/NSA NCSC Trusted Computer System Evaluation...

Author: Tim Myers - SECURITY Date: 07/08/2009

Has Windows Storage Server 2003 SP1 been Common Criteria Certified?

No, Windows Storage Server 2003 SP1 has not been certified/validated in a Common Criteria (CC)...

Author: Tim Myers - SECURITY Date: 06/18/2009

SharePoint DoD 5015.2 Certification

Microsoft Office SharePoint Server 2007 with DoD Add-On Pack complies with the DoD 5015.02-STD Joint...

Author: Tim Myers - SECURITY Date: 04/14/2009

SQL Server 2008 Database Engine CC Validated at EAL1+

The Database Engine of Microsoft SQL Server 2008 Enterprise Edition (English) x86 and x64, Version...

Author: Tim Myers - SECURITY Date: 04/08/2009

Has Windows Server 2003 Web Edition been certified?

It is understood that there are no plans to evaluate the Web Edition of Windows Server 2003 against...

Author: Tim Myers - SECURITY Date: 03/27/2009

Internet Security and Acceleration (ISA) Server 2006 is Common Criteria Certified

Microsoft Internet Security & Acceleration (ISA) Server 2006 has been validated and certified to...

Author: Tim Myers - SECURITY Date: 03/09/2009

When will SP 1,2,3,… be CC certified?

Generally, we do not certify every Service Pack (SP), just major product releases. For example, our...

Author: Tim Myers - SECURITY Date: 02/23/2009

Is IIS included in the Windows Server 2003 R2 CC evaluation?

The Common Criteria validation of Windows Server 2003 R2 includes IIS as a web server. Please see...

Author: Tim Myers - SECURITY Date: 02/12/2009

Active Directory Federation Services (ADFS) and CC

Active Directory Federation Services (ADFS) was included in the Common Criteria validation of...

Author: Tim Myers - SECURITY Date: 02/12/2009

Windows 2000 CC Certification and Microsoft Support Lifecycle

Microsoft Windows 2000 Professional, Server, and Advanced Server were Common Criteria certified in...

Author: Tim Myers - SECURITY Date: 02/07/2009

What about Windows XP Embedded?

MS Windows XP Embedded, Version 5.1 SP2 has been Common Criteria certified. This gives embedded...

Author: Tim Myers - SECURITY Date: 02/07/2009

Have Terminal Services and RDP been certified?

Terminal Services and the RDP protocol were not included in the Target of Evaluation (TOE) of the...

Author: Tim Myers - SECURITY Date: 02/07/2009

Trusted System Development Methodology (TSDM) Level 2 vs. Common Criteria

Certain draft PKI RFCs and DoD PKI requirements documents refer to the “Trusted System Development...

Author: Tim Myers - SECURITY Date: 01/08/2009

What actually makes products more secure? SDL

Common Criteria security evaluations and certifications give us some measurable assurance that...

Author: Tim Myers - SECURITY Date: 12/09/2008

Can you decipher this message?

Can you decipher this message? If so, please send me an email with the answer. NEPUZ PUSBN DGDTN...

Author: Tim Myers - SECURITY Date: 11/03/2008

Windows Common Criteria Security Guidance Documentation and Technical Reports on TechNet

You can find all the latest Common Criteria security guidance documentation for Windows on TechNet:...

Author: Tim Myers - SECURITY Date: 10/29/2008

"Are we there yet?"

One way to be automatically notified when a Common Criteria validation has successfully completed,...

Author: Tim Myers - SECURITY Date: 10/14/2008

Microsoft Windows Vista and Windows Server 2008 are still in evaluation for CC EAL4+

Since the successful Common Criteria certification of Microsoft Windows Vista and Windows Server...

Author: Tim Myers - SECURITY Date: 10/13/2008

Where is the Common Criteria Certificate for Microsoft Windows XP SP3?

Microsoft Windows XP with SP2, and Windows Server 2003 SP2 R2 have been validated, but it is not our...

Author: Tim Myers - SECURITY Date: 10/10/2008

Microsoft Windows Vista and Windows Server 2008 are CC EAL1 Certified

Jeju, South Korea -- Of particular interest to our customers in Japan, on September 24th, 2008,...

Author: Tim Myers - SECURITY Date: 10/06/2008

Is the Estimated Completion Date for the CC certification of Windows Vista correct?

Those of us who monitor* the official NIAP CCEVS: Products and Protection Profiles In Evaluation...

Author: Tim Myers - SECURITY Date: 08/06/2008

Is BitLocker security being evaluated?

Yes! BitLocker is included in the Windows Vista / Windows Server 2008 Common Criteria EAL4+...

Author: Tim Myers - SECURITY Date: 08/05/2008

Windows Vista and Windows Server 2008 CC Evaluations

The Common Criteria (CC) Evaluation Assurance Level (EAL) 1 evaluation of Microsoft Windows Vista...

Author: Tim Myers - SECURITY Date: 08/04/2008

Common Criteria Certified Microsoft Products

For the official record of all Common Criteria Certified Microsoft products, see:...

Author: Tim Myers - SECURITY Date: 07/29/2008

About Tim Myers' Blog!

This blog will help you find information about the security evaluations of Microsoft's products. The...

Author: Tim Myers - SECURITY Date: 07/29/2008